Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54945D22D68411EF92E0CD9B762E951A.roa
File: 54945D22D68411EF92E0CD9B762E951A.roa (raw, json)
Hash identifier: mgez3yKYcZTSIQjvBtcWL1h6hDkH0dIk/0l9XaKueHo=
Subject key identifier: 8B:CA:19:80:63:82:64:FC:00:03:79:52:E0:96:00:97:66:8E:7B:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010BC2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54945D22D68411EF92E0CD9B762E951A.roa
Signing time: Sun 19 Jan 2025 16:42:11 +0000
ROA not before: Sun 19 Jan 2025 16:42:08 +0000
ROA not after: Mon 24 Feb 2025 16:42:08 +0000
asID: 395793
IP address blocks: 156.228.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68546 (0x10bc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 19 16:42:08 2025 GMT
Not After : Feb 24 16:42:08 2025 GMT
Subject: CN=678d2b63-20e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:c0:65:0f:6f:99:60:6c:f8:1f:e2:da:f3:
56:af:bd:27:b7:a2:c4:9f:1f:04:68:a3:8d:96:a0:
1e:8d:f8:21:7d:fd:35:59:a9:27:95:61:0a:83:d0:
bf:66:81:92:e8:5f:32:13:5d:bc:4e:f6:58:31:6d:
90:7f:f6:18:fe:3f:15:f0:27:e3:18:c0:25:ce:b5:
26:91:cf:02:a0:8e:11:9f:fc:bd:c8:2b:62:1c:bc:
99:d2:9e:7f:57:c3:7d:39:36:f8:b9:ec:ba:8a:eb:
38:94:e6:fc:e3:ab:a1:3d:a7:db:dd:1c:68:c4:bc:
47:41:b8:a0:0d:bf:5c:6f:09:b9:f2:63:ca:01:43:
f2:9d:fb:ed:91:bd:bd:c7:ed:c1:b8:41:20:fc:47:
27:24:e1:cb:58:85:44:ce:ce:20:19:98:28:2e:c6:
f9:2b:8c:81:40:f5:3d:c5:d0:aa:0e:c3:53:46:30:
ec:39:51:0a:55:04:50:87:c0:1a:b5:09:a8:59:64:
f5:6c:cf:c6:ae:e7:91:5a:96:45:6c:52:9a:18:55:
a6:e1:8a:8d:5a:3a:42:10:bb:cb:44:99:68:f1:22:
c4:2c:c8:94:5e:e2:23:9f:09:a7:5d:44:ac:03:8c:
3e:07:c5:39:db:5a:64:45:34:a0:61:05:d1:7b:2d:
45:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CA:19:80:63:82:64:FC:00:03:79:52:E0:96:00:97:66:8E:7B:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54945D22D68411EF92E0CD9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.211.0/24
Signature Algorithm: sha256WithRSAEncryption
43:9f:9d:17:b8:0d:fc:06:83:76:db:9c:f3:0e:81:64:38:59:
32:09:79:00:f3:8e:34:64:e9:67:84:fc:59:4d:1b:28:78:16:
3e:c4:11:10:1f:0c:48:a6:37:65:b7:5c:63:33:9f:86:f2:70:
97:54:98:55:59:bf:9f:ff:de:c7:b2:a6:f6:87:f5:57:9f:17:
ef:dd:c1:c1:b0:34:bb:72:78:d2:95:96:19:16:04:54:fd:9e:
66:65:7c:b6:c6:d4:6c:0f:0f:11:17:75:5c:d3:f0:23:4d:04:
ed:21:94:aa:72:fc:b6:3b:cb:71:cd:f5:92:8a:4f:9d:f7:15:
da:79:2c:d8:9d:9f:a0:9a:4a:09:68:cd:31:99:78:f4:f1:fc:
6d:b5:bb:13:20:1b:b8:18:a3:cd:67:12:6b:4b:d8:38:13:55:
d6:a7:76:92:21:c7:30:6e:9d:88:3c:4f:62:ad:88:da:90:f3:
a9:29:96:8c:b3:36:e2:6a:b4:50:15:f9:ae:1b:41:3d:c4:06:
2f:2c:07:7a:de:fe:30:21:b3:98:7d:aa:d7:85:2e:25:10:ec:
43:72:28:10:56:04:93:47:ab:de:c7:ed:48:b2:73:41:c1:34:
bb:38:3b:aa:49:e7:e7:0d:35:42:65:ae:60:f0:0e:4c:ce:60:
41:e0:3b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:01:12 2025 by rpki-client