Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19630396DAFA11EFBFF18556762E951A.roa
File: 19630396DAFA11EFBFF18556762E951A.roa (raw, json)
Hash identifier: 85WvAPibiQtYaqB3eYyXR1VJJ4yGaypr3HNmq2wjB1A=
Subject key identifier: B8:67:5A:00:D0:C2:E8:2A:22:D7:22:CB:BD:48:55:56:3C:86:CF:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011197
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19630396DAFA11EFBFF18556762E951A.roa
Signing time: Sat 25 Jan 2025 08:55:17 +0000
ROA not before: Sat 25 Jan 2025 08:55:14 +0000
ROA not after: Sun 23 Feb 2025 08:55:14 +0000
asID: 44559
IP address blocks: 156.246.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70039 (0x11197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 08:55:14 2025 GMT
Not After : Feb 23 08:55:14 2025 GMT
Subject: CN=6794a6f5-4047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:b8:1b:4a:2a:51:c4:db:6b:d2:6f:47:24:
c6:5d:58:fa:12:8e:07:8d:1d:dc:f0:7a:3c:6b:78:
57:26:19:44:0b:45:a4:7c:27:53:bc:30:f5:ec:b6:
0d:29:53:af:82:04:03:df:61:85:21:60:18:e6:3a:
a2:9e:34:38:9e:aa:fa:30:65:37:3a:92:0d:62:0d:
43:de:ee:00:35:d1:5e:b8:4d:ef:dd:1c:1a:a2:f1:
27:18:2a:c7:d7:b2:49:75:72:d4:53:e7:f6:81:fe:
78:2d:9f:6e:57:a0:b2:e7:c6:1d:8e:22:4f:8b:c2:
63:3b:a2:ef:ae:28:b5:a7:66:68:67:1f:30:ba:98:
ba:dc:a9:a1:13:3a:f4:f5:e6:bd:ba:b6:4f:d3:0e:
b1:74:44:84:cf:49:b5:9d:16:b9:26:8b:4d:52:19:
66:31:ae:9e:93:88:8b:c9:a9:d0:a5:92:3f:00:e2:
62:01:c9:1d:01:63:ef:fd:83:e7:93:53:65:8c:d0:
6d:2d:96:90:28:28:7a:9c:52:1a:47:46:a1:87:a8:
1a:d6:00:ac:02:42:9f:42:6e:5d:70:53:fe:2f:51:
f6:8f:08:5f:d7:38:4c:0d:75:36:2a:dc:e7:5d:98:
cf:7a:9b:5a:a5:3d:82:e8:f4:c6:b9:cc:3d:5f:07:
4a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:67:5A:00:D0:C2:E8:2A:22:D7:22:CB:BD:48:55:56:3C:86:CF:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19630396DAFA11EFBFF18556762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:53:0d:38:41:af:67:48:13:78:d9:25:fb:9c:7b:f4:5c:1d:
21:18:f8:c6:5d:4d:59:e8:10:4a:80:3d:f5:29:84:c6:99:f3:
09:1d:5e:3c:cf:41:d0:d6:f8:ca:0d:f2:92:76:ac:6a:e8:0d:
ac:1e:72:cb:38:50:e2:6e:b5:a2:02:fb:e7:36:27:2c:9f:c5:
d1:49:c5:81:73:93:bb:86:2d:f8:30:7e:d8:d9:62:44:d7:a0:
c1:2d:a1:f5:5a:01:16:10:3a:c3:4d:d0:a3:0d:c3:ce:06:bc:
27:fc:dd:14:36:52:d3:72:7b:e8:35:0c:2b:ec:5e:65:3e:6b:
e0:7c:ff:4a:1c:01:37:3a:7e:33:51:a6:1d:47:ff:13:3a:c1:
fa:b3:f9:71:cc:9f:94:b9:65:19:4d:89:e0:79:64:ec:1d:12:
bb:03:2f:33:32:98:5c:c2:d1:cb:e3:cc:6c:bb:19:b8:70:e7:
6b:ae:f1:f3:cf:db:1d:e0:67:43:89:18:d7:fc:2d:89:7c:05:
f5:08:90:d2:05:9c:96:11:f4:bd:bc:6e:77:ea:c3:93:83:6e:
08:78:70:61:c2:70:3a:4a:66:53:43:ef:e7:51:50:ee:86:43:
3c:39:5b:c7:37:37:01:30:8d:d2:bb:fd:14:bd:71:04:7d:fc:
c1:9e:5f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:19:28 2025 by rpki-client