Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04B9A92ADCD211EF8E3F76BD762E951A.roa
File: 04B9A92ADCD211EF8E3F76BD762E951A.roa (raw, json)
Hash identifier: rMsuk6o4L5Vp3hH1sHIWqiFdBWdP9EQcDWK5TFwMdXA=
Subject key identifier: 63:DA:BF:38:E5:50:9D:07:F9:43:8E:2E:87:C1:9E:C5:3D:86:85:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01154B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04B9A92ADCD211EF8E3F76BD762E951A.roa
Signing time: Mon 27 Jan 2025 17:13:25 +0000
ROA not before: Mon 27 Jan 2025 17:13:22 +0000
ROA not after: Sat 15 Feb 2025 17:13:22 +0000
asID: 39600
IP address blocks: 156.237.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70987 (0x1154b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 17:13:22 2025 GMT
Not After : Feb 15 17:13:22 2025 GMT
Subject: CN=6797beb5-ee8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fc:fc:64:35:c0:b7:27:64:73:f4:6a:be:d6:
64:4d:89:6c:a7:9c:74:7c:13:59:9f:1a:4d:38:0f:
ee:65:b8:64:88:16:e6:bb:7b:3b:15:74:6a:49:9e:
da:22:bb:88:37:1d:42:20:05:9a:7f:1d:fe:58:69:
49:43:d0:0f:ad:4b:f4:d6:62:58:65:ab:b2:3b:8e:
fa:e4:6e:8e:7b:0a:a5:3b:38:18:ca:f8:ad:61:59:
3e:9f:fc:b2:ba:aa:28:cf:bc:bc:c9:36:d5:44:c8:
1c:6c:4a:b8:e8:5a:3e:8a:15:e1:3a:f8:61:24:04:
94:83:f5:7c:99:59:99:c4:c0:fc:f8:b0:fb:4a:cc:
11:60:d5:58:5e:13:07:5e:27:b5:dc:3a:8e:1d:da:
77:62:5e:a9:56:a1:ba:ba:04:58:0a:79:76:34:82:
b6:4d:b2:76:3e:b4:8c:dc:6c:03:12:d9:d9:21:ab:
a7:ab:7f:a1:5f:bb:4c:1c:17:cb:39:18:c0:90:43:
2a:e1:b9:4b:64:f3:a9:47:cc:9c:ac:ee:53:21:6e:
66:dd:a8:d2:45:97:6b:e5:95:55:bf:19:cc:32:1c:
9b:98:ec:07:dc:51:e2:e2:35:bb:88:ad:d0:8c:6f:
f9:2a:be:aa:17:02:d6:99:2f:25:df:fc:b9:13:8c:
ad:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DA:BF:38:E5:50:9D:07:F9:43:8E:2E:87:C1:9E:C5:3D:86:85:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04B9A92ADCD211EF8E3F76BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.114.0/24
Signature Algorithm: sha256WithRSAEncryption
79:93:08:80:20:b6:95:d9:b8:8a:39:95:7a:a0:31:6d:34:d2:
6b:e2:f5:ca:c6:4c:05:aa:0e:cc:97:53:b7:f7:40:52:f3:71:
c5:0e:63:4d:e6:fb:80:ec:45:74:14:b1:c9:ac:9b:63:31:f7:
cc:bb:05:28:77:b2:ef:2f:5c:e5:07:52:9e:f3:b4:1d:5f:be:
78:e0:ae:78:36:76:5a:97:9d:c5:45:93:54:a3:f5:bb:28:2b:
3b:e3:fd:29:87:25:ba:b7:5a:9b:ab:77:23:11:b6:80:ba:94:
d8:ca:69:40:59:fa:90:84:61:f2:6b:44:23:69:e5:91:b9:9c:
a1:86:12:41:6c:56:95:c9:60:4d:5e:fd:2f:bf:2c:ef:16:18:
17:af:fa:b1:fe:d8:fa:51:d7:4a:ae:fa:cc:d6:ca:1d:fa:2d:
b9:c9:42:ee:3a:c7:84:8a:9e:13:ee:3c:0c:9f:37:69:d7:cc:
aa:8c:7c:70:0f:c7:df:0e:31:61:41:56:4d:12:83:ff:75:52:
dd:c5:38:91:96:3c:e3:37:60:7e:a2:02:d1:90:aa:16:53:7a:
8f:4e:65:57:56:8c:5c:97:e7:48:e4:a1:5a:b0:a0:09:00:66:
1a:59:c7:c0:53:6e:6f:75:b0:c2:39:cc:db:77:80:26:0d:58:
58:dd:41:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:36:29 2025 by rpki-client