Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D444970CDC711EF8448AAA4762E951A.roa
File: 0D444970CDC711EF8448AAA4762E951A.roa (raw, json)
Hash identifier: yZ0O1JLJ0X5Fj+wXJ1Pb6OrzrpaR5O6barvAFjmPFSQ=
Subject key identifier: 46:CA:92:5B:4B:43:74:90:A5:FD:FC:A1:6C:26:25:1F:1F:3E:1D:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0101A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D444970CDC711EF8448AAA4762E951A.roa
Signing time: Wed 08 Jan 2025 13:47:08 +0000
ROA not before: Wed 08 Jan 2025 13:47:04 +0000
ROA not after: Tue 16 Dec 2025 13:47:04 +0000
asID: 984
IP address blocks: 156.249.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65955 (0x101a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 8 13:47:04 2025 GMT
Not After : Dec 16 13:47:04 2025 GMT
Subject: CN=677e81dc-e7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:38:92:c2:6a:0b:9a:b4:da:00:db:69:25:66:
2b:88:f0:59:81:47:5b:d1:ea:86:31:5c:8f:e9:27:
c8:f5:98:d0:0f:6e:98:81:2d:21:1b:c9:35:c1:17:
39:6a:dd:1f:6f:c7:18:22:41:42:7b:ea:82:be:56:
6e:33:78:7e:65:18:e0:c2:27:99:c9:0b:6f:34:92:
b2:e6:94:ed:f1:a4:c4:83:55:06:ff:e7:10:7c:81:
9f:b3:de:8b:78:e5:60:2a:4d:d4:d7:26:6a:e5:7d:
c6:58:0e:b4:b8:85:e4:be:91:a5:1e:e1:e7:1a:bd:
09:19:e4:c9:2f:fa:fb:33:e5:81:45:75:de:bc:83:
bf:7b:40:4e:50:67:82:a1:75:be:e3:67:03:b0:6a:
8d:f6:46:53:6d:d7:1d:93:c4:ae:ab:8f:87:6b:ed:
4a:55:6b:08:f4:4e:43:ce:09:e7:ce:bc:38:df:d8:
09:e1:96:bc:86:be:74:67:49:fb:5c:2e:09:f6:fa:
f1:46:66:e0:8d:94:e4:fb:4f:b8:c3:5f:12:0c:ad:
57:86:d6:c9:50:e7:05:d8:20:c6:8b:ee:3f:6f:58:
45:43:24:10:61:fe:49:79:4f:75:a5:79:56:37:07:
30:2e:64:6a:25:47:34:3f:ca:99:38:fc:22:f3:83:
fc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CA:92:5B:4B:43:74:90:A5:FD:FC:A1:6C:26:25:1F:1F:3E:1D:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D444970CDC711EF8448AAA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.48.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:35:77:ea:fa:5c:90:c0:cf:e9:1a:62:20:7c:0a:a2:3c:2d:
c6:63:be:f1:13:07:e5:d8:94:3a:6f:32:09:b4:ac:30:7c:04:
eb:bf:b2:fe:15:a9:18:e8:f8:f6:e3:c6:a1:75:25:73:0d:d1:
4f:b6:db:d5:b2:1b:31:47:36:ff:af:b4:e1:1c:0a:06:d4:2d:
95:f5:51:8e:20:d5:cb:4e:c0:63:8c:80:61:9a:d7:d6:7e:65:
4a:62:58:8a:0c:96:7a:6d:52:ff:c1:b0:e3:71:4f:59:24:cc:
84:10:88:d8:0d:48:98:0e:bb:34:25:09:fa:ff:c5:d2:26:e2:
ff:8a:a0:24:2d:01:b0:9a:e0:16:fb:66:87:3e:01:4f:ca:16:
4c:c1:ad:b4:42:f6:de:d5:2f:9a:81:c7:72:3c:8f:43:30:63:
51:03:ae:0d:07:3b:24:9b:29:7d:08:6b:d2:b7:a5:bf:5b:d3:
f9:60:a2:04:e3:14:9f:26:e7:65:f5:12:4b:d0:05:70:56:43:
04:29:ac:9c:5a:03:b8:27:be:63:b2:ea:60:7f:f9:25:db:c7:
f8:58:81:d3:95:68:2d:c1:0a:69:d8:45:6c:d5:40:9c:72:d5:
a0:68:0f:dc:c0:81:eb:54:91:23:48:59:43:f2:10:22:d3:2c:
df:be:6e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:51:23 2025 by rpki-client