Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29E01F4AD7F011EFB49A8072762E951A.roa
File: 29E01F4AD7F011EFB49A8072762E951A.roa (raw, json)
Hash identifier: xh9k44qdPrMaOmVnXJuDc17kHMoxG2KMhgHSdE0e1Wo=
Subject key identifier: 4D:09:46:11:89:4D:73:5D:43:1D:C1:38:87:68:38:1C:2D:FD:96:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D8E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29E01F4AD7F011EFB49A8072762E951A.roa
Signing time: Tue 21 Jan 2025 12:06:37 +0000
ROA not before: Tue 21 Jan 2025 12:06:33 +0000
ROA not after: Sat 01 Feb 2025 12:06:33 +0000
asID: 44559
IP address blocks: 156.246.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69006 (0x10d8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 12:06:33 2025 GMT
Not After : Feb 1 12:06:33 2025 GMT
Subject: CN=678f8dcd-1325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:56:86:9a:68:ea:ea:0b:6f:e2:e7:e0:0c:
89:40:0f:b5:77:69:2f:fa:09:d1:5a:6f:d3:81:3a:
ef:51:ff:d8:54:0a:50:cb:b3:48:65:b8:6b:bb:0a:
6a:8e:c7:42:c5:92:ad:e8:07:73:e9:41:4b:0f:28:
fb:a3:0f:fb:98:fe:80:42:7a:55:63:1f:2c:86:28:
88:3c:ef:6b:c5:9c:26:2c:d8:ca:33:11:86:f3:23:
6a:7d:d7:0c:0f:b3:ee:28:4a:a5:12:73:f4:5f:19:
7b:88:46:85:d8:47:97:4a:74:17:e0:99:2e:05:e9:
71:e2:eb:2d:d4:64:68:2a:e8:a7:db:6e:fd:64:ad:
19:40:8c:66:89:d2:a6:b3:d3:b2:b0:45:9b:05:8b:
0e:55:1f:27:f3:ef:6e:be:b0:75:cf:66:7f:13:13:
59:ea:42:d3:ac:0e:95:41:06:f3:12:2b:9c:64:6b:
14:a3:bc:c6:79:df:a4:4d:11:c0:7b:90:3b:6b:68:
b6:44:1c:1c:92:22:98:cd:2f:0b:b0:51:0b:80:14:
f8:0b:57:22:e6:70:5d:71:06:c3:e1:b6:12:d2:e5:
c5:6b:e7:d9:ad:62:99:31:18:d8:82:14:d5:5c:5e:
a1:c4:10:08:e6:17:98:65:39:4a:bf:61:3e:ff:ec:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:09:46:11:89:4D:73:5D:43:1D:C1:38:87:68:38:1C:2D:FD:96:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29E01F4AD7F011EFB49A8072762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.232.0/24
Signature Algorithm: sha256WithRSAEncryption
48:f9:a9:c6:db:b5:1f:27:91:af:0e:e5:cf:d9:88:d2:de:2f:
82:3b:74:27:55:b9:bc:7c:71:e8:f6:0a:59:93:ba:0d:3b:86:
2d:f1:b6:00:88:86:17:c6:05:b4:50:7e:78:dd:8f:fa:d5:35:
c5:fd:f4:fb:7f:20:3f:8a:5d:96:93:2d:e1:a6:91:95:61:e2:
b2:3c:38:90:a8:8e:f0:76:4a:46:b6:0e:2d:d6:2e:86:e3:2a:
c5:7f:1b:9f:a6:fa:b1:fd:af:eb:8c:28:0d:ed:94:22:e8:5b:
fc:1d:b6:2d:77:aa:19:a5:5c:ff:5d:e6:ae:22:99:db:81:30:
ae:4f:c8:bb:51:e5:2f:36:60:ec:39:fd:c4:14:54:c6:a3:ca:
4d:77:ec:af:08:1b:7d:1b:b5:78:12:1b:29:69:60:f4:1f:fe:
f5:6d:cc:18:a5:55:89:46:e8:1f:83:d1:ef:bc:6f:6b:75:99:
c4:92:81:e0:1d:82:8e:d1:c1:94:92:47:b5:97:01:e1:34:7b:
66:34:e0:ef:24:96:27:a4:d7:ef:d4:3f:6b:d9:53:f8:7b:81:
9b:d6:aa:0e:80:76:87:0e:06:8b:1d:41:69:c0:9b:74:3f:f5:
29:c3:b7:30:24:0b:6e:09:32:af:26:1e:94:c3:3a:37:fd:1d:
7a:3a:7d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:21:48 2025 by rpki-client