Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/639C3C7AD7C611EF8BC24D62762E951A.roa
File: 639C3C7AD7C611EF8BC24D62762E951A.roa (raw, json)
Hash identifier: nISyyR8keO5S2p9Nj7dBC2OBTHoQJI2fUGsxj2ElzlI=
Subject key identifier: D4:4B:78:54:AC:F2:E5:01:DB:65:60:E3:01:36:3E:25:F3:A0:F6:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CB2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/639C3C7AD7C611EF8BC24D62762E951A.roa
Signing time: Tue 21 Jan 2025 07:07:35 +0000
ROA not before: Tue 21 Jan 2025 07:07:31 +0000
ROA not after: Tue 18 Feb 2025 07:07:31 +0000
asID: 61461
IP address blocks: 156.247.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68786 (0x10cb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 07:07:31 2025 GMT
Not After : Feb 18 07:07:31 2025 GMT
Subject: CN=678f47b7-62fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:60:a6:eb:39:c5:25:5e:be:8e:6d:61:cc:
86:d4:48:49:43:6e:cb:40:22:ab:2c:94:6f:08:d0:
31:1b:b8:8f:ec:6e:ca:b4:29:0b:d2:ce:86:11:ec:
30:b3:a2:26:93:5a:d6:bb:cb:06:35:a8:08:af:1f:
3d:75:57:61:07:c4:ba:dd:9b:14:2c:34:e7:0b:31:
ba:14:08:2b:91:fc:89:24:4b:ca:d1:dd:de:da:6b:
fd:90:70:3c:3a:f3:23:21:b8:8c:25:ad:5a:7a:8e:
ba:12:52:93:cd:b2:5f:8a:a9:e1:ce:21:ff:26:6a:
cc:22:c1:9f:0b:6d:eb:a2:f8:76:84:d5:5b:a0:39:
82:42:b0:5e:1c:74:09:0a:fe:54:63:51:c2:85:5f:
bc:f6:b3:75:de:af:f5:56:5b:b7:f0:bb:49:78:a4:
de:e5:79:81:36:b0:0a:24:98:09:a1:96:01:40:e9:
1b:75:9a:7b:53:9c:53:d3:6d:cc:99:18:1c:b3:3e:
52:94:0f:95:f6:ec:c7:30:71:60:0f:71:5b:18:13:
9a:6e:90:16:46:37:2f:9f:3d:67:9d:01:00:e5:4a:
82:59:e5:ef:f7:b5:4d:67:ca:de:16:f6:5c:5e:b2:
e0:4a:e3:5d:05:8f:92:28:60:4b:58:07:cb:a2:88:
40:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4B:78:54:AC:F2:E5:01:DB:65:60:E3:01:36:3E:25:F3:A0:F6:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/639C3C7AD7C611EF8BC24D62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.128.0/17
Signature Algorithm: sha256WithRSAEncryption
4b:27:95:c5:ff:7a:a1:76:f4:cc:b9:18:d9:1c:12:bf:7b:32:
6a:3a:6c:0a:97:c1:e1:e8:7c:94:af:4e:05:bd:66:c6:a4:c5:
ba:11:15:85:51:58:d2:77:db:ec:ae:a3:ed:af:94:84:9f:bb:
1a:dc:c7:8d:af:db:f3:0d:a3:43:0f:b5:db:95:18:e8:45:c6:
d8:90:bd:59:a1:51:98:39:5d:18:59:21:b4:fe:65:b5:6d:21:
8c:6c:b3:4a:51:78:a9:3c:9e:8e:a9:49:62:46:43:fc:7e:8f:
f9:5e:b8:19:9f:71:19:c0:2d:e4:21:81:97:8e:72:09:74:ea:
e0:25:2c:91:62:ae:25:75:31:9b:dc:57:00:e5:73:36:b6:2e:
1d:16:8b:9b:13:77:a3:b4:2a:49:1e:dd:16:5c:44:96:13:0a:
54:3d:18:0c:ef:db:05:fa:4c:5e:2b:53:60:bf:dc:56:6f:e7:
6c:fd:35:a7:48:91:59:ce:43:32:2b:d6:a7:a3:76:1a:4c:c2:
3b:57:64:ab:91:a9:1f:82:4b:76:b5:71:54:32:ac:09:fb:c7:
d8:82:5d:4b:3d:1b:99:76:d4:b7:a0:e0:c9:d0:0a:6d:b7:dd:
ac:95:b7:86:a3:30:00:0b:7f:58:bd:fe:7a:4d:98:ce:c7:88:
81:56:2d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:13:30 2025 by rpki-client