Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C6B9B02DFE711EFA958008C762E951A.roa
File: 5C6B9B02DFE711EFA958008C762E951A.roa (raw, json)
Hash identifier: MBUMfxnOWBgp5dHAJjYOHHuFu7TXAEt+CViFaYdT6W0=
Subject key identifier: 33:23:B5:0A:EB:0F:D1:F0:F1:B4:84:3A:DB:FA:4A:5E:F7:BB:01:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011629
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C6B9B02DFE711EFA958008C762E951A.roa
Signing time: Fri 31 Jan 2025 15:23:46 +0000
ROA not before: Fri 31 Jan 2025 15:23:41 +0000
ROA not after: Fri 07 Feb 2025 15:23:41 +0000
asID: 152700
IP address blocks: 156.228.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71209 (0x11629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 15:23:41 2025 GMT
Not After : Feb 7 15:23:41 2025 GMT
Subject: CN=679ceb01-db38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:83:79:45:19:be:e1:82:52:76:01:db:c8:
0e:0a:78:29:9a:c0:9a:b6:60:52:be:18:68:3f:ff:
c3:9e:48:7a:f7:37:4e:f6:98:cc:fa:9d:c7:c9:44:
9d:bd:1a:c5:80:1a:21:6f:67:14:d1:8b:16:61:5c:
e4:29:4a:66:58:fd:3d:3d:da:8c:a7:25:ab:0b:10:
d4:63:8e:f1:44:30:d2:95:86:98:21:3b:b2:d1:50:
07:4b:be:ef:2a:73:db:98:4f:37:3b:e5:42:d5:31:
5c:04:0b:48:1d:94:48:07:3a:0c:c5:f5:9b:9a:8d:
55:26:0f:c4:5f:fe:20:da:b3:d0:8a:97:77:f6:d1:
67:a9:51:79:0c:6e:aa:46:ea:2b:f7:5e:85:b3:ee:
64:24:89:34:c4:e0:ff:c5:55:25:8b:06:9c:53:19:
72:9d:f5:31:5c:4a:e7:70:cd:15:11:db:5b:2e:ef:
10:fe:91:63:5a:20:e2:ba:aa:21:6e:21:9d:e8:fb:
79:3b:fd:54:d3:62:4f:95:ae:42:91:74:b4:af:77:
7a:4b:1e:02:2d:1d:a6:bd:fc:ab:1b:1d:6e:58:4b:
02:56:27:91:f7:82:29:7a:11:6b:99:14:68:91:bf:
34:d4:19:6f:85:d3:e6:4a:b2:2d:0a:33:1f:0b:ce:
24:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:23:B5:0A:EB:0F:D1:F0:F1:B4:84:3A:DB:FA:4A:5E:F7:BB:01:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C6B9B02DFE711EFA958008C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.126.0/24
Signature Algorithm: sha256WithRSAEncryption
37:3e:91:25:3a:fc:56:6a:04:18:5b:12:f2:77:db:81:39:86:
ef:7e:fe:53:0b:73:81:0b:e1:7b:0b:12:3b:0b:ac:78:72:3a:
31:08:28:c9:b5:b2:10:af:d9:b6:19:8e:68:2d:ee:42:82:07:
75:b7:98:44:c3:26:b0:58:ab:da:d1:35:73:72:89:9c:fb:bd:
7a:bb:f3:a4:31:df:65:b0:58:89:69:33:89:2f:fc:13:80:d7:
9b:11:0b:da:e1:fb:df:d1:f3:87:76:92:77:f5:68:bb:e6:28:
3f:e3:5d:d8:c1:af:47:96:6f:73:58:fb:c5:cb:1c:1f:96:70:
36:b8:19:01:3b:84:14:bb:d8:cb:f2:a2:01:2f:98:9a:07:68:
b6:69:80:14:8c:46:7b:dd:97:15:5d:bd:37:73:63:8e:0d:27:
1a:38:ea:e6:15:ca:1f:d1:5c:48:a7:e8:12:42:0e:c6:a1:4f:
da:9c:38:7c:6a:4c:f1:95:a9:83:c8:6e:87:8f:40:98:25:92:
19:03:0a:99:20:82:f8:f5:6a:ee:0d:8e:96:4a:23:5e:17:2b:
6a:15:59:a8:46:25:e2:eb:79:88:25:77:35:ee:51:3c:27:ee:
d5:ff:ff:ab:60:69:44:88:c7:48:3f:a1:12:a9:4a:b0:49:44:
f4:c6:51:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:57:40 2025 by rpki-client