Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E605CC8DA9F11EF8AA8E865762E951A.roa
File: 6E605CC8DA9F11EF8AA8E865762E951A.roa (raw, json)
Hash identifier: yHJVibIMCsEAIeNk5b76zP/qvG5ETVA873sLTC2UhbU=
Subject key identifier: 42:2E:9D:AF:21:44:24:72:F8:DB:D2:DA:6F:12:54:89:3D:CD:FE:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0110D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E605CC8DA9F11EF8AA8E865762E951A.roa
Signing time: Fri 24 Jan 2025 22:06:16 +0000
ROA not before: Fri 24 Jan 2025 22:06:12 +0000
ROA not after: Tue 25 Feb 2025 22:06:12 +0000
asID: 44559
IP address blocks: 156.246.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69844 (0x110d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 22:06:12 2025 GMT
Not After : Feb 25 22:06:12 2025 GMT
Subject: CN=67940ed8-70d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:23:5b:2f:fd:69:0f:1b:7d:91:30:70:20:a3:
3b:d0:c4:77:f3:62:ab:bd:60:5d:9f:c5:64:0b:57:
be:7a:c7:3c:3e:c0:b7:1f:7c:ce:c8:8b:03:df:3b:
0a:fc:de:4f:d7:9b:4e:81:2c:47:2a:8e:74:97:ee:
4d:04:82:1f:df:db:63:08:20:40:39:81:a2:d2:8c:
df:18:c2:6b:76:5e:91:bf:ff:b2:8e:b6:21:2d:44:
ef:d3:cb:c1:9e:c0:ee:87:3a:54:15:cb:91:5c:62:
fe:99:db:4b:1b:dc:15:c3:a1:88:8f:9a:04:e8:5b:
90:47:18:15:db:87:6b:92:0a:43:32:58:fd:32:fb:
ac:b9:07:bc:61:62:ee:fc:a3:3b:be:21:93:18:9f:
eb:27:8b:93:74:a4:91:1c:29:81:0f:f7:7d:7f:2f:
d5:01:58:f0:0b:59:92:9d:0c:fd:f4:c1:b6:63:41:
24:3f:d0:29:f3:e4:a0:03:79:2f:7f:88:17:de:b1:
4c:b1:52:a1:0f:bd:31:e9:85:c1:23:69:03:8f:42:
c2:76:db:a1:49:36:df:ab:6b:65:f5:ad:ca:4d:f0:
5a:44:04:3d:93:cc:32:5d:a1:ea:13:fc:af:a0:af:
9b:5f:0d:cd:b4:d0:8d:fa:42:7e:ee:80:d3:c6:43:
88:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2E:9D:AF:21:44:24:72:F8:DB:D2:DA:6F:12:54:89:3D:CD:FE:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E605CC8DA9F11EF8AA8E865762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.228.0/24
Signature Algorithm: sha256WithRSAEncryption
57:8d:f1:e0:6b:6e:75:0b:5d:52:0b:01:73:f9:01:e9:75:42:
4a:46:23:a3:77:65:30:a4:19:de:4a:87:f7:e5:e8:13:40:62:
54:17:f9:36:07:d1:a7:45:b2:86:9f:9d:e1:f2:d1:49:98:3e:
96:5a:e3:53:0f:a3:84:c7:d2:f3:f0:0b:04:1f:73:bb:c4:b5:
d4:d7:1f:9b:9d:85:9c:2d:e9:ab:0c:f1:3f:ff:9d:27:84:fb:
55:a2:3b:13:b2:7a:6a:a5:bf:66:50:c2:15:21:d6:db:7d:73:
3e:8d:e4:3d:ab:7b:cd:f1:11:dd:9f:ee:a6:17:8c:90:29:9e:
3e:b9:d8:5b:b2:17:92:a6:e5:f9:41:89:77:4d:e1:65:77:99:
59:45:ae:86:4d:27:39:55:ec:96:71:a6:e9:fc:64:f0:b2:ed:
8d:52:8a:00:1e:c8:7e:19:e7:3b:4c:31:07:35:5b:3a:e7:aa:
3a:5d:2b:57:f4:90:30:ae:42:19:8d:34:eb:2b:ce:ec:f5:9b:
c0:ce:66:82:f3:fa:75:3f:d2:c8:ed:bf:15:86:f6:90:07:0c:
56:ee:2d:ad:f4:e1:89:f5:93:18:53:22:28:0a:8f:f8:1e:9b:
73:f3:f3:55:25:6e:f8:be:40:ea:0d:76:52:20:f8:9b:ec:91:
e6:6f:fe:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:53:45 2025 by rpki-client