Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80874286DAF911EFA645F051762E951A.roa
File: 80874286DAF911EFA645F051762E951A.roa (raw, json)
Hash identifier: 3HNK4BqPlrudsKWrJo76JYSlj6b985bpfZ+D4QJg5rg=
Subject key identifier: 8C:77:58:A9:0F:00:53:C1:B6:8F:4A:B0:74:78:A6:3A:68:C9:BF:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011193
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80874286DAF911EFA645F051762E951A.roa
Signing time: Sat 25 Jan 2025 08:51:01 +0000
ROA not before: Sat 25 Jan 2025 08:50:57 +0000
ROA not after: Sun 23 Feb 2025 08:50:57 +0000
asID: 44559
IP address blocks: 156.246.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70035 (0x11193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 08:50:57 2025 GMT
Not After : Feb 23 08:50:57 2025 GMT
Subject: CN=6794a5f5-8abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:2f:ac:57:a2:e5:c1:84:5e:7b:2e:51:d4:
a6:9b:90:d0:d3:82:70:31:1b:54:c5:46:37:4b:e3:
3f:76:49:44:47:4e:41:0e:45:fd:b5:f8:1e:a9:30:
07:7e:cb:0c:6f:06:50:53:55:13:e1:c7:93:88:01:
5d:b2:5b:5b:25:c0:f3:e1:87:57:bf:42:34:d8:20:
cf:ae:08:df:31:d6:3a:46:be:ae:33:62:33:68:27:
82:76:bd:89:90:59:c2:35:3e:5b:37:69:c9:d2:c3:
4c:8b:2c:ca:bb:d9:c4:25:5d:a5:f2:cf:56:08:5a:
cb:88:af:11:8a:46:eb:bf:3f:fc:92:3c:3b:a3:a6:
4e:f0:42:c2:8f:b2:fc:54:b0:6e:66:08:ac:81:33:
57:3b:3d:92:80:f8:ba:46:52:62:b2:09:1e:d0:c3:
2c:06:e1:79:8d:ec:c1:be:2c:ac:e5:88:bc:d7:2b:
6e:34:34:21:a7:45:c2:e4:7b:be:cb:a8:ed:86:c7:
5b:b7:79:52:87:1a:b9:5d:ea:77:23:63:d9:21:c8:
c8:48:27:14:87:f3:7d:5c:bd:60:a4:57:29:63:78:
e6:38:60:d3:8d:b0:98:6e:cd:89:e4:ad:d9:73:80:
6d:ee:f3:3c:5e:13:b7:c2:09:31:ee:66:ab:28:a9:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:77:58:A9:0F:00:53:C1:B6:8F:4A:B0:74:78:A6:3A:68:C9:BF:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80874286DAF911EFA645F051762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.252.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:4b:ac:b9:b4:a0:2c:46:94:e6:45:65:a4:a2:c0:e7:38:15:
28:c0:62:9f:87:7c:d1:6d:f5:12:b4:0b:f7:92:99:90:91:0b:
a0:3e:b5:08:1d:33:cf:ad:91:09:55:9d:7c:7a:c3:a0:53:30:
de:7f:af:ce:15:28:c6:30:17:32:70:a6:91:a7:54:4c:3b:20:
ed:7a:40:d7:69:4d:58:7f:a4:23:9f:6e:5d:cb:b6:0c:e6:5d:
66:9b:55:fa:81:82:ea:6f:f8:f8:2a:ea:e3:08:ed:1e:2f:89:
bd:b7:5a:78:e4:e2:b3:60:a7:39:3f:e2:f2:ac:e2:e1:45:8c:
40:76:db:45:1f:66:e0:ac:46:20:38:21:40:78:9d:78:56:c7:
e0:13:cb:c3:9b:0d:a6:2d:4c:64:81:72:2a:29:60:e2:15:6d:
f1:b4:82:3a:72:ad:ae:6e:fd:c2:bd:66:f0:09:ce:e4:3d:a5:
28:9e:e8:77:f2:1b:02:be:92:01:18:42:2a:a6:a7:19:77:c8:
6b:eb:ba:67:fd:29:79:8e:07:5e:9f:8f:61:ad:96:8a:28:9b:
fa:1d:e4:d0:f3:02:b6:ff:33:dd:98:8d:b8:b6:c8:39:b3:41:
bd:5d:93:19:60:ee:21:98:f7:5d:77:84:af:e3:41:86:74:ee:
df:4c:4b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:19:59 2025 by rpki-client