Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12EC6CBED7D511EF81C7CC43762E951A.roa
File: 12EC6CBED7D511EF81C7CC43762E951A.roa (raw, json)
Hash identifier: Fzg0x9dP4QW5/PM8IBRCU+GDdEqcxR5XWNIAM2mGfVg=
Subject key identifier: 45:18:1B:26:CF:15:EC:33:94:C4:0A:F6:E9:57:D8:31:62:FC:B7:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D18
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12EC6CBED7D511EF81C7CC43762E951A.roa
Signing time: Tue 21 Jan 2025 08:52:42 +0000
ROA not before: Tue 21 Jan 2025 08:52:38 +0000
ROA not after: Sat 01 Feb 2025 08:52:38 +0000
asID: 44559
IP address blocks: 156.246.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68888 (0x10d18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 08:52:38 2025 GMT
Not After : Feb 1 08:52:38 2025 GMT
Subject: CN=678f605a-6125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:69:f9:9b:6e:65:b8:b5:c5:b8:a6:4f:3d:
8a:57:0a:2f:4a:5c:fb:3f:57:bd:5f:de:12:74:65:
10:e5:e7:18:65:06:f1:4a:d0:ee:44:0a:60:c3:3d:
ef:e5:17:05:6d:30:c6:61:af:a6:07:69:d6:b9:ce:
2a:b7:9d:1b:de:fa:51:ff:44:39:55:43:7d:fe:a9:
d6:d4:13:07:86:78:ad:78:96:bf:ad:f9:7c:1e:cc:
b3:bc:33:72:f6:fe:c0:50:81:62:4c:ea:b3:3d:2d:
ca:ab:08:97:e4:14:f2:30:a3:8a:0b:4f:69:b6:22:
46:57:86:06:50:0e:b7:3f:02:c1:65:b0:fc:73:21:
d7:7e:33:5f:27:45:90:16:7f:9c:0f:28:55:c3:49:
7d:c6:aa:3f:83:4d:35:5b:0b:5f:fc:4c:63:c5:10:
84:1f:c3:bd:a8:c3:18:b4:d3:16:6e:70:c6:44:3e:
1e:4f:ef:79:77:52:ec:ba:b1:ca:44:f1:32:04:8c:
be:fe:bc:9a:90:76:89:e1:b6:fc:70:1d:c3:4c:80:
09:91:b6:b5:06:4f:a2:14:20:f7:b6:7d:17:3f:da:
90:c8:f4:48:2f:af:f7:b1:59:44:ac:48:6d:2d:42:
0f:69:6c:26:55:24:6d:94:44:7c:b8:92:eb:6f:55:
8d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:18:1B:26:CF:15:EC:33:94:C4:0A:F6:E9:57:D8:31:62:FC:B7:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12EC6CBED7D511EF81C7CC43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.167.0/24
Signature Algorithm: sha256WithRSAEncryption
09:23:84:23:ef:0f:9e:f3:26:35:d0:b5:10:b6:6e:26:d1:02:
9d:a9:11:f4:c3:93:3f:de:26:a0:35:76:7e:56:bb:8a:0b:c7:
ec:05:6a:ba:7a:5b:e0:6b:c5:76:15:21:b5:87:89:99:50:bc:
e7:e6:49:f1:15:47:6a:d3:f0:91:4a:39:a7:b4:37:ed:79:44:
10:92:1e:cd:23:06:b5:88:df:f3:4c:7c:46:d6:36:3d:b1:9e:
d9:0d:c2:3f:e3:b1:5f:c7:18:33:5b:5f:97:e2:62:46:d4:dc:
15:91:77:5c:b1:a5:e4:b9:6f:ca:dd:65:e3:cc:44:c7:87:29:
75:4b:13:fc:57:e7:a3:54:dc:35:51:b4:91:04:59:39:19:cd:
03:32:97:33:c6:77:34:6d:fe:28:8b:f5:06:51:37:1b:a6:4b:
da:df:bd:9d:45:8f:3c:7f:a1:11:11:a6:b0:e7:34:cc:63:cf:
06:d7:08:d8:65:46:9d:cd:b3:9d:9d:6b:59:00:8e:ad:7c:db:
9d:a0:1a:3d:83:a0:ee:be:35:80:5f:2f:e3:ad:4d:0e:73:d7:
5e:04:b0:c9:90:cc:07:cd:74:8b:44:c9:a7:01:63:79:b5:60:
1c:1e:ff:3a:d7:30:0f:90:52:16:6a:0f:34:2b:e6:fd:56:cf:
b0:4d:88:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:25 2025 by rpki-client