Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4194B6AAD7D211EF8930A2AE762E951A.roa
File: 4194B6AAD7D211EF8930A2AE762E951A.roa (raw, json)
Hash identifier: WwpRdGLQ2cxJGIr6E+MwkcU+LNwsRsNXrsNJY3A2jrk=
Subject key identifier: 61:24:84:5E:D1:F3:BC:EC:FA:28:62:89:CA:B3:8C:9F:09:06:C3:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D04
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4194B6AAD7D211EF8930A2AE762E951A.roa
Signing time: Tue 21 Jan 2025 08:32:31 +0000
ROA not before: Tue 21 Jan 2025 08:32:28 +0000
ROA not after: Sat 01 Feb 2025 08:32:28 +0000
asID: 44559
IP address blocks: 156.246.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68868 (0x10d04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 08:32:28 2025 GMT
Not After : Feb 1 08:32:28 2025 GMT
Subject: CN=678f5b9f-bceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:7f:5f:2d:95:93:1b:78:16:25:8f:15:26:
9c:80:c9:54:47:a0:6d:fe:1d:59:f2:4d:9b:c2:6d:
76:1c:71:9e:52:3d:33:a8:c4:93:d0:2c:91:b6:1c:
37:b5:8f:cc:cb:2b:ff:e8:cb:9c:fe:f1:14:02:54:
cd:e4:2a:a1:77:f6:7d:8e:3c:7e:e0:69:64:56:85:
83:6c:6e:0d:8f:bd:bb:da:a1:0e:21:3d:80:e7:52:
ce:ad:65:38:8f:09:7c:6a:a5:69:34:7c:74:f4:cb:
f7:8d:28:22:c6:7a:8f:6d:44:1e:51:94:95:af:a5:
87:44:ce:1e:fb:7e:8d:04:c9:5b:3c:08:2e:8a:c2:
32:f8:fe:54:32:a5:68:1a:ac:4d:2c:86:65:d2:3c:
4b:9c:21:4a:ce:fe:80:e9:0a:34:d2:37:e8:90:88:
7a:14:a4:8d:c2:1c:ca:bc:8c:bf:40:ff:74:09:f5:
5e:7a:49:e0:24:19:fc:b7:42:17:f8:92:ca:2b:7b:
dc:a5:3b:8b:a7:06:a9:9b:85:c5:d3:3d:13:e3:1f:
86:ce:4b:8b:ea:f9:cd:e8:05:03:cc:2c:e6:ad:c9:
d9:71:81:26:ee:d8:0f:93:00:ad:5a:c7:9b:10:b8:
76:ca:a5:28:90:de:b8:06:cc:73:53:2c:cf:26:24:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:24:84:5E:D1:F3:BC:EC:FA:28:62:89:CA:B3:8C:9F:09:06:C3:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4194B6AAD7D211EF8930A2AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.152.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e0:c9:33:a6:20:24:75:e6:e6:01:fe:f5:21:e9:62:a8:0a:
c3:c2:67:04:e8:d6:7f:4e:3d:53:6f:46:73:84:04:73:e5:e1:
d5:cf:c1:24:da:30:7b:b1:38:a4:f0:3b:5e:ef:f9:23:b7:f4:
f1:5e:96:dc:d6:30:62:7d:4f:b3:de:ce:7c:23:5b:b4:b5:6c:
ca:bc:09:62:eb:6e:0f:83:fa:ec:de:b9:d8:cd:11:b1:df:3f:
98:c0:21:76:76:6b:87:23:a5:9c:a9:5d:d6:ec:ae:33:a4:c4:
26:48:94:e1:a6:ca:8e:05:bf:aa:24:60:f1:81:73:29:af:3f:
9f:79:6d:c8:ee:73:e9:90:57:68:f1:9b:5f:96:02:fc:0e:8f:
02:33:a3:f4:a5:72:2c:20:68:55:cf:6a:5c:27:40:05:fb:94:
95:89:bb:be:8d:be:4a:d9:17:e0:10:3e:36:fa:9b:1b:0f:34:
ca:04:08:23:8b:c6:3e:8d:cf:9a:9b:f3:b8:79:31:b4:12:4e:
98:94:86:5e:72:db:7f:6e:1e:28:96:de:01:5c:6e:12:54:99:
3d:d9:66:d6:98:af:19:94:4a:ec:ac:2f:d7:0d:2d:07:e1:c7:
26:e4:fa:94:78:36:20:d9:35:78:bd:53:da:e2:73:06:a3:6a:
cd:4a:e4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:19:51 2025 by rpki-client