Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/099C38DEDB1711EFA135C698762E951A.roa
File: 099C38DEDB1711EFA135C698762E951A.roa (raw, json)
Hash identifier: Q+z2G4Ksmt2GIkKmYhbOlPgHtDnIO6qJpu1zDZrZntY=
Subject key identifier: 84:AE:89:57:BB:B3:F9:F0:7A:D4:0D:99:D9:92:4D:66:82:DA:93:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01123F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/099C38DEDB1711EFA135C698762E951A.roa
Signing time: Sat 25 Jan 2025 12:22:27 +0000
ROA not before: Sat 25 Jan 2025 12:22:23 +0000
ROA not after: Sat 01 Feb 2025 12:22:23 +0000
asID: 152092
IP address blocks: 156.245.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70207 (0x1123f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 12:22:23 2025 GMT
Not After : Feb 1 12:22:23 2025 GMT
Subject: CN=6794d782-a2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0c:e0:e5:8f:0b:34:7b:89:4c:f7:32:19:62:
24:8a:7f:1b:60:77:55:b3:4c:4f:57:95:70:29:eb:
76:21:a5:8b:43:ad:6f:40:c2:f5:21:b5:0c:c3:d8:
ae:a4:29:5b:cc:f9:54:02:77:e8:c3:35:d6:89:c9:
70:a3:fa:0e:84:1e:fb:4d:8c:73:f4:c3:33:58:c6:
5b:32:46:65:3b:79:e1:28:be:40:df:e9:4b:be:85:
29:12:b9:d5:70:53:7a:ee:51:d5:c2:b1:ae:d2:1b:
b8:e4:00:1c:a7:bf:ab:bc:7c:2c:3a:ae:29:d2:1a:
fd:2c:f9:7e:ab:38:ec:e1:85:00:49:e3:90:74:82:
f5:9f:ae:4e:97:79:76:bf:df:58:e3:f5:8f:1e:45:
0f:41:44:30:a6:4f:cd:32:97:27:c2:c5:82:36:b4:
64:26:5f:aa:b9:f9:b5:8c:3b:43:bd:53:4d:5b:5a:
58:9a:d0:f6:dc:55:0a:5f:a9:76:e6:bd:d2:c1:13:
f8:48:27:bd:9b:fc:e1:ff:3d:a5:6a:ea:1d:9e:4e:
8b:9a:2a:c0:a7:94:26:fe:f0:14:70:e5:8b:6e:85:
bb:a3:2a:90:8b:80:84:88:18:3c:50:47:74:d3:ee:
41:d5:51:c9:a8:5b:0c:9d:f3:2b:de:5d:79:3c:1c:
02:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AE:89:57:BB:B3:F9:F0:7A:D4:0D:99:D9:92:4D:66:82:DA:93:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/099C38DEDB1711EFA135C698762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:47:18:1d:10:d6:e6:46:b3:d0:b2:4e:f2:13:fc:67:1c:da:
ef:ec:56:9d:e4:7d:ac:88:45:47:34:0e:e8:95:3e:e9:ac:db:
f9:26:66:c0:ef:69:4d:15:17:47:52:29:26:ba:73:98:82:07:
a6:b6:1d:12:a7:4e:8a:6b:ec:05:e2:12:44:2b:a1:7b:42:1e:
c7:5c:75:e1:d0:b6:a6:5d:61:1b:9a:c1:0e:c1:5a:11:2d:00:
eb:2a:26:af:1b:67:16:49:09:72:90:ba:c4:bc:fe:f6:8f:05:
85:26:e9:cc:03:00:c8:c2:33:3c:8c:5d:e6:2e:e0:35:9f:3d:
7f:91:fb:27:be:0c:bf:2a:20:78:cd:45:43:22:bb:07:ba:d3:
23:b5:4b:45:b9:31:8c:e1:c1:00:e4:5f:27:7c:c2:f3:c1:5f:
a5:d4:1a:60:05:a4:9e:56:3e:39:4d:49:3e:44:9e:b1:7a:80:
0b:8a:4e:0f:53:af:1c:4f:41:b1:f4:9b:f0:6c:1b:b0:50:72:
d0:c3:f9:b6:5a:fb:98:ea:6f:eb:f5:53:28:df:13:8c:d3:64:
6c:b3:1f:67:a7:7d:f8:dc:32:28:20:ba:d8:77:f9:0a:20:7c:
46:07:70:21:52:0c:31:c0:40:3a:8f:b8:14:15:bf:ea:fa:fb:
90:49:bc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:18:37 2025 by rpki-client