Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/078CAE5CD97311EF84CE7C7F762E951A.roa
File: 078CAE5CD97311EF84CE7C7F762E951A.roa (raw, json)
Hash identifier: TH2B438TenBp1qY0TMIEYONM4Fy7W95xS5CnB8uDzqo=
Subject key identifier: AD:52:EA:C2:1E:AE:B1:B7:7E:2B:46:25:B6:71:A6:A1:96:54:E1:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F0C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/078CAE5CD97311EF84CE7C7F762E951A.roa
Signing time: Thu 23 Jan 2025 10:15:54 +0000
ROA not before: Thu 23 Jan 2025 10:15:51 +0000
ROA not after: Sat 15 Mar 2025 10:15:51 +0000
asID: 138915
IP address blocks: 156.244.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69388 (0x10f0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 10:15:51 2025 GMT
Not After : Mar 15 10:15:51 2025 GMT
Subject: CN=679216da-0ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:56:aa:46:06:b2:8c:53:c3:0c:9b:52:db:
a5:3c:95:a4:9e:90:ad:b4:eb:ff:64:33:05:a2:8c:
e5:f9:b5:d7:4f:5c:85:0d:5b:28:eb:51:cc:73:6d:
63:21:98:1d:85:29:e8:e4:ad:1f:e8:cb:fe:c1:fb:
d4:02:a4:75:05:35:b9:05:f7:fe:74:ab:ec:0f:0c:
c1:c5:1f:99:e3:05:fe:32:6f:1b:88:62:b4:f7:44:
da:15:0f:81:26:4a:48:4d:32:25:13:fd:76:0f:b9:
41:09:8f:30:73:f0:91:93:6d:4d:54:7a:e5:41:03:
62:d1:19:64:84:85:b6:2e:d1:81:8c:37:d4:57:41:
e2:77:69:77:46:7b:49:37:9a:3c:93:11:6c:4c:bc:
1d:b8:92:80:90:b6:95:c6:df:43:ed:bb:ec:45:c1:
2c:dd:eb:02:15:66:e8:3f:98:94:2c:91:51:38:5d:
f3:d3:9f:83:10:16:94:7c:e6:d0:2d:54:3a:9f:e1:
20:e8:ed:b3:fa:7b:3b:91:db:c6:62:80:23:86:49:
a9:b1:62:dd:08:83:de:a7:6d:6d:d9:d7:d9:68:bc:
21:c1:6e:44:fd:8d:ae:7c:c5:57:63:ef:fd:2d:85:
e7:de:b5:7d:cb:c8:e4:c9:19:a9:1a:b7:7b:79:85:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:52:EA:C2:1E:AE:B1:B7:7E:2B:46:25:B6:71:A6:A1:96:54:E1:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/078CAE5CD97311EF84CE7C7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.5.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:8b:1a:f1:3b:ec:d1:31:b1:87:94:25:80:b6:1c:35:a6:c5:
e5:44:bc:1c:d5:94:bc:8e:de:9b:50:56:14:e3:6b:1f:6b:84:
07:d1:92:88:86:96:86:17:44:ea:7e:62:78:4e:21:cd:7e:8d:
85:db:6d:c0:38:48:92:4b:c0:c1:f2:cb:61:00:3b:3c:1c:ec:
32:ca:45:ec:5a:cf:ad:66:b2:84:26:53:87:53:73:f1:8c:9d:
7f:c3:79:ef:60:9e:8d:d4:1f:1a:f6:72:f3:5f:a5:c6:e0:07:
dd:d2:a3:cd:42:18:82:e5:eb:6e:5f:09:b8:9e:e9:a7:75:c5:
96:ae:f2:38:36:df:a0:b4:bd:26:47:83:db:fc:59:86:22:f1:
16:33:27:0d:dc:70:b5:c9:52:16:5e:2b:8d:ba:ad:ec:3a:91:
16:b9:ff:4a:39:12:38:15:64:27:dd:f9:03:bf:fd:b0:82:6d:
dd:4f:a0:cf:89:36:7f:a2:db:eb:07:1f:ad:d8:53:1b:d2:48:
61:0d:b8:4a:db:ab:9f:c7:c4:13:a4:6d:03:17:e5:89:78:f1:
27:71:e3:b1:04:05:ab:85:a3:7f:dc:d1:6d:61:13:10:dc:2a:
c8:b3:79:fc:35:ed:2c:fd:f7:48:52:7a:73:ac:96:20:2e:32:
26:03:62:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:03:23 2025 by rpki-client