Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B3123FCD7D211EF8C6C93B0762E951A.roa
File: 8B3123FCD7D211EF8C6C93B0762E951A.roa (raw, json)
Hash identifier: P/2ALoNPaB+vv8cjI9XsG0+Mx/Bjf9n3WHKa4jESOMw=
Subject key identifier: 82:70:80:58:00:B3:00:E4:31:AD:23:85:35:39:78:C5:8C:1D:77:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D06
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B3123FCD7D211EF8C6C93B0762E951A.roa
Signing time: Tue 21 Jan 2025 08:34:35 +0000
ROA not before: Tue 21 Jan 2025 08:34:31 +0000
ROA not after: Sat 01 Feb 2025 08:34:31 +0000
asID: 44559
IP address blocks: 156.246.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68870 (0x10d06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 08:34:31 2025 GMT
Not After : Feb 1 08:34:31 2025 GMT
Subject: CN=678f5c1b-950e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:09:ad:96:a2:1e:03:be:a9:60:f2:67:fa:
05:59:f7:19:a6:02:2d:dd:54:0e:a9:d6:33:e3:ba:
fb:81:60:22:ca:04:d2:2a:1b:70:75:b8:86:0f:5f:
1f:bc:c1:8c:2c:cf:09:4e:ab:21:9e:1a:1b:ab:3b:
8e:70:b7:0e:da:c0:f5:3d:43:56:38:72:7d:e7:d0:
48:9e:59:77:99:be:c1:d1:58:99:aa:c5:89:b3:22:
55:d5:c2:3d:ba:b8:9e:e4:fb:58:f2:5a:37:8e:54:
79:f8:5a:a8:00:22:66:a3:77:de:6f:65:08:fa:bb:
3a:86:b7:c8:68:0b:40:59:e6:73:53:25:d3:6d:ce:
f7:ff:9a:a7:3e:1b:73:ba:34:d0:51:d7:e4:d1:6d:
58:18:42:88:db:a8:f2:eb:ca:99:26:8e:06:37:9f:
c8:ee:3d:83:4c:99:f7:a2:38:cd:ed:70:da:0b:7c:
d7:cf:4e:4d:53:2c:e5:b4:4f:92:b0:26:13:2e:b9:
fa:e7:c0:13:58:09:8f:05:9f:95:27:69:95:d3:fc:
87:5b:30:d2:25:82:97:e2:b1:cd:a3:d2:b3:79:b6:
fb:ee:6f:94:c6:36:07:35:0d:08:e3:d3:d3:53:9c:
73:a5:8e:83:cb:27:ce:be:2d:a0:58:7d:87:5c:1b:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:70:80:58:00:B3:00:E4:31:AD:23:85:35:39:78:C5:8C:1D:77:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B3123FCD7D211EF8C6C93B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.153.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:5b:41:87:f5:91:72:48:e6:87:b3:8f:ae:84:e8:eb:3c:03:
9c:4b:55:d9:4c:34:44:17:d3:83:c3:2c:fc:be:33:2c:f4:fd:
4c:3b:13:8e:55:9c:57:19:27:04:ac:e7:5f:00:a4:01:9a:71:
b0:87:23:a4:e9:f3:a5:fe:22:18:af:55:a0:37:5e:a6:16:e3:
33:68:eb:b2:db:00:1d:33:9b:12:e5:de:be:e7:96:1e:5b:e3:
f2:6e:46:d3:06:3e:0b:da:85:7a:89:e9:a2:8e:c1:93:40:8e:
a3:b4:13:b8:64:ef:94:17:c8:a2:d1:41:9d:0e:22:0a:83:fc:
88:36:a2:0d:a0:5a:e0:86:d8:6a:15:ad:59:d3:bf:50:69:43:
60:3d:bd:0b:3e:d3:a0:b8:25:0e:de:b1:6a:7c:00:66:09:c1:
31:35:e3:b5:9c:88:82:1a:11:7f:49:51:ee:ad:49:a3:03:8b:
f6:f5:44:d0:c5:c2:49:96:e3:ec:90:ce:da:bd:04:27:c9:df:
ea:06:9e:67:ed:a2:cf:52:8d:46:7b:8d:cf:72:15:84:10:94:
c3:82:73:ec:55:10:42:3a:88:5f:49:08:7f:6d:c0:4e:fb:31:
5f:7a:18:26:c1:ad:e8:72:e3:b6:91:54:ba:2c:22:ad:6a:29:
b6:50:14:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:22:17 2025 by rpki-client