Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12CF8654D68011EF9BA02C81762E951A.roa
File: 12CF8654D68011EF9BA02C81762E951A.roa (raw, json)
Hash identifier: VvF5XKa1DqSPZepvX3e8AdHbthBsoy/tuOG37vKIfCY=
Subject key identifier: EB:1B:DF:38:75:2A:DF:FB:6C:B6:3F:17:A2:2B:A2:CC:F0:C0:CF:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010BB0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12CF8654D68011EF9BA02C81762E951A.roa
Signing time: Sun 19 Jan 2025 16:11:43 +0000
ROA not before: Sun 19 Jan 2025 16:11:39 +0000
ROA not after: Sun 23 Feb 2025 16:11:39 +0000
asID: 203020
IP address blocks: 156.243.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68528 (0x10bb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 19 16:11:39 2025 GMT
Not After : Feb 23 16:11:39 2025 GMT
Subject: CN=678d243f-4b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b6:27:e4:aa:6f:67:e0:bf:81:d7:14:d7:10:
25:c4:bc:3a:0f:ca:bf:c6:c5:64:ee:5d:91:05:62:
fd:92:4f:16:e8:f3:e0:06:88:14:ee:ba:44:d7:d2:
19:e0:71:b3:22:55:be:b8:1a:f0:a1:a3:59:6d:9a:
36:5e:5d:a6:1a:f1:5d:5e:a5:01:fb:98:23:4d:c2:
6a:67:44:f3:05:23:43:fa:60:5f:e8:1c:8b:38:ef:
f7:11:6a:76:5b:90:96:7f:bd:30:21:3e:cf:15:3c:
e2:a9:55:24:11:b7:33:fe:d8:01:27:7b:95:d7:fd:
ed:da:98:f6:dd:db:67:51:01:5e:39:c8:62:9e:0b:
7c:f7:e9:59:64:a2:63:90:2f:e0:a2:cd:17:aa:18:
60:7e:c3:eb:56:56:0b:21:89:ab:c2:c8:34:56:ae:
91:cc:6c:1c:72:bf:ee:dc:9a:50:d8:f9:14:e3:54:
76:1e:da:6f:54:e1:82:55:a5:47:7e:c5:ce:aa:51:
1c:69:fa:14:53:fd:a4:23:67:b6:9d:7f:31:59:be:
31:57:64:0d:a5:15:c9:42:38:af:56:6b:f9:c4:fd:
57:15:00:67:19:99:b0:7f:59:d8:c8:a1:4e:94:45:
ce:c5:11:74:8e:89:23:33:24:bd:72:58:c4:76:d7:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1B:DF:38:75:2A:DF:FB:6C:B6:3F:17:A2:2B:A2:CC:F0:C0:CF:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12CF8654D68011EF9BA02C81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.184.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:01:dc:2f:e9:f6:dd:11:ef:d8:bd:3e:47:d3:57:b8:09:d6:
46:99:91:46:52:8b:82:67:18:2f:4d:dd:a4:d7:82:ab:61:a8:
da:c7:53:d7:10:0a:93:b0:36:a5:d8:62:9b:20:bd:01:fc:72:
6b:6d:9c:ac:fd:97:27:26:c0:00:ab:18:4a:da:20:7b:75:1c:
26:50:d1:b0:95:a6:4c:aa:a4:ea:a2:e8:49:2a:df:a2:2d:f0:
29:50:22:4d:16:50:58:17:b9:1a:d0:2b:3c:8f:52:ed:bb:5d:
b9:7f:84:1d:5d:32:61:2d:ee:f7:d3:9d:be:40:da:2b:01:50:
ab:db:48:48:e7:0e:e7:74:20:01:77:92:9c:65:11:e8:a0:cd:
df:c0:03:20:4a:b0:6b:64:94:18:c0:1c:96:32:1e:bf:2b:69:
f9:30:c1:cd:99:e7:6b:8b:27:4c:af:27:a9:19:8f:32:2f:1e:
b7:51:0c:5f:1e:ff:6b:ef:c9:4e:68:46:cd:b0:99:61:3b:85:
ae:5c:23:df:42:94:44:82:0b:b2:66:6d:28:ed:12:ed:83:e4:
ef:fb:02:41:5a:85:c8:fd:b3:8a:84:0b:99:cb:eb:2f:4a:5a:
03:e1:6e:a6:fd:ab:97:3f:1a:cf:f2:16:04:6d:5b:dc:90:2a:
76:4a:79:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:20:36 2025 by rpki-client