Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CDBFA94DA6711EFAC8D1372762E951A.roa
File: 0CDBFA94DA6711EFAC8D1372762E951A.roa (raw, json)
Hash identifier: uHVAhvcj8P4MXFa4NFqMgVK6DnoTjfJWxj2RbRqkP+k=
Subject key identifier: 24:74:10:8E:5A:C7:A3:58:A4:02:CA:BF:5B:A1:22:AA:67:B6:2C:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F8A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CDBFA94DA6711EFAC8D1372762E951A.roa
Signing time: Fri 24 Jan 2025 15:22:40 +0000
ROA not before: Fri 24 Jan 2025 15:22:37 +0000
ROA not after: Sat 01 Mar 2025 15:22:37 +0000
asID: 61112
IP address blocks: 156.231.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69514 (0x10f8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 15:22:37 2025 GMT
Not After : Mar 1 15:22:37 2025 GMT
Subject: CN=6793b040-91f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:19:13:34:9b:13:56:9e:b1:03:32:8f:20:
07:45:19:1d:bc:11:10:f7:ae:04:77:5e:9d:9c:63:
95:f6:68:4a:3b:d2:64:9c:f0:d0:6a:0f:03:44:44:
64:cd:dc:5c:cd:fc:80:07:e4:b9:48:77:b4:e1:12:
8c:58:59:07:0a:6d:f2:8b:0e:5a:23:52:01:e1:59:
ca:b5:84:62:8f:c8:e8:9b:b6:27:64:de:38:64:93:
dc:0f:8e:c7:bb:0f:c3:8e:f4:37:74:83:6c:c6:b3:
1c:a3:53:4a:6d:ce:fe:5e:e6:16:68:c0:e5:26:7c:
8b:a6:20:01:c9:c8:c6:6b:66:a2:74:1e:ec:63:ad:
d1:d3:c6:86:cc:89:b8:eb:95:cb:fb:aa:5f:96:31:
9d:a0:4e:db:c2:37:ba:cc:d9:9a:76:53:56:4c:77:
b4:9e:78:44:3e:bd:89:fa:8d:7a:52:41:3b:98:a5:
e2:16:26:a0:40:34:77:db:5c:55:81:cd:f6:ec:55:
47:b4:9d:8c:b6:01:d5:ca:89:bd:f4:34:1a:7f:88:
c5:9b:16:77:b7:5f:9c:de:49:24:89:e3:36:55:4d:
35:a1:a2:a1:19:50:c0:d3:ee:44:b0:15:04:e3:cb:
80:63:e0:ff:c7:52:00:44:42:f4:77:a7:ec:67:f9:
5c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:74:10:8E:5A:C7:A3:58:A4:02:CA:BF:5B:A1:22:AA:67:B6:2C:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CDBFA94DA6711EFAC8D1372762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.112.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:42:58:2b:98:76:94:54:80:b8:4c:d5:74:ac:30:12:f1:45:
8c:d8:44:7b:aa:61:28:bf:e8:67:40:69:69:16:dc:7d:9f:6a:
71:5c:41:88:e0:31:e7:ec:51:15:37:41:83:5c:2e:99:03:c9:
9e:bd:df:ce:df:a7:02:78:6f:7c:7d:6b:ea:ee:e3:2f:e5:4a:
a1:9a:94:07:a1:38:ae:09:7c:be:94:0d:ad:00:51:87:70:be:
af:c7:27:83:cc:94:2c:bb:03:7b:55:33:f3:e9:76:4d:be:9f:
ca:ed:00:67:53:a7:81:eb:21:3c:c1:f5:15:76:97:21:f2:ed:
d1:bd:5e:41:8b:f0:c6:e0:95:eb:e5:8c:4c:1f:d7:cb:97:c1:
0a:c2:23:c6:38:57:8f:82:6a:a2:6d:41:5e:95:77:57:85:01:
9e:7f:07:84:00:b3:18:43:69:99:8e:23:0b:12:94:54:eb:6a:
9f:6f:1c:f2:4c:44:af:bd:23:8e:6b:3a:da:58:be:8f:c2:47:
1b:00:c1:7b:6b:eb:54:83:18:09:d2:ff:0a:99:e1:32:ff:5b:
7a:3d:f2:7c:72:a8:11:c5:66:17:c5:14:8c:3c:53:0e:ce:96:
88:2c:93:8d:9a:e8:87:ac:3c:d9:31:02:50:88:3e:53:3b:0b:
29:b5:60:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:35:24 2025 by rpki-client