Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EF477F0D58111EF8C244585762E951A.roa
File: 1EF477F0D58111EF8C244585762E951A.roa (raw, json)
Hash identifier: N2obcu5DIsVI9YVvsltkL410PmVc1gR3g4IYhfWXUBU=
Subject key identifier: 80:38:CF:9A:41:61:0C:DD:7C:80:EC:0C:D9:A5:B0:81:CD:C3:7F:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B5D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EF477F0D58111EF8C244585762E951A.roa
Signing time: Sat 18 Jan 2025 09:46:42 +0000
ROA not before: Sat 18 Jan 2025 09:46:38 +0000
ROA not after: Sun 23 Feb 2025 09:46:38 +0000
asID: 203020
IP address blocks: 156.243.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68445 (0x10b5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 09:46:38 2025 GMT
Not After : Feb 23 09:46:38 2025 GMT
Subject: CN=678b7882-d286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:4a:8c:d6:2a:ab:08:a5:fb:b9:12:2b:77:
f9:3b:21:b2:62:c9:5c:38:af:61:57:47:1f:6c:10:
d9:20:81:67:93:06:09:d4:6c:8d:21:2f:09:3d:85:
19:4e:f9:99:0f:1b:97:63:02:48:2d:4e:31:e0:03:
65:cb:9e:12:32:3a:62:92:12:93:61:e9:80:94:d4:
f9:d0:8c:45:fa:dc:68:ec:bc:c3:2b:17:8a:a7:8a:
9b:a7:34:71:23:bc:1d:ea:48:93:7b:88:ad:dd:1c:
c1:72:c6:90:c2:16:19:de:3d:3c:33:4e:93:74:42:
cc:8e:07:90:5d:b7:5a:4f:d1:4a:a6:09:e3:7d:21:
c7:82:36:48:3f:51:86:3f:d6:34:a8:58:18:f6:f3:
2b:5a:79:64:19:83:9b:0d:60:62:31:ef:1e:42:84:
e9:9a:1d:d9:2d:e5:5b:ee:cd:a7:16:a3:2f:c6:90:
2c:b4:17:5f:8a:fb:b5:a2:c6:da:ab:f3:17:c1:cc:
4d:f0:6d:49:02:96:6a:67:3d:bf:b1:25:e6:75:c9:
5b:91:6d:7e:12:46:f6:04:10:77:f8:d7:59:f3:1b:
69:d7:28:24:d4:08:58:ae:c4:b8:e8:f4:e6:14:ab:
57:63:85:c2:91:2c:c1:42:c5:c7:cf:9a:a3:22:8c:
db:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:38:CF:9A:41:61:0C:DD:7C:80:EC:0C:D9:A5:B0:81:CD:C3:7F:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EF477F0D58111EF8C244585762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.160.0/20
Signature Algorithm: sha256WithRSAEncryption
29:ca:11:5e:15:60:05:7d:6d:fa:10:9d:79:55:28:df:c2:63:
85:01:7b:5c:e3:b5:5a:88:51:30:bb:99:c2:d2:9d:9b:2c:7c:
db:53:11:44:de:da:38:cb:18:55:d0:dc:aa:48:ed:db:57:0e:
60:28:49:3e:43:7a:2a:5e:aa:5a:1e:c8:06:b9:53:31:8f:0b:
6f:d6:1b:3e:68:5f:21:f6:66:a3:f8:4f:89:eb:45:68:7a:1a:
ac:5d:38:a0:53:1b:3c:c3:da:9c:9a:09:db:34:f6:f8:4f:42:
b3:33:b7:cf:6f:b1:ea:1a:1a:ca:99:95:f2:15:a7:fe:f8:94:
55:04:41:df:91:51:da:b9:58:30:15:c8:dd:94:9b:96:8e:0c:
26:7d:3f:12:47:30:9e:fc:6f:1a:2d:2e:9a:b3:21:54:a6:ba:
ee:75:6d:43:c1:81:3a:37:0e:77:11:bf:e9:52:c8:05:69:ce:
f5:5f:e3:72:0a:71:b7:cf:42:c1:82:52:25:49:a4:8a:74:52:
13:16:50:dc:0e:ef:ea:14:79:89:dc:1d:ac:49:64:75:aa:8f:
14:0d:15:35:be:32:51:f5:ea:cc:ca:19:a6:f0:50:8d:20:aa:
ee:21:ec:c2:b3:a5:26:51:c4:42:4f:a8:db:df:63:ca:b8:2d:
fa:72:5a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:12 2025 by rpki-client