Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6ED16090DA8011EFA59C0E99762E951A.roa
File: 6ED16090DA8011EFA59C0E99762E951A.roa (raw, json)
Hash identifier: q2uRLkj/ros9JY9mDD+brHdIykmSFjunv5nqEct+cS0=
Subject key identifier: F3:E8:A0:24:E8:C9:0E:F5:52:4A:77:3C:35:C4:70:93:B9:30:5A:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01100C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6ED16090DA8011EFA59C0E99762E951A.roa
Signing time: Fri 24 Jan 2025 18:24:22 +0000
ROA not before: Fri 24 Jan 2025 18:24:18 +0000
ROA not after: Tue 25 Feb 2025 18:24:18 +0000
asID: 44559
IP address blocks: 156.246.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69644 (0x1100c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 18:24:18 2025 GMT
Not After : Feb 25 18:24:18 2025 GMT
Subject: CN=6793dad6-9c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:c3:39:c4:14:25:64:68:5e:01:5f:68:4d:
12:70:f9:03:8a:e4:c9:90:fd:56:97:ed:2c:29:7f:
97:7f:60:11:41:bc:8f:f2:96:d1:bc:f7:54:a6:56:
fd:63:d2:a3:f2:33:c8:d1:9c:ce:61:e6:85:26:b8:
34:e1:5a:e4:3e:92:fe:cf:c5:a7:d0:67:a8:42:88:
52:f7:6d:c7:0a:bf:08:ac:73:c2:00:51:73:69:72:
10:e3:c3:01:0c:91:75:00:7b:21:2e:2b:9b:ec:3d:
ed:d7:30:a5:14:ea:89:8d:2a:9b:ec:ac:7c:54:c1:
9c:25:aa:71:d9:c8:4e:ff:fc:1a:d6:6b:22:63:2d:
9d:94:b3:73:f8:29:c4:a7:d8:af:f2:e1:93:cc:82:
ff:b1:0d:c2:e8:4a:a6:21:32:1e:68:3d:c1:48:e8:
d6:76:88:6e:dc:37:74:3d:99:09:75:50:a2:34:77:
57:ac:22:2b:7e:2e:c4:44:c3:c8:4e:43:58:69:5a:
7a:67:4f:47:1a:5f:1e:4e:e1:88:1f:ac:4f:80:f9:
ff:40:2b:e8:7d:f3:c3:85:9d:a9:e9:ed:02:0e:00:
a9:04:29:8c:0e:f6:f8:c8:df:31:97:69:45:6c:68:
f4:0c:ad:b3:4d:73:6e:bc:26:96:7d:0e:a8:27:db:
e6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E8:A0:24:E8:C9:0E:F5:52:4A:77:3C:35:C4:70:93:B9:30:5A:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6ED16090DA8011EFA59C0E99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.168.0/24
Signature Algorithm: sha256WithRSAEncryption
00:3a:0a:51:af:46:98:89:67:f8:5b:57:8a:bc:32:ee:91:fb:
25:16:05:1f:5c:28:10:8c:9f:d1:f7:93:45:38:fa:e2:fa:00:
b5:c4:77:5a:6f:aa:bb:60:72:75:96:61:2b:59:05:55:0b:c8:
75:e8:15:bd:d7:b0:66:68:0b:15:91:4b:a7:77:54:a9:fc:8e:
a4:b9:63:f1:37:a8:a8:b7:c4:ee:fa:02:29:97:f1:59:d2:da:
6d:47:ac:f1:11:bf:08:42:55:63:bd:0b:83:7f:be:12:ff:4d:
f5:c3:1b:1c:98:51:91:86:d3:f5:cc:2e:37:3b:d7:37:a2:88:
01:4c:45:2c:bb:77:b3:f6:22:4b:9e:ce:02:13:1d:6e:66:c5:
14:15:b7:56:aa:12:03:aa:38:1c:7e:d8:0f:c7:7d:00:64:76:
56:26:62:e3:31:51:ae:0e:1a:1c:54:70:00:d1:1b:e1:a1:41:
95:b1:f5:a7:97:a8:94:5e:2e:2d:3b:5a:f7:31:07:6a:54:f2:
80:f6:8c:bb:03:f1:36:cf:de:c4:7e:48:60:9d:90:53:b4:dc:
55:59:33:75:e5:a8:4c:12:c1:0e:0f:30:6e:95:4a:d3:1a:31:
4a:62:35:94:89:ce:71:57:4f:31:03:15:54:39:4b:07:6f:af:
c8:13:f1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:48:56 2025 by rpki-client