Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/245A7322D70A11EFBDD3DA90762E951A.roa
File: 245A7322D70A11EFBDD3DA90762E951A.roa (raw, json)
Hash identifier: mkyuaLmvlkEn9FG3tz0LrZdAn2sljV0umLFlnfksOmc=
Subject key identifier: E1:5E:62:C5:AA:2F:2E:2F:C8:E2:ED:A1:77:0A:1B:1D:84:FD:97:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C01
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/245A7322D70A11EFBDD3DA90762E951A.roa
Signing time: Mon 20 Jan 2025 08:40:03 +0000
ROA not before: Mon 20 Jan 2025 08:40:00 +0000
ROA not after: Sat 01 Feb 2025 08:40:00 +0000
asID: 44559
IP address blocks: 156.246.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68609 (0x10c01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 08:40:00 2025 GMT
Not After : Feb 1 08:40:00 2025 GMT
Subject: CN=678e0be3-26cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:3f:82:49:e4:c8:ce:77:e0:5f:ec:cd:bf:
d8:1c:6f:4a:4a:ea:b7:0b:3c:15:d3:cc:96:b1:dc:
6a:c0:40:c0:0c:48:39:44:5f:7f:87:1c:44:ad:2f:
ae:74:62:24:e3:50:04:f9:ea:28:c1:9f:d9:b9:31:
22:f5:04:0a:e6:9a:78:ae:57:4b:e6:11:f8:b8:05:
28:33:72:1e:17:23:ca:44:04:40:ba:db:7d:27:af:
19:cb:df:ae:8c:88:1e:e4:90:e4:16:8c:11:38:a1:
d5:99:23:bf:4c:36:d0:fe:8f:b0:bf:82:63:84:8c:
93:98:a1:5c:24:52:7e:57:f5:0c:ab:8f:10:db:5d:
ce:ad:a5:39:90:fa:2b:9d:dd:44:86:85:52:2e:f5:
24:1b:dc:a7:90:1c:ec:c7:66:f1:44:f9:1e:5e:0a:
3c:38:91:af:45:e3:4c:e3:f0:ef:a7:66:88:e4:b6:
c5:8d:a7:0a:4f:c3:60:40:44:00:e8:c9:b9:08:95:
0c:4e:bb:0e:21:63:9d:62:ac:ab:dc:fb:f1:83:47:
64:6c:97:64:5d:4d:3c:c9:34:96:a6:13:ff:fd:4d:
97:0f:2e:14:ff:5d:ef:de:2e:93:f7:77:45:8c:e6:
33:d5:92:40:51:43:78:1a:a5:98:2a:f8:0a:f8:f0:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5E:62:C5:AA:2F:2E:2F:C8:E2:ED:A1:77:0A:1B:1D:84:FD:97:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/245A7322D70A11EFBDD3DA90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.166.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:63:a9:77:bb:ad:e9:3e:68:bc:d4:a8:04:9d:37:ea:04:58:
00:66:a5:ce:a2:3c:aa:7c:40:7f:4a:19:9f:3f:18:74:26:e2:
5b:46:a9:c7:ec:d5:fc:53:90:90:29:cd:e9:38:c0:a0:10:4d:
9e:43:e1:a0:5b:6b:84:e8:b0:c1:60:b7:21:7e:94:d3:b3:b9:
76:18:78:62:f7:42:53:8b:fc:59:72:92:5c:bd:23:f5:03:e0:
7f:d3:f8:d0:bd:58:cf:b9:b5:e8:f9:32:c7:af:05:b0:85:96:
dc:59:fe:85:e5:76:4a:56:1e:96:da:b9:fe:c5:06:5f:0e:20:
7e:6b:99:2d:01:07:91:3b:9c:e6:b0:49:14:ce:71:9f:36:a9:
3b:ed:fc:3c:74:2f:ba:e2:94:b3:d2:08:4d:3f:c4:51:4c:15:
db:e9:18:f3:c4:cd:6b:aa:ac:8a:3f:f0:bf:37:56:cf:d3:3e:
1e:99:c0:1a:3a:ce:ed:09:eb:06:68:15:83:ba:04:c9:47:c7:
b8:a3:06:ac:6a:eb:b6:49:54:4d:f5:1c:b9:1c:16:40:59:d3:
62:c4:99:a1:24:d8:f9:00:1a:ed:4e:9c:3c:cd:cc:c9:60:e4:
7c:c1:dc:a9:7a:10:81:6b:53:c8:73:f2:1c:31:93:a3:70:d4:
f1:a7:26:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:20:10 2025 by rpki-client