Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FC3B83EDBEA11EF9E9E91A6762E951A.roa
File: 6FC3B83EDBEA11EF9E9E91A6762E951A.roa (raw, json)
Hash identifier: HMLZeRFhAJ87fbC6EXESRKjR4Ir8nLWIkyk8rVt6uXw=
Subject key identifier: B2:54:8A:05:4B:FE:08:14:30:3D:4D:5B:5D:C4:48:61:6D:3F:10:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FC3B83EDBEA11EF9E9E91A6762E951A.roa
Signing time: Sun 26 Jan 2025 13:35:42 +0000
ROA not before: Sun 26 Jan 2025 13:35:37 +0000
ROA not after: Fri 07 Mar 2025 13:35:37 +0000
asID: 205125
IP address blocks: 156.255.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70584 (0x113b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 13:35:37 2025 GMT
Not After : Mar 7 13:35:37 2025 GMT
Subject: CN=67963a2d-37da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:8e:70:29:1c:b1:58:54:c0:76:f5:d4:c3:
ef:ae:cd:35:c8:85:65:7d:d7:7d:2f:89:d7:6a:4b:
b2:6d:e6:c4:12:b9:25:b4:85:8c:19:8c:9d:a6:13:
14:cd:40:1e:67:86:6b:fa:42:67:bd:22:19:a5:84:
7d:89:bc:53:4f:9d:50:4d:b5:c6:4a:cb:08:b1:c5:
c2:6f:fb:ed:9b:1f:6a:0c:e6:2b:7a:12:05:ad:c5:
85:da:ce:5c:7f:0a:fc:c5:aa:a1:91:d4:92:26:13:
d3:5b:35:95:75:f7:21:1d:e6:13:3a:ec:22:26:18:
76:68:90:4e:03:7c:cc:a1:f3:d4:89:ce:1f:9e:59:
02:d5:25:75:23:99:ef:53:21:6a:13:83:c0:15:a2:
1d:cc:f4:9d:5f:8a:79:e5:92:1f:38:4a:b9:ad:1c:
ea:34:c4:2e:17:ce:2c:6c:02:90:b0:90:d1:c5:a9:
ba:df:7a:2b:ea:45:07:da:f3:93:0c:4d:e6:1c:71:
da:a1:21:1f:a0:f8:2b:dd:b4:05:ca:b5:bf:7a:45:
b5:95:37:53:06:03:35:ea:e8:bf:57:91:55:92:69:
04:ab:42:0d:72:e1:17:17:59:0f:ba:05:49:f5:52:
a9:98:14:4b:3c:3d:60:70:e8:25:13:e9:1a:79:72:
33:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:54:8A:05:4B:FE:08:14:30:3D:4D:5B:5D:C4:48:61:6D:3F:10:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FC3B83EDBEA11EF9E9E91A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.9.0/24
Signature Algorithm: sha256WithRSAEncryption
58:dd:c9:6c:80:48:47:1d:ff:29:a3:51:0f:ee:93:e0:bf:16:
f2:0e:ce:ad:4b:68:4d:0e:9e:6b:29:e0:4a:5a:2c:8a:3c:cf:
17:f4:d6:db:7d:84:f1:cd:32:54:f7:c5:12:51:50:15:ac:bb:
45:8c:1c:8d:27:76:58:4e:94:e3:2f:15:d6:43:23:72:2d:ae:
83:67:35:29:6b:82:47:18:7e:a7:a3:27:79:23:56:72:c1:68:
18:43:a3:1f:30:28:5d:3a:59:45:9a:fe:f7:f8:af:64:a0:b8:
54:44:3a:97:69:d3:83:1b:a9:6f:b2:cb:f6:f8:db:f7:19:42:
31:29:0f:9e:a8:27:6f:e9:37:e4:d0:cb:c4:f4:3a:f2:11:8c:
c9:a0:b1:0b:f0:b1:63:73:b6:4d:41:7d:ea:4c:f6:8e:30:a6:
5a:25:72:e8:17:e9:ec:78:1e:bc:fa:f3:6b:56:d1:92:99:7a:
e5:b2:d7:84:83:dc:d9:33:50:74:50:ce:6d:9d:45:e4:ff:47:
2a:b2:59:5f:cf:9c:b9:9f:11:e2:df:0a:6b:1f:a8:1a:7f:b2:
16:5b:b0:5f:0c:bf:b7:d2:56:8d:5c:51:88:0b:06:67:38:ae:
00:24:82:06:28:4f:96:cd:48:37:56:c4:5a:c9:90:b7:cd:ea:
3d:77:05:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:21:24 2025 by rpki-client