Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D2D5182DFF311EFA7FF8B5B762E951A.roa
File: 0D2D5182DFF311EFA7FF8B5B762E951A.roa (raw, json)
Hash identifier: 243Dfux6Wl9ZVn176f62sa4FoJ4kUMG1uBrj80zbyx4=
Subject key identifier: 15:44:2E:8C:A0:6D:AC:2E:66:38:2C:3F:A3:6B:47:F4:0E:E6:C6:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01167F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D2D5182DFF311EFA7FF8B5B762E951A.roa
Signing time: Fri 31 Jan 2025 16:47:26 +0000
ROA not before: Fri 31 Jan 2025 16:47:23 +0000
ROA not after: Tue 25 Feb 2025 16:47:23 +0000
asID: 62468
IP address blocks: 156.245.188.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71295 (0x1167f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 16:47:23 2025 GMT
Not After : Feb 25 16:47:23 2025 GMT
Subject: CN=679cfe9e-7486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:c2:09:08:66:40:4a:f1:5d:34:b1:33:6e:
b6:a1:59:67:54:53:50:3b:f4:33:50:f5:b2:60:51:
c8:cc:ec:f7:92:50:a7:13:d0:f9:1d:08:56:fb:d5:
d6:b5:7b:d9:f4:8f:c8:2e:1a:ed:09:a2:10:12:97:
60:f1:b1:99:b5:83:29:58:22:a8:78:3d:a6:52:83:
df:bb:40:6d:96:28:23:bf:37:35:8c:4c:7c:c7:a2:
fe:98:fb:b2:bc:27:0a:e3:2a:48:eb:d1:20:e1:2a:
92:eb:d6:08:18:1e:d4:95:59:76:33:27:f7:fa:f4:
46:cf:df:94:0c:71:65:87:d2:f3:b1:b3:b1:2d:22:
10:f4:f2:e2:0e:b1:3e:60:42:6c:a7:ed:40:4a:2d:
93:ba:23:30:0a:67:ea:2a:38:73:45:49:70:90:86:
23:d8:8a:d2:c0:48:9d:5b:ca:43:57:80:e4:f0:7d:
04:6a:69:a6:be:84:1f:4d:28:62:82:57:c3:c5:88:
ab:c7:93:b2:fd:1e:c0:df:f4:56:81:3d:47:fd:ec:
b5:b6:32:df:66:64:a0:5b:c0:7b:e9:e6:a9:b3:81:
9f:8e:6f:d3:82:fe:bc:71:dc:b6:89:c5:7c:e0:5d:
78:7d:e0:81:ae:3d:5d:6f:61:7a:17:d2:e4:81:13:
5e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:44:2E:8C:A0:6D:AC:2E:66:38:2C:3F:A3:6B:47:F4:0E:E6:C6:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D2D5182DFF311EFA7FF8B5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.188.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:e3:c5:7f:ee:6a:6c:f5:fc:f7:31:08:97:a2:35:8f:40:9c:
a7:eb:df:05:19:5b:1b:8e:58:dc:df:86:2c:da:01:67:31:26:
5b:8c:69:6e:9a:de:9d:cd:2f:6b:80:ce:51:30:22:ff:97:07:
db:98:bf:a1:30:36:21:62:1c:d8:13:8c:45:49:4f:e4:8f:4e:
24:5c:8e:3b:19:47:be:0c:4d:13:fb:db:24:06:cd:83:59:c1:
b5:ac:33:96:fa:49:6a:01:db:25:b7:49:73:f7:1f:54:6d:57:
4d:f7:e6:59:d4:32:06:54:46:e8:f0:ca:06:a0:96:29:44:ba:
c5:e0:f0:a5:3e:09:81:9f:77:b4:b3:61:24:ab:7c:75:e5:d0:
ac:a5:30:33:2a:ca:9d:fe:af:c5:87:b5:22:4f:a4:3f:51:11:
30:89:4c:bc:05:cc:5a:21:16:9f:4e:ff:50:66:66:5d:21:0d:
cc:72:14:ad:96:76:d5:8f:1c:e0:3a:69:8e:07:a2:65:d0:76:
af:c6:28:1a:1c:01:13:92:f5:d2:95:d1:b8:63:cd:dc:08:f7:
2a:c0:c5:b7:29:03:5b:39:47:05:4b:dd:d6:3a:b5:d5:11:45:
a7:38:8f:8a:e5:3a:44:67:45:88:44:67:cd:5f:8c:62:c5:42:
46:6e:ef:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:08:47 2025 by rpki-client