Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84E55680DC1411EF865DB8BE762E951A.roa
File: 84E55680DC1411EF865DB8BE762E951A.roa (raw, json)
Hash identifier: CNUvPf4lF6jhEPp++UpGzyh0bjWl5uRkS88RJQOXAUU=
Subject key identifier: 40:BB:AC:DB:E3:29:A6:EE:C3:9E:5D:7F:2B:04:85:A9:7A:5E:2C:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011434
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84E55680DC1411EF865DB8BE762E951A.roa
Signing time: Sun 26 Jan 2025 18:36:56 +0000
ROA not before: Sun 26 Jan 2025 18:36:52 +0000
ROA not after: Thu 20 Feb 2025 18:36:52 +0000
asID: 142062
IP address blocks: 156.239.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70708 (0x11434)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 18:36:52 2025 GMT
Not After : Feb 20 18:36:52 2025 GMT
Subject: CN=679680c8-c535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5c:69:e6:fc:6e:45:fe:0f:89:56:1d:5c:c4:
f8:1f:66:08:9b:58:32:51:58:0e:06:f8:ec:0c:ae:
6c:b0:43:eb:a8:bf:2c:d7:b5:4a:c5:01:d0:18:4e:
1e:39:a4:0c:da:9d:fa:69:f7:b5:1a:80:b8:89:bd:
1d:c2:69:1b:1c:c4:18:dc:18:8a:b9:69:5f:b2:9c:
75:9a:4e:94:ee:35:6a:4a:dc:73:15:0b:f0:59:c2:
37:2a:12:1a:07:d0:8d:ca:2d:07:27:94:8c:8e:be:
b6:a8:9a:59:c7:13:82:8d:38:8d:29:1a:23:80:dd:
2c:c3:7a:95:a3:bc:a0:bc:c9:e6:75:5d:2f:6a:84:
0d:4f:ee:99:4c:c8:79:f5:5c:50:9a:2a:c9:bf:5a:
39:7d:29:3f:35:a6:41:7b:2c:2b:eb:b0:07:90:7d:
aa:dc:95:f2:3d:d6:76:ec:d5:c8:6a:8a:a9:3c:68:
dc:cb:72:1a:c9:ae:e2:2f:65:05:9f:15:28:37:e0:
1e:a7:ed:b3:9c:2c:aa:38:7e:88:54:f4:24:0a:9f:
0a:44:a9:f2:6b:1a:1f:6a:f3:fc:57:cf:86:f8:35:
e4:08:0b:db:26:d0:28:ea:c4:6a:c8:97:b7:60:28:
a4:f9:11:89:bd:ff:db:ec:27:fd:de:f9:9f:64:14:
05:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BB:AC:DB:E3:29:A6:EE:C3:9E:5D:7F:2B:04:85:A9:7A:5E:2C:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84E55680DC1411EF865DB8BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:6e:43:d6:63:b2:a5:bc:a5:10:70:44:d6:f4:66:37:3c:c2:
6c:b0:85:a1:6b:0c:c4:95:ab:c9:21:f0:0d:5c:cb:02:f5:b7:
d0:07:6f:32:7f:c0:87:05:03:50:21:3a:e9:97:39:c6:87:4b:
82:ef:d0:5c:f4:1c:0b:6d:d7:6d:c3:d1:c7:76:d7:62:7a:33:
d2:53:ad:1a:2e:0e:4b:4c:3a:12:64:08:f7:0c:6c:50:3b:bd:
6a:fb:6d:df:9c:e4:d4:fe:8e:27:e2:af:7e:7a:56:f8:b3:08:
0d:cf:c5:7b:b2:ac:b7:c0:ae:da:98:2d:5a:16:a1:57:90:96:
d7:d6:53:e4:b5:fe:51:c1:e1:42:5e:6a:19:43:45:2c:99:ad:
f3:19:19:05:4b:3b:3e:b8:4d:4f:b9:7c:72:ad:cc:c9:a1:94:
75:e5:0f:2c:9f:17:22:7f:93:88:0a:d8:7b:6c:a2:38:c8:8c:
70:e6:01:29:fd:79:52:4f:3b:fd:77:47:97:6a:39:e3:99:fb:
45:cf:15:a8:45:2a:6c:ff:97:b3:a2:f3:3c:3d:f9:8f:50:29:
71:c4:d3:7d:ad:ba:de:5a:37:d9:28:af:d3:54:07:02:5a:21:
10:76:4b:5c:ba:d7:be:d3:77:c7:13:e6:dd:2f:da:29:d7:67:
01:1c:7c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:42:23 2025 by rpki-client