Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AD94ACCD56F11EFBB132191762E951A.roa
File: 1AD94ACCD56F11EFBB132191762E951A.roa (raw, json)
Hash identifier: aFgnS8O420qAau7m1KNDMorLl2z3lInpWR/iATDCIXo=
Subject key identifier: F5:64:E4:0A:B9:06:D5:48:44:10:F8:8C:ED:5E:2E:C1:26:BC:C6:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B1B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AD94ACCD56F11EFBB132191762E951A.roa
Signing time: Sat 18 Jan 2025 07:37:44 +0000
ROA not before: Sat 18 Jan 2025 07:37:40 +0000
ROA not after: Sat 22 Feb 2025 07:37:40 +0000
asID: 55020
IP address blocks: 156.239.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68379 (0x10b1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 07:37:40 2025 GMT
Not After : Feb 22 07:37:40 2025 GMT
Subject: CN=678b5a48-ee76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:95:7b:6b:01:33:d6:ba:7b:51:4a:98:6a:
dc:c0:cd:22:fa:3e:a3:d8:76:85:87:fd:2a:e0:73:
cb:e9:fb:10:bc:0b:0d:3a:28:98:54:af:b2:66:90:
19:07:9d:a5:ec:40:21:a8:f0:2e:1d:9f:55:96:94:
97:74:c0:79:e4:89:87:2e:69:19:89:86:ed:e7:dd:
52:3e:a4:84:09:6e:0f:73:26:65:6f:7c:96:34:dc:
af:6e:82:85:32:c8:ba:f9:a0:40:e5:c5:c4:1a:78:
c8:9d:c2:d1:c7:62:ca:ea:6f:06:87:9e:8e:47:95:
64:42:0d:2e:5d:77:ba:4f:7b:d1:de:5c:5d:d8:a1:
41:e7:55:88:94:00:bf:25:da:ef:38:dc:b2:b7:f3:
42:88:1e:c4:d1:cd:02:55:a8:40:21:b1:be:6b:6b:
c6:5c:f0:3a:80:d4:35:b3:b8:46:b8:cd:55:3a:51:
04:43:66:35:6a:b5:55:5a:e3:4c:34:7b:0f:9c:7c:
2c:8f:52:cc:e7:40:d8:e5:9b:91:60:63:8b:c7:f1:
74:5a:28:f1:7f:04:40:93:de:4a:4d:f3:bb:8b:1e:
ca:e9:a4:8b:ba:65:5c:7f:15:50:0c:03:98:b7:ee:
89:0b:a6:96:d3:3a:ba:04:bf:e3:9c:56:54:56:63:
34:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:64:E4:0A:B9:06:D5:48:44:10:F8:8C:ED:5E:2E:C1:26:BC:C6:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AD94ACCD56F11EFBB132191762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.32.0/20
Signature Algorithm: sha256WithRSAEncryption
61:46:15:db:8e:4b:a0:5c:7e:7d:44:05:5c:96:ca:20:5c:d5:
b5:76:21:4c:99:dc:91:ec:f2:b2:f9:be:60:24:68:0b:65:10:
61:ed:44:ab:33:8d:af:95:51:0c:af:23:c7:9c:3b:e0:97:bb:
f2:ca:87:e8:91:ca:96:2a:c5:9b:03:65:a6:d3:25:2a:f8:8e:
9d:4e:1d:be:24:3e:0e:77:89:63:5b:bf:fc:ed:c1:f9:7a:82:
98:51:0d:fd:65:a5:ee:32:f0:77:65:0a:88:9e:8d:e5:45:9b:
7e:66:a6:f5:81:36:a7:2f:e5:3c:88:e1:7c:88:80:69:d4:da:
0e:ed:5f:1d:bb:fd:cf:40:11:be:ec:38:63:05:e5:04:8c:a4:
a1:39:1b:2d:a3:c8:16:90:88:8a:c9:2c:33:ba:dc:23:c7:10:
89:e2:dd:2c:94:7a:f9:dc:fa:bb:e3:15:79:f4:7e:81:e2:35:
91:8b:87:7e:df:b7:a7:75:90:67:df:7e:12:8f:7f:cb:d9:f9:
60:14:a9:f3:b0:29:b9:83:79:dd:cf:14:22:d6:b5:c8:65:84:
e7:30:80:d9:05:22:26:c4:16:3b:ff:05:c5:31:65:38:06:4e:
4e:2b:fd:0d:99:74:20:b5:9b:4b:d5:87:62:16:8d:4f:3d:5c:
41:44:68:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:39:42 2025 by rpki-client