Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F67AE44D7E411EFBD8CF5A5762E951A.roa
File: 7F67AE44D7E411EFBD8CF5A5762E951A.roa (raw, json)
Hash identifier: mE8+sB7SLwgVCMllmV4bZRSh5zEjfnvmJUJQfTDQXAQ=
Subject key identifier: E3:61:48:B3:A0:2E:F2:D1:A5:08:CB:98:AE:74:EB:2C:11:90:8E:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D40
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F67AE44D7E411EFBD8CF5A5762E951A.roa
Signing time: Tue 21 Jan 2025 10:43:06 +0000
ROA not before: Tue 21 Jan 2025 10:43:02 +0000
ROA not after: Sat 01 Feb 2025 10:43:02 +0000
asID: 44559
IP address blocks: 156.246.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68928 (0x10d40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 10:43:02 2025 GMT
Not After : Feb 1 10:43:02 2025 GMT
Subject: CN=678f7a3a-4fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a3:7b:ad:0c:c9:d3:ec:a1:be:b0:93:96:52:
2e:81:79:27:7c:b8:4e:2f:8a:ef:61:62:8e:a1:89:
52:3f:74:27:88:c7:b2:f6:90:4d:e2:73:b6:03:97:
83:8c:37:2d:7b:48:85:52:86:c5:70:59:58:31:fc:
da:ad:ea:90:3b:41:b1:b4:d5:8f:07:1b:e7:32:d7:
0c:f4:84:37:c7:b7:5c:c7:6b:26:8e:46:64:8d:43:
c8:67:b9:d7:49:6b:29:41:1b:ca:11:bc:b6:f6:93:
4f:da:e3:94:63:a4:fa:71:c9:34:3d:81:56:ac:9a:
85:c9:c0:f9:be:39:88:4b:d4:bc:88:ee:8e:17:12:
15:92:54:0b:36:a2:fb:94:3f:9b:25:05:09:6c:47:
67:fe:e3:29:9b:7a:ce:2e:4b:3a:83:98:8e:c7:16:
44:f1:e8:06:c2:3e:f0:77:e3:16:80:91:e6:93:31:
78:fb:af:2f:bc:0a:02:70:8a:c4:e3:8b:8d:74:69:
ed:c7:b0:61:bc:c4:ec:ff:2c:a3:95:c2:4b:14:06:
55:b9:b7:22:b1:ba:4c:c2:e1:6f:a4:14:48:70:64:
62:b6:01:8c:e3:2d:b7:3f:c0:c9:ae:14:56:0e:4d:
d2:2c:1c:14:32:d6:51:22:05:84:c5:b9:e2:10:79:
50:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:61:48:B3:A0:2E:F2:D1:A5:08:CB:98:AE:74:EB:2C:11:90:8E:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F67AE44D7E411EFBD8CF5A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.194.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c2:f7:83:ab:ea:0c:28:93:9e:49:cb:2a:df:d0:2e:08:7c:
0c:c8:5d:54:3c:b7:92:66:cd:d3:c8:8b:82:aa:fa:05:59:bd:
6e:c0:ae:ed:64:f0:77:c8:d9:0a:dd:bc:64:a4:74:95:af:cf:
b5:25:27:aa:59:6d:40:b2:02:10:21:74:e2:30:b9:c4:ee:0e:
ec:e6:a3:f8:cf:cf:ac:3b:8a:27:23:94:04:c4:f4:14:b0:e6:
3b:65:8b:da:6c:44:ac:42:f6:01:ad:17:4d:c6:f2:f6:45:be:
6d:c9:c7:17:53:0c:14:47:14:9c:c4:0e:e0:cf:95:48:3c:c6:
de:a3:be:f6:9e:ff:f2:23:f8:59:0b:af:3a:b5:ba:e9:a1:97:
1b:72:73:ef:58:7e:89:41:5e:d5:a3:25:d5:0c:0b:47:25:a0:
85:4c:45:7c:7f:58:d8:39:47:a8:1d:6d:17:93:93:6e:a7:90:
59:6f:76:e3:16:27:15:8c:fc:00:7d:5e:b5:88:7e:b0:63:79:
51:08:0e:5d:9c:0d:3c:c3:2f:e0:89:c4:14:94:94:59:9b:1f:
9d:d1:24:ff:35:92:b4:c7:3f:8b:b3:3e:1c:10:ad:b5:75:81:
dc:40:9a:5a:d4:26:e9:c2:a7:af:7e:48:7f:77:06:a1:9f:2a:
b7:5b:19:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:06:20 2025 by rpki-client