Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/730CC032D7E711EFBD3DE9B7762E951A.roa
File: 730CC032D7E711EFBD3DE9B7762E951A.roa (raw, json)
Hash identifier: 241dMbAAa/YA5x+qbwRcxWRjCAmeLz3esuqnQfmxacw=
Subject key identifier: E0:12:B3:A1:57:83:2C:3A:95:2F:FF:A6:1F:DA:2A:2E:D8:B1:35:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D54
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/730CC032D7E711EFBD3DE9B7762E951A.roa
Signing time: Tue 21 Jan 2025 11:04:14 +0000
ROA not before: Tue 21 Jan 2025 11:04:10 +0000
ROA not after: Sat 01 Feb 2025 11:04:10 +0000
asID: 44559
IP address blocks: 156.246.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68948 (0x10d54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 11:04:10 2025 GMT
Not After : Feb 1 11:04:10 2025 GMT
Subject: CN=678f7f2e-a3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:c8:73:1d:fa:48:0f:d2:ac:d4:9a:d6:0f:
fc:13:6b:0d:ac:72:0c:7f:d2:44:3b:a4:93:a7:35:
7e:c7:9c:39:65:1c:75:66:42:17:6b:c5:88:12:19:
cd:0d:4f:68:2d:95:e2:8a:64:ea:35:63:b9:b5:da:
25:d7:96:cd:cc:43:5f:de:a7:41:db:2b:61:dc:40:
8c:c1:50:ec:1c:af:78:5f:3a:1b:ab:c2:f4:c9:a4:
5a:49:07:33:31:58:4f:1e:45:0f:3f:77:51:f1:3d:
ab:27:2f:c5:79:36:ce:47:4c:d4:28:5d:83:d1:bb:
55:af:be:68:35:b2:42:d1:e0:5e:f2:52:52:0a:4b:
38:b4:1a:9c:41:61:a6:2e:e6:8d:be:c9:cc:aa:e2:
83:35:57:59:10:ba:36:95:e4:a8:be:3f:04:c9:9e:
0f:09:e6:7e:21:64:48:37:69:a5:a6:f2:e6:67:11:
43:96:2f:18:32:69:a1:b8:ba:32:f2:e2:78:d2:e4:
03:48:0e:64:32:ce:94:a1:a4:a3:9e:44:b9:bf:29:
7a:53:d1:a5:98:61:6e:78:87:83:16:c3:31:d2:1d:
f8:86:80:51:98:01:4d:b0:dd:76:12:6c:04:c2:a0:
17:a0:7c:41:d5:b6:9a:a3:2b:f3:e4:46:0e:92:ec:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:12:B3:A1:57:83:2C:3A:95:2F:FF:A6:1F:DA:2A:2E:D8:B1:35:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/730CC032D7E711EFBD3DE9B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.203.0/24
Signature Algorithm: sha256WithRSAEncryption
67:80:78:4f:ea:70:53:3b:2c:03:4e:66:9c:fe:68:5d:23:e9:
5b:46:b1:60:41:51:5f:5c:1d:ca:15:85:5d:ec:82:54:59:6c:
c5:9e:2c:1f:5e:58:4b:e2:a2:c5:96:0c:a6:c6:04:97:46:43:
6c:ab:ff:bf:72:96:24:12:61:23:44:5f:f6:4b:d3:6f:b3:26:
a6:9a:16:69:1f:79:f3:0f:87:0e:4c:e0:c8:13:a5:51:5e:e6:
0c:fc:33:ab:fe:80:f9:ae:b1:a7:2e:95:15:70:15:f2:df:51:
e1:08:6d:81:ad:22:f5:39:3c:77:e8:24:73:63:02:94:30:1a:
77:c3:9c:b3:1d:52:9e:4c:07:6c:27:9b:fe:59:ab:ea:29:28:
bb:e0:2b:76:07:c8:16:f1:41:f3:d3:18:7f:59:36:b4:94:49:
53:4b:cd:ad:3e:e4:0d:16:7d:3e:98:66:32:73:eb:1e:9f:73:
0e:c9:e5:d1:55:af:cb:8f:e3:07:3d:94:28:57:88:a6:14:90:
7d:39:91:c3:03:d1:ce:d3:85:dc:65:4e:3b:f1:7b:63:c8:ab:
5e:54:16:70:27:2f:ee:a7:ce:05:49:31:1b:a6:ea:d5:d5:e3:
89:92:c8:55:fe:b4:74:aa:dd:46:7e:51:3e:7e:b6:27:46:8d:
35:cb:09:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:19:52 2025 by rpki-client