Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E401CCED3D711EFBA2CEDA0762E951A.roa
File: 2E401CCED3D711EFBA2CEDA0762E951A.roa (raw, json)
Hash identifier: XltgQw5QhHYydDgDFA6Q3VvzBt3cz/kO09KM7//BEy0=
Subject key identifier: B0:D7:FE:C4:58:12:0A:E5:38:05:7E:F8:B9:55:AC:96:43:34:2E:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E401CCED3D711EFBA2CEDA0762E951A.roa
Signing time: Thu 16 Jan 2025 06:57:42 +0000
ROA not before: Thu 16 Jan 2025 06:57:38 +0000
ROA not after: Thu 06 Feb 2025 06:57:38 +0000
asID: 55714
IP address blocks: 156.238.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67758 (0x108ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 06:57:38 2025 GMT
Not After : Feb 6 06:57:38 2025 GMT
Subject: CN=6788ade6-96b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:61:32:eb:29:8f:52:d1:38:ac:5e:fe:5c:
80:47:36:db:f6:db:4a:7f:a1:fe:5f:6f:7f:8e:b8:
66:21:c4:04:cc:1e:20:bf:df:77:25:bd:8f:b4:d1:
57:e1:d5:25:c7:3c:89:70:dc:fd:3f:60:79:f2:4c:
41:d9:f6:af:50:12:45:bf:9d:48:49:29:40:e4:9d:
8f:97:d2:98:de:55:0d:a0:02:82:7a:10:48:01:8a:
fd:b8:ea:9d:86:3c:c7:ca:f6:9f:17:dc:e4:3d:f1:
6c:5a:e6:25:a1:8b:ee:06:1c:27:10:55:6d:67:44:
21:9d:39:e2:3a:db:26:bc:dd:24:7b:0d:df:3a:aa:
20:f8:20:62:be:30:4a:7f:3a:bc:85:a3:ee:80:91:
88:91:65:e8:44:c9:1b:d6:b7:1e:c4:28:bf:fc:86:
c9:1a:a6:8e:6f:9d:3e:51:27:0c:d1:13:34:00:8a:
e1:52:e7:20:67:be:bc:05:81:6e:47:1f:f6:6d:c3:
dd:40:e6:1a:33:34:4f:b1:e8:05:77:98:ec:c5:48:
01:87:af:17:ab:9b:d5:f0:5c:1c:91:8f:89:ff:95:
03:a4:de:e5:33:fe:67:ca:f6:3e:47:e1:16:ac:88:
44:a5:0e:5d:f3:5e:91:30:d9:8f:0e:88:a1:bd:76:
73:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D7:FE:C4:58:12:0A:E5:38:05:7E:F8:B9:55:AC:96:43:34:2E:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E401CCED3D711EFBA2CEDA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.72.0/21
Signature Algorithm: sha256WithRSAEncryption
92:21:f2:da:9c:a5:77:3b:13:d1:66:8b:68:53:ea:da:50:99:
67:5d:34:d8:45:7e:41:e3:e4:bf:27:d0:de:d2:82:a3:58:95:
b1:1d:a4:a6:e8:48:61:c2:ef:0f:59:ae:f5:be:24:d1:06:9a:
bb:c7:b3:c3:43:d5:e3:59:dd:5e:9f:69:63:1b:a4:e6:51:f9:
92:6d:ae:f4:9b:9c:60:99:31:a5:04:00:ac:8c:d0:be:9f:fb:
90:26:07:31:d0:83:17:1c:77:c4:9d:b1:ba:ff:3e:59:7f:b7:
11:92:cb:54:10:83:50:0b:7b:5d:6e:df:4c:b4:43:49:1a:cb:
0f:bb:af:ae:64:a9:87:e3:a1:c4:c4:ea:78:7b:19:53:66:2c:
f6:8e:b3:50:09:15:e4:14:e4:56:e9:32:8e:1e:0f:82:9c:48:
5a:24:84:ad:d3:61:50:96:dd:ed:c2:6d:52:15:b3:1c:23:e5:
0a:f2:70:6f:fa:7a:fd:17:c5:43:f2:67:21:b1:6e:91:ca:00:
93:50:06:c6:c4:8c:d0:61:37:ea:ed:07:71:98:4c:6c:c6:87:
06:3c:d4:83:73:21:a7:bb:52:7c:fc:0a:4d:60:d1:4f:4b:ca:
29:0a:38:e6:be:76:24:17:b5:ca:a1:84:6d:6c:5f:63:43:11:
d4:dc:80:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:11:54 2025 by rpki-client