Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93983172D7F811EF84B2BAA7762E951A.roa
File: 93983172D7F811EF84B2BAA7762E951A.roa (raw, json)
Hash identifier: B5/ryGkDMmGc7BNVNkfOwclMj0sucaZpVk8TPci6qWU=
Subject key identifier: F5:46:4F:55:94:72:AC:7D:F7:76:DA:F9:3E:1D:4C:5D:D5:45:3D:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DC4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93983172D7F811EF84B2BAA7762E951A.roa
Signing time: Tue 21 Jan 2025 13:06:50 +0000
ROA not before: Tue 21 Jan 2025 13:06:46 +0000
ROA not after: Sat 01 Feb 2025 13:06:46 +0000
asID: 48031
IP address blocks: 156.246.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69060 (0x10dc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:06:46 2025 GMT
Not After : Feb 1 13:06:46 2025 GMT
Subject: CN=678f9bea-56c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e5:46:71:6b:56:8b:91:07:dd:93:af:ce:c4:
ce:61:71:b2:82:a2:a4:01:6f:f6:23:0b:0f:1f:f7:
8b:80:3d:71:e1:34:35:8a:dc:df:38:a2:3b:bb:62:
c0:2b:7a:2a:64:54:9d:31:20:e6:18:c2:00:9c:8a:
2c:43:f5:d3:a7:77:e6:9f:05:5f:f8:a3:cf:99:fd:
47:8b:05:13:b5:7c:47:44:c5:3f:4f:1f:2f:31:ba:
3c:35:f1:b5:45:b5:27:30:c7:54:80:89:bc:67:df:
90:d1:26:4b:9e:19:56:f5:b2:0f:fd:94:95:88:ed:
85:8f:a7:d6:49:f8:c4:58:51:e4:58:d5:7c:ac:ba:
e2:19:f9:a4:9c:87:ed:8e:a4:b2:23:6e:bc:3d:25:
1e:20:bf:83:e7:fd:57:0b:17:ab:f3:e2:99:23:03:
b3:e1:f9:a7:03:6b:b0:1d:f9:aa:ec:72:bb:27:ee:
73:f5:b6:cf:79:81:51:4b:3c:0e:58:29:6c:7e:d6:
81:66:5e:a1:66:c0:ae:7b:06:f1:91:b3:28:cc:f4:
a4:be:1a:b0:0b:2b:5a:ed:77:29:62:fa:fa:3a:83:
be:b0:66:72:a0:3e:6e:a9:d9:61:a5:2c:cd:3c:90:
11:6a:91:c0:5e:14:18:00:d2:08:78:fa:3b:f4:3d:
a9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:46:4F:55:94:72:AC:7D:F7:76:DA:F9:3E:1D:4C:5D:D5:45:3D:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93983172D7F811EF84B2BAA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.131.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:25:8d:d3:4a:61:3d:8c:e8:a9:08:13:e6:d9:fb:63:82:be:
02:9a:ba:2f:b7:46:c5:7e:d2:48:4e:2d:f3:48:8d:23:bc:cc:
84:2b:d9:74:b3:5d:0e:d5:94:38:80:83:35:07:54:a3:5b:92:
74:17:f9:af:ed:57:47:1a:df:9f:ed:fa:c8:a8:0b:f5:33:4e:
2c:7f:f7:7f:da:8c:d7:1e:14:7e:03:2f:08:48:19:b0:7a:c9:
c3:33:f5:c0:e3:b5:59:f6:e6:1c:d2:76:c0:93:7c:d8:6b:9e:
59:0b:e1:67:35:0b:0c:bf:79:a1:5b:30:af:cf:8d:92:15:5f:
ba:76:24:66:a6:a7:10:1b:f2:24:6c:53:46:eb:6f:82:29:79:
a1:36:06:99:50:46:81:ad:20:94:2a:d7:5b:f4:24:84:fb:4b:
c1:a5:23:f3:6b:76:0e:ea:2b:6f:9f:7b:e3:e9:47:dc:04:52:
3c:48:08:9d:01:ea:23:0e:38:36:10:54:16:b8:16:04:e7:fa:
53:58:3a:0b:9f:86:13:66:0c:fe:ee:92:ab:e3:78:57:00:b4:
91:5d:a3:c1:cf:ce:3b:ce:d0:24:3c:7b:57:09:ca:dd:00:02:
93:ad:f0:a1:8c:2d:43:42:a7:42:03:76:00:ef:33:6a:5e:32:
f9:b0:20:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:50:54 2025 by rpki-client