Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3190D25ADA7C11EFA12FCD7D762E951A.roa
File: 3190D25ADA7C11EFA12FCD7D762E951A.roa (raw, json)
Hash identifier: s/pgsTVQ0iBHCcQhmh82hy9js5btQVTIo1a4UCXHz2g=
Subject key identifier: 9E:70:45:98:9C:D6:46:9D:B2:98:53:3B:14:78:65:C2:87:10:76:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FF0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3190D25ADA7C11EFA12FCD7D762E951A.roa
Signing time: Fri 24 Jan 2025 17:54:01 +0000
ROA not before: Fri 24 Jan 2025 17:53:58 +0000
ROA not after: Tue 25 Feb 2025 17:53:58 +0000
asID: 44559
IP address blocks: 156.246.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69616 (0x10ff0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 17:53:58 2025 GMT
Not After : Feb 25 17:53:58 2025 GMT
Subject: CN=6793d3b9-81be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:e1:96:c4:a7:46:50:02:80:a6:4d:10:2d:
f4:be:4c:a7:a5:70:33:30:51:66:6e:16:c7:85:95:
43:ae:b9:e8:56:94:fb:54:25:82:7d:a3:09:ae:95:
d1:ce:02:23:d0:5b:f4:5b:ba:1b:83:2f:db:14:78:
d3:99:75:09:4d:42:1f:72:c9:30:0b:5a:cb:d0:6a:
ce:a4:c9:5a:18:cb:fe:9a:7d:53:67:a7:9f:d1:b7:
c8:b8:fd:a2:9d:e5:6b:d3:be:8b:89:76:49:86:17:
a3:31:d0:6b:95:1d:1d:2f:3f:0c:b9:53:eb:2c:e2:
77:6f:ec:70:a0:20:bf:c9:90:7b:26:ed:dd:44:95:
c5:d2:97:00:8b:91:b7:f4:93:df:4b:ce:c2:59:56:
d5:4c:a4:cb:29:29:fc:8e:1d:3c:db:14:cc:ae:35:
4f:6e:46:a3:43:04:a6:d2:9c:8f:f5:64:ca:7d:19:
59:f6:e4:21:c7:af:66:29:59:23:e5:d0:ef:33:c4:
c5:83:a3:36:7e:90:b8:53:e5:0d:3e:1d:83:01:d4:
a5:16:ec:d8:ec:7e:39:5e:ac:aa:75:0e:cc:de:f6:
49:08:be:5a:df:b1:75:25:01:e6:1c:e0:7b:87:93:
af:69:4a:9b:66:e2:a7:17:e5:d8:5b:c4:1e:3b:2c:
5d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:70:45:98:9C:D6:46:9D:B2:98:53:3B:14:78:65:C2:87:10:76:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3190D25ADA7C11EFA12FCD7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:37:10:4d:a6:18:86:f0:24:9a:49:c3:f8:35:aa:e3:0b:09:
66:76:1e:d9:19:96:41:31:12:91:26:4b:02:47:6f:5c:4d:a6:
ad:5e:b0:ed:d6:44:6e:41:29:3e:c9:b9:22:fb:c8:b1:64:27:
cc:ca:22:c0:74:98:e5:84:aa:26:74:7a:ac:6d:95:6e:76:2e:
6a:bb:97:1f:8f:cb:58:ec:69:a3:98:3e:4e:e5:ab:d1:20:d6:
c3:bf:53:1e:d4:10:5b:19:e4:71:31:72:f9:0f:12:49:ec:17:
81:37:8c:ae:c4:76:0f:32:de:cb:31:d8:ee:ca:da:cc:ee:88:
ea:58:ef:cd:41:8d:1f:92:4f:1d:c9:dc:3e:d8:e2:8a:d2:7d:
c3:1e:7f:b9:65:f2:32:9b:f9:65:3a:10:83:5a:b9:ef:04:ea:
7e:dc:2b:e7:52:5a:38:7d:1b:fb:18:7d:71:89:4f:ee:f5:ea:
f6:80:c7:37:55:22:8e:0f:eb:31:ea:2b:c7:e1:e4:b5:f6:07:
e0:1b:25:7f:63:7a:2f:60:35:cc:8c:e6:91:d3:b2:92:2d:0d:
2c:1a:42:a4:f6:cc:ff:9f:89:18:f3:3d:84:11:75:e8:20:66:
3c:7f:08:dd:ea:70:eb:0e:7d:a6:a6:2b:57:0c:cc:00:31:ac:
77:d8:95:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:08 2025 by rpki-client