Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8819A548DC9311EF8790999C762E951A.roa
File: 8819A548DC9311EF8790999C762E951A.roa (raw, json)
Hash identifier: mv/3IQJXCENRq5oW4ymOb1EqzS2lKt/7BNgjCSLOqS4=
Subject key identifier: DF:E9:D3:3B:D4:3D:CE:B3:34:D4:56:CB:B1:08:A2:8B:D6:37:AC:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8819A548DC9311EF8790999C762E951A.roa
Signing time: Mon 27 Jan 2025 09:46:07 +0000
ROA not before: Mon 27 Jan 2025 09:46:04 +0000
ROA not after: Sat 08 Feb 2025 09:46:04 +0000
asID: 5065
IP address blocks: 156.246.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70853 (0x114c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 09:46:04 2025 GMT
Not After : Feb 8 09:46:04 2025 GMT
Subject: CN=679755df-7bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d0:58:d8:a8:8e:66:63:17:69:8d:c6:b2:1c:
f1:a4:82:28:1e:18:27:18:8f:73:b7:b2:e2:b0:1f:
66:5d:6f:5a:61:bf:e9:16:2d:98:0a:2b:70:da:71:
0e:9f:23:21:f6:f7:86:04:e9:18:78:96:91:e8:7d:
8f:2b:63:5b:5b:79:a1:35:0a:db:78:e4:47:d1:e9:
75:4d:dd:17:f0:41:3d:f4:c3:68:4f:fd:c5:a4:bd:
c2:42:2b:98:cd:70:ea:02:10:e1:24:cc:66:cd:f4:
7f:a1:be:3c:34:e9:df:9a:a5:93:e7:27:ec:a5:a0:
d6:7b:6b:c9:f0:d2:78:14:f5:2e:32:c0:71:eb:9a:
aa:01:8a:25:76:99:7c:15:39:f1:10:04:3d:d6:c3:
f9:83:6e:a9:38:3c:2c:49:17:fe:6f:b1:11:13:1b:
cf:21:0f:2d:8d:d1:52:3d:08:a0:32:e5:51:9e:71:
ca:0f:f2:df:7b:61:ff:85:d3:84:b5:66:c6:7c:53:
10:17:90:6a:06:fd:c9:50:67:bb:10:1d:d8:00:f4:
0d:e4:86:b9:f0:ec:69:29:6c:74:1b:f2:1b:85:b4:
ea:2c:4b:89:91:22:51:70:6e:a4:47:66:98:8c:76:
06:0c:11:d4:c5:04:1e:a3:16:8e:b6:fe:a7:06:12:
da:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E9:D3:3B:D4:3D:CE:B3:34:D4:56:CB:B1:08:A2:8B:D6:37:AC:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8819A548DC9311EF8790999C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.86.0/24
Signature Algorithm: sha256WithRSAEncryption
94:34:ad:60:e1:16:50:b3:04:43:bf:5f:94:8c:5d:c8:26:86:
b0:12:c9:b8:c5:a0:8e:9a:0b:27:c7:88:49:bf:94:24:89:9b:
79:7d:21:d9:9d:12:ef:b1:82:69:49:98:57:8e:d8:ce:9a:85:
b8:47:46:64:b3:cd:de:9b:1b:c5:be:3a:78:bf:bf:9d:81:db:
d0:33:ee:d7:f3:ed:11:6c:a9:10:08:50:ea:8a:52:be:57:29:
c2:60:97:5c:3b:39:ef:3b:f4:ee:86:2a:68:f3:1d:c3:88:ef:
ef:5b:1f:c0:c8:a3:21:24:5e:f4:f5:2e:95:48:f1:91:73:d6:
f1:15:17:80:e1:e2:17:7c:e3:55:5b:92:6d:d5:ca:3a:a4:5f:
c9:77:3a:18:97:ad:12:79:2c:ab:7f:04:ff:bc:bd:44:f1:42:
a0:7d:21:b8:96:5b:44:32:5c:e7:a3:7c:e7:c8:19:5d:cd:8c:
7c:51:55:0b:71:ac:e2:18:10:79:34:3c:b4:fb:42:ec:87:71:
7b:d9:af:e7:40:44:0c:9f:2f:c9:3f:1a:75:9c:4e:80:c6:ab:
f2:4d:c0:b7:85:09:b1:06:30:5a:68:38:fb:f2:43:47:97:e4:
7b:f9:90:65:ba:8a:1d:43:38:bf:be:f1:f4:66:df:1c:21:c0:
47:f0:a7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:08:40 2025 by rpki-client