Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A002EECDAF511EFA04013B4762E951A.roa
File: 0A002EECDAF511EFA04013B4762E951A.roa (raw, json)
Hash identifier: Kij/f85hCF+m/enXHNoYAwYNc6Os4hE/S1e1qYLlc+8=
Subject key identifier: 48:E7:30:74:30:A1:96:6F:6A:21:22:B4:72:0C:E9:88:ED:D0:16:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011175
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A002EECDAF511EFA04013B4762E951A.roa
Signing time: Sat 25 Jan 2025 08:19:04 +0000
ROA not before: Sat 25 Jan 2025 08:19:01 +0000
ROA not after: Sun 23 Feb 2025 08:19:01 +0000
asID: 44559
IP address blocks: 156.246.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70005 (0x11175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 08:19:01 2025 GMT
Not After : Feb 23 08:19:01 2025 GMT
Subject: CN=67949e78-f29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:75:6d:bc:76:9e:ea:ef:06:8b:85:52:ac:
26:85:d9:2a:c5:ac:ea:5d:58:48:e4:b4:ff:03:1f:
73:3f:2e:51:d0:58:22:9b:d7:88:aa:e0:ea:72:61:
b6:8e:f7:80:7b:cb:40:dd:1c:e7:21:e5:3c:29:14:
0c:14:23:55:91:e6:9c:87:30:9d:41:35:eb:e8:cb:
13:db:70:c8:02:68:71:35:7e:16:bf:7f:c3:ea:c2:
b1:a7:bd:f8:d1:de:84:e2:82:73:40:3d:41:d4:a3:
4d:d3:4f:74:3e:e7:c3:41:2d:2e:1c:07:80:8e:6e:
aa:ab:33:72:a5:0b:b2:ee:4b:9e:b1:fc:f2:25:ba:
61:03:3f:39:f7:df:73:e4:01:5b:6a:56:04:6f:ed:
db:a1:15:54:e3:ef:16:b6:33:4d:d3:ca:19:f4:92:
82:e4:7b:eb:70:ac:f3:9a:fb:ad:4d:dd:e1:4d:1c:
d3:29:6b:a1:ac:23:c8:d0:0b:56:97:5f:3a:51:6d:
89:32:43:8e:49:f2:98:55:02:10:7c:50:b3:c2:87:
2b:68:f8:ae:86:59:ee:73:cb:bc:60:44:f4:57:22:
f2:83:a6:4d:36:fa:d5:a8:ac:15:49:1b:ea:58:93:
3d:e2:90:0e:6f:5d:a6:1c:12:ed:88:19:0b:d7:97:
a2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E7:30:74:30:A1:96:6F:6A:21:22:B4:72:0C:E9:88:ED:D0:16:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A002EECDAF511EFA04013B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:dc:79:35:b7:82:2e:37:e6:af:3d:75:4e:19:aa:f2:df:7a:
55:0f:9f:e5:ed:d2:6e:9f:36:9e:80:30:7b:c5:07:d4:8f:5f:
8f:35:af:dc:c8:d4:6f:31:ab:6c:c6:93:65:45:16:b2:35:68:
65:9d:17:62:e8:ec:27:64:6e:1f:b4:47:3c:e0:ff:7d:a6:a6:
d1:14:29:03:35:71:16:5b:d1:34:e9:46:b9:49:99:d2:19:8f:
3d:dc:3c:a0:6a:39:e2:7d:37:68:d2:61:4e:89:02:67:b4:9a:
58:59:35:73:91:e0:ca:d8:d3:19:1e:80:3e:92:8a:64:fc:dd:
de:3f:b7:70:d9:c1:2f:ad:e0:b0:c2:7c:c8:3b:8a:36:a6:43:
8f:2e:06:a8:24:af:a5:52:04:0a:02:ad:c2:b8:cd:b2:9f:5d:
24:df:0c:ea:ad:ca:34:e1:61:9d:b1:b2:72:58:37:4a:dc:eb:
1c:fa:e8:47:71:50:c3:00:ba:d3:64:b1:94:f6:d8:6f:ec:a9:
5f:b9:85:25:a2:48:ce:b4:91:f8:91:b9:db:0e:a1:ab:53:83:
11:b6:c6:65:68:13:f9:50:e2:97:3f:da:a5:4d:97:e8:5e:6c:
51:d7:7b:22:7a:4c:e7:8c:9f:8f:f2:92:cd:6d:9f:ab:81:72:
68:e3:1f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:48:39 2025 by rpki-client