Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3706165EDFFF11EFA48EFBAA762E951A.roa
File: 3706165EDFFF11EFA48EFBAA762E951A.roa (raw, json)
Hash identifier: tUMS4v5U9QMQFOVefAx7RRPvSWp9p5ubL0pPxHTdqlA=
Subject key identifier: 2D:F6:26:33:4C:C2:F9:47:2A:E3:F5:CA:5F:7A:C5:2C:48:50:65:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3706165EDFFF11EFA48EFBAA762E951A.roa
Signing time: Fri 31 Jan 2025 18:14:30 +0000
ROA not before: Fri 31 Jan 2025 18:14:27 +0000
ROA not after: Tue 11 Feb 2025 18:14:27 +0000
asID: 55714
IP address blocks: 156.238.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71379 (0x116d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 18:14:27 2025 GMT
Not After : Feb 11 18:14:27 2025 GMT
Subject: CN=679d1306-5cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:c8:0c:ef:12:7e:05:a2:d0:99:c6:bd:fd:
26:20:b2:f1:68:50:39:15:f7:68:55:1c:22:be:ae:
b4:ee:3b:67:21:13:2e:0f:c9:2b:0f:96:39:b9:35:
5c:9f:f5:85:5e:82:b7:ac:1a:4f:ed:df:75:71:9f:
58:6c:bf:78:8f:cc:c7:68:2a:a0:3c:f0:3f:ef:c1:
78:8d:2d:be:a6:8f:1e:26:49:f7:67:e7:7f:a4:3d:
ef:b6:ee:c2:68:39:1c:6c:b4:95:54:92:59:55:d0:
30:26:4f:46:f8:29:5e:41:8c:9d:33:a4:c7:01:96:
39:26:1b:1d:fc:6a:65:72:4e:cf:44:ed:c3:8d:ed:
99:f3:e0:fa:30:a2:18:d0:0a:5b:5f:72:c4:8c:5c:
15:b9:86:46:4f:78:d6:dc:67:e9:9b:ac:88:f9:ca:
b4:0e:ed:ad:7c:9e:b0:1d:b6:2c:96:8c:b8:1e:1e:
70:b7:8d:3a:e7:5d:e3:6b:92:b9:7e:44:31:5a:c0:
bd:07:89:6b:c3:bd:b5:0c:77:f2:fd:e7:3a:9e:e6:
e9:25:a3:5b:c9:b3:31:85:c8:a7:da:90:79:fa:db:
5e:a1:82:ee:f4:00:10:10:6a:57:4f:fc:b7:25:a9:
e0:8d:48:1c:88:f3:df:a6:97:11:ad:06:20:27:44:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F6:26:33:4C:C2:F9:47:2A:E3:F5:CA:5F:7A:C5:2C:48:50:65:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3706165EDFFF11EFA48EFBAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.76.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b4:94:6b:ca:c2:8d:5f:7f:06:03:0e:2c:c1:b7:7c:0e:f6:
77:16:61:6d:3a:ed:94:11:a2:08:0f:83:cb:b4:92:e7:9d:1c:
f9:1d:32:76:07:58:4d:48:7a:9e:fa:ff:0a:6d:15:f3:cc:72:
b5:3c:77:c9:4f:8b:e5:af:ab:f1:b2:05:03:78:ec:a3:03:b2:
3e:f2:1f:3e:22:85:18:f2:ab:b6:a4:0c:1a:17:8e:03:76:0d:
f4:1f:60:86:fa:ab:67:05:48:28:58:d1:cb:0c:6a:e6:8a:b7:
23:4c:c4:77:53:69:8b:40:cb:c2:31:b2:a2:6a:ed:93:a1:c9:
c8:9e:14:6c:1c:02:59:f3:07:52:26:08:13:28:fd:21:a0:98:
63:de:f4:ba:67:3a:1c:27:fe:c6:05:5a:73:7e:1e:4f:20:4f:
f0:33:ac:14:ee:37:b1:4f:ff:80:97:5b:2b:67:e2:c1:51:43:
d9:63:10:27:71:15:7b:63:b7:37:88:6e:ce:ab:96:ae:24:1c:
89:e9:5f:44:fa:b4:22:a8:9a:9b:df:36:55:30:c9:90:d1:38:
6b:76:ff:f4:39:2e:01:87:b4:ed:ba:b3:fc:18:21:53:62:74:
d6:68:71:5d:cd:02:a7:51:a4:48:d9:8f:a3:2e:1f:21:69:df:
64:ee:e4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:37:41 2025 by rpki-client