Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/506F80FCD80D11EFA94DDFAD762E951A.roa
File: 506F80FCD80D11EFA94DDFAD762E951A.roa (raw, json)
Hash identifier: LR3zKcwmyDurC+aUwlDn52+UUQoMyO6AzSHeo12CiPA=
Subject key identifier: 6F:67:B8:C6:16:1C:A8:F0:01:B5:2D:C1:B2:1C:A5:D4:43:0C:B0:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E4E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/506F80FCD80D11EFA94DDFAD762E951A.roa
Signing time: Tue 21 Jan 2025 15:35:17 +0000
ROA not before: Tue 21 Jan 2025 15:35:13 +0000
ROA not after: Sat 01 Feb 2025 15:35:13 +0000
asID: 202656
IP address blocks: 156.246.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69198 (0x10e4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 15:35:13 2025 GMT
Not After : Feb 1 15:35:13 2025 GMT
Subject: CN=678fbeb5-a717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:29:89:7c:fb:47:01:c2:bc:30:13:44:cc:f9:
44:80:81:08:66:ce:12:08:91:eb:d1:8d:ec:21:fa:
57:2c:0f:74:cd:f5:e7:07:eb:bc:de:39:ca:cb:24:
a7:37:4f:8f:41:f1:c9:d4:c8:a7:4a:81:de:c8:43:
18:66:45:18:d9:4a:e6:4f:d8:8d:a6:47:c5:4b:12:
dc:14:39:cc:40:a0:ef:ba:29:da:74:69:8d:de:87:
de:09:ec:33:80:60:64:72:e4:ab:02:f5:9e:49:a8:
85:4a:4f:a6:4c:fd:e5:7f:4d:81:d4:81:f6:46:89:
52:04:19:b6:84:53:b6:da:23:61:8e:f5:a4:d7:21:
d3:a0:8b:4e:83:4b:51:33:88:a0:ec:88:74:8a:5d:
17:7f:4d:27:28:db:34:31:63:8a:5e:f9:3e:79:78:
93:32:fe:74:19:95:62:fb:c6:43:ff:ec:99:5e:51:
79:1b:d0:62:14:31:94:ef:80:18:d1:b6:d4:94:85:
a2:36:08:82:6f:a3:47:fe:36:04:1b:b8:1d:09:27:
af:d8:a7:d2:cf:08:2b:88:ea:06:d4:91:12:c2:98:
90:b4:ef:f3:52:cd:8e:c7:5a:e7:bd:37:7c:3f:69:
eb:a1:e3:80:7c:07:18:dc:7b:89:34:81:c5:8a:8a:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:67:B8:C6:16:1C:A8:F0:01:B5:2D:C1:B2:1C:A5:D4:43:0C:B0:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/506F80FCD80D11EFA94DDFAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.161.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ab:5f:b9:a3:ac:15:66:dd:dc:b1:98:c3:62:d3:e6:d7:5a:
c3:98:f0:81:e3:2f:a5:1d:b9:fe:d4:49:51:80:64:32:54:5d:
fa:8c:66:be:ab:5a:eb:ea:a5:18:70:37:cf:3d:45:fb:f6:4a:
3c:fe:04:7f:14:02:38:f5:7e:91:88:26:40:47:44:ba:d5:be:
bd:5c:d1:c1:a0:12:10:48:b2:98:cb:13:71:37:e1:e0:67:66:
ff:f7:99:c1:3c:d7:5d:ff:a7:aa:09:dd:a5:01:3d:9d:fc:a3:
12:fb:c3:36:93:87:08:8e:53:f8:97:c2:a6:ec:75:a9:d0:58:
11:e2:b5:aa:64:0a:7b:ad:96:4f:cd:87:7a:be:84:7c:99:36:
b2:ab:dc:be:6d:04:62:67:1e:77:26:07:d4:33:bc:8f:f1:23:
35:b7:4b:35:1f:be:b2:59:15:1f:df:e5:12:f9:f8:44:22:81:
bd:71:bd:7e:c8:6d:39:51:83:0f:40:59:ce:e4:d0:fa:11:ba:
0b:ce:78:85:9c:24:91:60:13:76:3e:62:55:9e:a3:25:7e:62:
2d:b8:b3:60:03:4c:d0:a3:34:5c:17:30:f5:02:10:6c:c2:dd:
46:28:a1:63:92:80:64:8e:6a:8f:91:a3:b4:90:39:3d:04:6b:
4f:b6:38:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:13 2025 by rpki-client