Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63C47630DCD611EF824A9B5A762E951A.roa
File: 63C47630DCD611EF824A9B5A762E951A.roa (raw, json)
Hash identifier: dH1onvGymb4xFZBRbQPV+RTMHBRaD9SB2EDXIMzI2qE=
Subject key identifier: CE:39:AB:6F:77:CF:7F:40:8D:92:A5:96:E3:98:BB:81:A5:41:62:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011567
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63C47630DCD611EF824A9B5A762E951A.roa
Signing time: Mon 27 Jan 2025 17:44:43 +0000
ROA not before: Mon 27 Jan 2025 17:44:39 +0000
ROA not after: Sat 15 Feb 2025 17:44:39 +0000
asID: 39600
IP address blocks: 156.237.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71015 (0x11567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 17:44:39 2025 GMT
Not After : Feb 15 17:44:39 2025 GMT
Subject: CN=6797c60b-be9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:7d:18:3e:63:4e:b7:0b:4a:05:55:03:e9:
97:94:0e:ac:d4:30:c1:97:2d:45:47:0a:f1:6f:5d:
eb:7b:3d:3b:eb:bb:fc:83:de:5a:20:f0:68:67:68:
67:86:fd:b1:da:fd:e4:60:96:09:8e:99:34:e4:6f:
29:6d:6a:d3:27:c8:45:4b:40:0a:ee:c1:56:00:4d:
24:b6:d6:7f:99:a1:5c:f0:55:b7:8c:23:7d:70:0e:
74:9f:3c:64:37:b8:89:4a:ae:f4:94:11:35:f7:da:
4b:d5:8b:c3:a4:27:b3:d7:b1:c8:3a:0a:a3:02:7d:
55:8c:14:86:20:66:b9:6f:d9:ac:1e:34:2a:7e:d1:
3c:63:9c:af:4d:7d:a4:c8:1f:ed:33:57:f1:c7:de:
2b:3b:b8:0f:45:13:e2:42:0e:48:2d:3d:ab:47:5e:
92:ec:e9:68:82:86:a0:04:85:d9:f2:9b:37:dc:43:
c2:91:a1:2f:8b:9b:b0:fa:5d:bf:d3:11:0b:80:f9:
4a:e5:25:db:72:2a:3c:e0:b0:c3:f4:49:bb:01:bf:
66:34:4b:7b:e8:83:77:d2:86:69:bd:2a:7e:97:5d:
6a:60:d8:42:96:a1:16:e4:b2:54:1e:de:b1:b4:4b:
fb:58:e2:bd:71:ac:94:e5:d0:a1:e2:63:eb:82:21:
40:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:39:AB:6F:77:CF:7F:40:8D:92:A5:96:E3:98:BB:81:A5:41:62:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63C47630DCD611EF824A9B5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.122.0/24
Signature Algorithm: sha256WithRSAEncryption
23:34:d8:f7:b1:86:da:b8:83:55:c0:87:98:45:46:63:75:ed:
a0:cc:c1:59:0b:c0:42:c0:0a:02:07:aa:27:53:9c:df:20:ff:
3e:03:93:39:b3:f5:a4:82:91:a8:95:8a:c8:f3:e4:b6:cc:36:
dd:db:2d:5f:60:30:17:ad:ca:d9:f0:f5:b0:21:59:60:54:fe:
7f:db:aa:82:4b:ca:5c:04:55:34:8c:b7:6e:22:07:60:2b:ad:
20:8d:35:fe:d1:77:cb:ea:5a:51:94:db:d2:8e:5f:b3:af:0a:
e1:06:d3:1c:3f:bf:c4:a3:be:9d:c4:89:87:e5:4a:cf:34:5c:
bc:71:17:0a:22:b9:fc:d9:ae:1f:5e:03:14:96:1f:b7:c8:73:
e7:45:f0:71:ed:f5:b3:b5:41:e4:ba:2a:6e:49:73:c9:1e:b1:
40:93:25:85:d3:11:f6:c0:70:8d:87:01:89:13:6d:b6:5a:77:
98:85:16:2a:80:c8:27:48:c0:c7:2f:2a:3c:5a:be:bd:f1:53:
27:21:ce:f2:68:d3:0c:ef:d8:38:f6:1f:20:da:5b:27:fc:c3:
dd:66:6e:30:41:e9:74:6c:17:1f:44:2a:c6:7a:ab:8f:b1:1a:
87:a0:3e:06:1b:c7:27:c3:73:b4:fa:4d:eb:8d:73:92:c1:30:
b4:59:ec:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:48:29 2025 by rpki-client