Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5964068AD97311EFB6F69283762E951A.roa
File: 5964068AD97311EFB6F69283762E951A.roa (raw, json)
Hash identifier: O8XiMwh2sw3iCTNcs06eA19AiCykVK55EeF4n8HMHas=
Subject key identifier: D7:08:05:B7:85:7A:26:5A:80:F4:C4:10:19:C4:C9:B5:A3:BB:CB:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F0E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5964068AD97311EFB6F69283762E951A.roa
Signing time: Thu 23 Jan 2025 10:18:12 +0000
ROA not before: Thu 23 Jan 2025 10:18:08 +0000
ROA not after: Sat 15 Mar 2025 10:18:08 +0000
asID: 138915
IP address blocks: 156.244.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69390 (0x10f0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 10:18:08 2025 GMT
Not After : Mar 15 10:18:08 2025 GMT
Subject: CN=67921763-b3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:90:c3:dd:e2:b8:bf:7a:39:c0:f6:95:8f:
8a:29:68:a4:72:e4:d7:8a:33:ac:90:02:38:22:b5:
bf:8e:fb:04:2c:11:37:bc:e1:74:01:0b:eb:73:e8:
63:89:56:bd:fc:72:0f:ca:df:c4:8c:02:6e:19:a6:
a4:8c:97:f6:75:4a:04:36:37:2e:76:d1:7d:34:24:
5f:c4:32:94:4c:40:b8:b6:4c:8d:74:58:20:45:f5:
b7:62:d2:02:06:cf:77:89:3b:66:cd:2b:f6:07:fb:
ab:98:68:11:f8:80:36:c5:98:57:2c:b8:2a:69:2f:
bf:7f:e5:c8:b5:7b:d1:cb:6b:53:f4:78:16:cd:91:
88:05:aa:ba:be:2d:66:65:46:02:e8:07:37:36:cd:
a9:82:12:1a:f5:c0:01:51:35:02:80:dd:bf:9d:ff:
50:e2:1b:23:98:75:b9:7b:3f:56:be:e1:67:fc:31:
3e:50:d9:81:c9:53:df:49:0d:9b:83:07:af:07:70:
19:f8:b9:73:13:9d:db:34:9b:ff:e1:cc:29:e8:8c:
33:ce:78:40:0b:3c:d3:f9:31:a8:11:54:55:cf:0b:
70:0f:38:5e:67:9a:e7:d3:32:bc:f9:cf:c2:21:4c:
5a:48:05:03:19:f1:4a:61:d4:25:cf:b5:2d:6e:4d:
69:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:08:05:B7:85:7A:26:5A:80:F4:C4:10:19:C4:C9:B5:A3:BB:CB:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5964068AD97311EFB6F69283762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.4.0/24
Signature Algorithm: sha256WithRSAEncryption
75:45:6e:5e:34:a7:a2:0f:04:fa:84:a1:dc:48:58:cc:08:4b:
89:f3:85:27:ae:b4:f3:cb:26:cf:7a:f9:e0:df:bf:b7:bf:c6:
6a:c9:d8:c8:0b:67:54:99:af:5b:c6:82:25:d2:97:52:c9:2b:
9e:11:ff:b3:2a:6a:5b:fd:45:fd:91:04:3c:8c:a5:4f:74:17:
54:ad:ed:5c:34:c9:fc:da:0b:73:c5:2c:ea:5a:a3:29:5c:73:
da:fb:6e:9d:91:56:4f:47:79:d5:09:da:9d:b3:e5:67:4b:a4:
38:d7:1a:74:de:89:bb:fe:95:41:1b:5f:ce:98:ea:aa:5f:0c:
4e:73:a5:0f:2e:f4:59:50:2b:28:57:15:fc:cf:95:51:54:8c:
81:11:8d:be:41:33:4a:0a:07:9c:3c:cd:0e:a9:37:7f:cd:74:
4f:a4:37:6e:0b:f6:3d:42:f8:a7:8c:25:47:c9:09:81:84:c0:
f4:f7:4a:e8:18:b9:b7:1c:d7:fc:54:7c:26:b3:27:fa:8a:c4:
7b:f6:6f:3a:26:3b:1a:91:a0:2b:de:bb:b6:8a:68:2e:6c:67:
15:de:b9:0a:61:84:a9:8d:09:67:b7:ea:8b:7b:69:6a:42:5e:
71:95:66:b1:84:e4:06:9b:c2:26:de:83:39:19:38:e5:cc:22:
b1:1e:e3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:35:57 2025 by rpki-client