Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15BEBD7CD70B11EF983BAB95762E951A.roa
File: 15BEBD7CD70B11EF983BAB95762E951A.roa (raw, json)
Hash identifier: GVpicN9R1VYHdMLcUgFnq6/bDRWbgT5wxHnkstnOHrs=
Subject key identifier: A0:54:5B:F8:6F:8B:9D:25:96:49:B6:86:43:A9:44:B1:A8:97:4C:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C07
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15BEBD7CD70B11EF983BAB95762E951A.roa
Signing time: Mon 20 Jan 2025 08:46:48 +0000
ROA not before: Mon 20 Jan 2025 08:46:44 +0000
ROA not after: Thu 20 Feb 2025 08:46:44 +0000
asID: 139880
IP address blocks: 156.254.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68615 (0x10c07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 08:46:44 2025 GMT
Not After : Feb 20 08:46:44 2025 GMT
Subject: CN=678e0d78-f441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:97:9d:a1:fa:27:b3:28:84:69:cd:56:f3:0d:
2f:9c:f9:7e:b2:0c:c6:db:b4:d2:16:67:24:47:3b:
b7:9f:94:0f:76:6c:e3:23:96:53:41:4b:4e:95:f2:
0c:b2:bd:e1:1f:1b:cc:08:9a:cf:4e:87:34:af:dc:
ad:cc:f7:b4:d1:4f:79:9e:99:69:fc:05:3a:15:da:
b0:6f:87:72:dc:aa:21:f6:5a:00:ba:0c:7b:89:12:
74:e1:16:fe:7a:87:82:9d:16:1e:d3:e9:9e:b5:1d:
b7:ef:a0:1d:4b:02:37:13:68:8b:6e:06:f8:9c:bd:
96:a9:df:d3:a0:04:09:e2:77:3a:db:55:13:a4:61:
1a:14:c4:ee:08:c4:23:1d:1e:d5:e6:75:a4:fa:bb:
42:ff:db:77:b9:66:d4:dc:c9:ce:e1:0a:f4:93:89:
c0:4d:76:20:16:b7:0b:74:18:da:13:35:1f:e2:c4:
94:07:d8:9a:45:50:59:62:67:c5:0c:2a:8c:7c:fe:
75:5a:d7:57:eb:1b:ec:db:17:af:72:6e:e2:af:e0:
f1:93:76:6e:7a:0d:d1:ca:da:43:3f:37:e3:fc:28:
0f:69:0c:89:67:e4:cd:be:b5:ec:cd:84:ce:99:de:
86:ad:f0:62:3b:a1:a2:2b:e1:2a:c4:e3:60:d3:b0:
26:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:54:5B:F8:6F:8B:9D:25:96:49:B6:86:43:A9:44:B1:A8:97:4C:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15BEBD7CD70B11EF983BAB95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.0.0/18
Signature Algorithm: sha256WithRSAEncryption
b7:4f:1f:cd:3b:cf:4b:2f:92:f5:f7:71:1e:e1:73:27:56:66:
a8:89:9b:e0:29:c2:60:78:40:e7:52:80:fd:5e:d2:42:64:63:
4b:f2:f2:87:1f:5c:86:73:27:b5:e4:b5:57:d5:ea:dd:24:c3:
41:8a:76:40:99:3d:80:43:c6:90:09:fc:05:fa:50:9b:6a:49:
c4:51:d9:7d:0f:58:e2:ba:2b:a0:aa:34:04:e2:67:15:5d:7a:
c9:08:57:a1:82:00:20:12:5c:1d:bb:ea:e6:a4:b1:c9:4d:73:
e2:81:ff:62:39:d4:81:09:ba:35:8c:01:e6:0e:6d:9f:5f:1d:
a1:17:a1:87:10:3e:f5:78:6c:d5:04:1e:e6:4f:24:d8:88:27:
f1:41:6c:25:00:60:f5:53:8e:7a:5d:08:6a:a6:5c:19:d5:56:
97:c7:0e:b8:c7:3f:47:ba:c8:c5:d2:60:f0:2a:80:02:bc:0c:
36:27:e6:cb:fc:c5:a7:a0:26:e3:30:d8:ec:b9:9d:76:15:83:
66:7f:32:7e:08:c6:4b:48:45:27:8c:c2:d9:f7:4b:10:ed:18:
cb:53:c4:7d:af:25:b1:f2:95:03:15:96:68:8e:62:82:4b:bd:
97:e7:c7:de:ce:22:f9:08:ea:34:79:79:a0:79:35:37:46:64:
c6:ec:e1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:08:47 2025 by rpki-client