Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/002731F0DAF411EFB38049AD762E951A.roa
File: 002731F0DAF411EFB38049AD762E951A.roa (raw, json)
Hash identifier: JHQKflTJUQxs+yWA40+XkiU2jIWEa4dZ/4K0PsbFUnw=
Subject key identifier: F8:D0:44:FF:95:D2:AA:03:FE:1C:5C:22:48:9D:1F:17:0F:EE:15:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01116C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/002731F0DAF411EFB38049AD762E951A.roa
Signing time: Sat 25 Jan 2025 08:11:38 +0000
ROA not before: Sat 25 Jan 2025 08:11:34 +0000
ROA not after: Sun 23 Feb 2025 08:11:34 +0000
asID: 44559
IP address blocks: 156.246.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69996 (0x1116c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 08:11:34 2025 GMT
Not After : Feb 23 08:11:34 2025 GMT
Subject: CN=67949cba-2b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:30:27:ca:b7:55:3a:6b:db:66:87:00:9a:
68:54:03:af:f1:28:79:80:9e:e9:aa:91:bd:d0:29:
e9:91:75:e1:7a:36:a7:9d:52:6f:6f:31:a0:09:92:
95:23:a0:95:d0:0d:c4:7a:37:58:48:8e:b2:10:a5:
ab:6c:08:9c:a6:83:6a:62:88:3e:d8:94:5d:6f:16:
f6:0e:da:a2:44:0d:95:1f:41:a4:39:ff:bf:e8:43:
4b:7e:0a:9a:5b:21:78:c6:1f:56:5e:9e:47:09:11:
1c:c7:dd:2e:54:f9:97:9f:99:a8:b6:a3:9e:ee:73:
6c:92:2d:07:b2:3f:89:d0:df:3c:5a:0f:b6:1c:34:
76:3a:13:a2:bd:b4:99:a4:3d:85:f2:38:79:57:b3:
13:f4:59:71:fc:5e:dc:ce:f4:04:d1:06:c6:69:7c:
e4:6f:0f:53:3d:ba:a7:a7:c6:10:1b:0d:0b:d6:ea:
63:ce:b0:b5:03:fa:01:90:e7:92:04:88:3d:0b:ae:
d8:77:20:0e:bb:f6:a1:6f:0d:ef:de:8c:cf:2e:b2:
f1:0b:b7:1e:61:d3:fd:8b:c8:84:ad:de:3b:3a:95:
de:c1:4a:05:b0:13:53:48:5e:51:6b:7e:1b:bf:a3:
0a:e8:36:5c:ad:7f:d1:8c:55:c4:72:ad:a3:de:19:
2e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D0:44:FF:95:D2:AA:03:FE:1C:5C:22:48:9D:1F:17:0F:EE:15:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/002731F0DAF411EFB38049AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.233.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:bb:66:71:a2:b2:f9:0f:b9:3b:56:cf:83:58:97:c1:16:59:
16:08:71:bc:c1:8e:9c:77:e8:87:f5:01:fe:ee:82:22:26:b4:
c7:dc:d8:6b:51:02:8d:0f:93:6c:9b:70:ad:29:6c:a3:34:ae:
7a:25:b0:9f:74:6d:9d:f7:24:18:83:97:02:fd:54:ae:66:24:
b4:0f:84:b4:d5:6b:1c:ea:4d:64:db:b3:27:25:fa:7e:b4:8f:
44:b7:4e:58:b2:77:15:15:1d:ed:d5:e6:07:4c:c2:e9:32:ca:
f6:48:f6:a8:24:bf:e1:27:b8:7e:4c:3c:5f:72:f1:90:99:f6:
16:9b:9c:48:13:e1:ef:f0:8d:e8:43:90:11:a7:14:dc:48:5e:
66:09:5d:f0:fb:40:46:8d:bb:78:56:fc:c8:71:4c:e6:77:d6:
4a:1b:91:c5:ca:45:3f:10:a5:07:fd:bc:7b:2d:8d:b5:7d:96:
6e:49:01:7b:91:bd:10:30:af:eb:d3:fc:97:56:e9:d5:45:26:
6c:e0:bf:89:18:56:da:f5:ca:5d:07:57:18:28:b4:1b:d3:39:
3f:4e:c8:c9:d0:ab:2a:d8:83:34:54:bf:86:88:82:6e:16:23:
8f:1d:b2:9d:51:07:39:77:0e:89:c7:e7:4e:b5:c7:af:51:89:
e8:eb:2e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:01:51 2025 by rpki-client