Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D7941E4DAEE11EF8D232886762E951A.roa
File: 2D7941E4DAEE11EF8D232886762E951A.roa (raw, json)
Hash identifier: RhFvd2YjHvKMMKYOGgVDfF1jyhaTWRiKE2ZCu5I126s=
Subject key identifier: 6F:57:80:D3:F9:50:A7:6B:AE:18:2E:55:28:2F:78:80:C7:96:F6:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011127
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D7941E4DAEE11EF8D232886762E951A.roa
Signing time: Sat 25 Jan 2025 07:29:57 +0000
ROA not before: Sat 25 Jan 2025 07:29:54 +0000
ROA not after: Thu 06 Feb 2025 07:29:54 +0000
asID: 39600
IP address blocks: 156.238.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69927 (0x11127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 07:29:54 2025 GMT
Not After : Feb 6 07:29:54 2025 GMT
Subject: CN=679492f5-edb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:11:61:6b:7a:c0:fd:5d:ed:1f:a5:ad:00:b0:
2b:34:14:45:21:0d:3f:ba:48:45:38:96:92:26:67:
6f:88:d2:be:e7:1c:db:3b:c2:ae:e3:ce:b3:69:0b:
a9:2b:31:98:6c:66:4c:f4:c2:36:63:63:55:4b:06:
4a:7a:d6:de:da:8c:cd:fe:34:50:ef:90:c1:8c:77:
73:bc:3d:3d:a7:28:47:f8:33:7d:01:91:8c:3c:06:
60:4c:23:00:9d:7b:00:25:5c:d3:58:cc:12:8e:7f:
8d:6e:41:32:06:a4:05:43:86:23:0a:38:80:71:9c:
42:62:5f:83:6b:4b:9b:1c:48:e1:b1:fd:b2:8e:bc:
41:61:cf:57:58:28:8e:61:17:0d:2a:62:5e:e9:a7:
d5:66:b5:10:ec:ab:20:ff:5b:21:ea:27:b8:89:0d:
9e:26:27:4f:15:3d:ac:03:c8:dc:0a:ff:9e:a4:12:
29:6b:48:06:40:11:af:33:63:13:b6:8a:41:95:70:
9f:d9:6a:87:37:a7:c4:30:40:28:c2:3a:48:23:96:
f5:3d:80:16:19:18:68:ef:84:ae:47:f4:75:11:13:
c4:61:fa:d7:de:75:a2:8e:a3:0b:81:0a:8d:9f:4d:
c8:1c:a9:56:78:e6:65:c8:82:dd:42:2d:43:10:09:
1a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:57:80:D3:F9:50:A7:6B:AE:18:2E:55:28:2F:78:80:C7:96:F6:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D7941E4DAEE11EF8D232886762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.171.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:db:2e:87:e4:95:61:e1:5c:9b:ce:2b:81:ba:bc:ae:a1:f1:
4b:0a:ed:92:2e:58:bb:e7:b7:0e:e3:91:49:02:29:f3:0e:62:
39:60:02:8f:a1:53:1e:4d:77:0f:64:67:db:e0:6e:35:6a:c5:
1e:d5:35:74:bc:db:43:fb:3b:6d:27:6c:63:de:82:06:ca:bd:
0b:0a:08:ce:78:2f:20:a3:38:c2:72:32:3e:85:09:e5:34:df:
71:ea:e7:4e:f9:47:61:2d:21:82:75:80:38:0c:ed:b4:83:a1:
99:15:93:2f:ac:2d:ad:75:ce:f5:c5:af:c0:d2:8a:47:71:46:
a3:34:d5:8f:bc:06:3b:e7:fc:5f:9c:ac:6d:8b:62:84:a6:dd:
67:67:3c:f3:35:57:15:f3:5e:7f:b0:aa:17:71:b6:30:24:aa:
87:66:74:69:27:dd:c4:98:27:03:db:e5:d1:90:d9:70:cf:d4:
58:f6:4f:78:c7:f9:b9:31:0f:b5:5f:0e:89:41:7f:f7:15:af:
c4:91:c7:34:e0:c5:49:84:f7:d0:fb:21:2e:7d:61:fb:d0:8b:
e7:e3:f1:5a:4f:fc:23:c1:91:42:f9:eb:38:a2:dd:ea:62:88:
b9:2c:85:ee:c8:da:aa:0d:d9:4b:cf:79:28:6f:c8:5a:37:66:
f7:e0:bd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:54:27 2025 by rpki-client