Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7476B2FCD7F611EFA4CB5D9A762E951A.roa
File: 7476B2FCD7F611EFA4CB5D9A762E951A.roa (raw, json)
Hash identifier: wrsqXXQ37XozE2gWALsoywNpja8i6sD7upOFLEh6WO0=
Subject key identifier: 74:E6:C0:F6:2D:A8:8D:B8:73:C8:19:78:AF:1D:A2:39:39:84:A1:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DB6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7476B2FCD7F611EFA4CB5D9A762E951A.roa
Signing time: Tue 21 Jan 2025 12:51:39 +0000
ROA not before: Tue 21 Jan 2025 12:51:35 +0000
ROA not after: Sat 01 Feb 2025 12:51:35 +0000
asID: 44559
IP address blocks: 156.246.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69046 (0x10db6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 12:51:35 2025 GMT
Not After : Feb 1 12:51:35 2025 GMT
Subject: CN=678f985b-5f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:a4:87:9b:09:84:ac:e0:11:29:1f:e9:7e:
aa:69:19:bd:49:05:2e:05:02:02:0c:a7:45:63:87:
a7:ef:c6:d1:6f:c8:26:a5:ec:95:44:8a:84:55:12:
6a:3c:f2:c3:23:40:91:45:fc:5b:24:59:6d:20:e0:
10:ac:7d:5e:ab:3b:ff:ff:ef:ac:7d:1b:2f:03:79:
de:6e:8c:bb:2c:f4:c4:e3:45:82:90:cc:cb:34:9f:
c2:31:f7:4a:2d:b5:d4:05:9c:f3:9f:91:3b:92:2a:
4b:e9:6c:21:ac:d3:34:4e:27:61:5d:ea:c8:f8:10:
5f:7a:7d:44:a9:4d:36:b5:f3:bc:09:65:65:45:12:
87:07:46:98:60:cd:ca:aa:4a:68:a0:f8:40:ef:e4:
00:3c:d9:29:ab:04:ec:2b:93:86:f0:e9:a3:9d:84:
36:53:16:b6:c5:06:49:a3:91:36:e0:8e:99:3b:83:
19:d9:c3:89:fe:1f:62:77:3a:d6:1c:ca:2b:6c:fc:
ec:cd:dd:f2:b5:a8:36:15:c0:da:5c:a5:54:ff:33:
d6:06:2b:73:9a:b5:61:1e:e7:c6:e6:3b:97:4f:76:
0c:7b:ed:aa:63:f0:af:be:de:8a:70:fc:cb:3c:35:
d4:c9:cb:01:13:87:62:7a:30:fe:ed:cf:5c:c6:ac:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E6:C0:F6:2D:A8:8D:B8:73:C8:19:78:AF:1D:A2:39:39:84:A1:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7476B2FCD7F611EFA4CB5D9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.252.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f3:80:6d:29:10:06:73:79:39:73:27:b9:2b:fa:c2:a4:2a:
cb:9e:f6:84:d8:5a:32:7a:73:8d:23:5a:ae:20:f1:be:3c:b6:
d1:e7:ae:a5:06:05:0e:45:5e:63:bb:95:35:99:e7:17:92:93:
03:3f:6c:88:f4:07:dc:74:38:32:d2:c6:51:d7:56:14:7f:63:
19:3e:5e:77:19:78:6a:15:7a:21:0b:67:d0:f6:10:5e:19:2f:
a7:a8:dc:b5:96:2a:e0:53:fa:ab:34:d4:0b:dc:80:56:dc:af:
dd:2f:46:e1:73:4f:8c:f6:a4:1c:b1:d0:cc:0a:ef:95:44:a3:
56:ce:30:96:ac:93:4c:68:e9:d5:62:17:24:7a:48:a4:9e:b6:
6a:bc:83:73:17:5a:03:3d:46:65:d9:b1:1c:28:fe:d3:2a:bc:
97:98:c6:07:a9:e3:ae:7a:dd:df:e3:0a:e8:e6:c3:ca:e0:a0:
1a:67:2d:f4:ce:09:82:88:9e:77:ff:e4:7a:59:2a:91:83:c3:
55:88:29:6a:ac:1c:2d:6e:01:ce:c4:24:6b:a6:84:34:0f:0c:
f8:36:4e:6c:d5:47:a5:ec:73:80:f6:87:1a:4a:d0:a0:08:6b:
c3:de:a2:1e:4e:ee:a2:c4:87:61:03:13:88:ca:c9:f2:16:20:
ee:85:27:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:05:24 2025 by rpki-client