Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D00F9FAD50711EF81C4AC5B762E951A.roa
File: 8D00F9FAD50711EF81C4AC5B762E951A.roa (raw, json)
Hash identifier: rxei5TTNGtq9e3guhzZWtaBcmnfjIv8RWqBh3YychQQ=
Subject key identifier: 74:5F:03:2E:6A:D1:47:34:44:4A:8F:4E:F2:15:5A:87:55:72:3D:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A70
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D00F9FAD50711EF81C4AC5B762E951A.roa
Signing time: Fri 17 Jan 2025 19:16:28 +0000
ROA not before: Fri 17 Jan 2025 19:16:24 +0000
ROA not after: Sat 22 Feb 2025 19:16:24 +0000
asID: 54801
IP address blocks: 156.240.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68208 (0x10a70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 19:16:24 2025 GMT
Not After : Feb 22 19:16:24 2025 GMT
Subject: CN=678aac8c-4dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:96:bc:72:15:4b:10:f8:fa:e7:33:7a:bc:
bb:9f:c5:b7:27:62:ca:3b:32:a2:ce:53:2a:e7:e0:
9a:4b:a2:54:7e:5f:f1:56:70:2c:36:66:dc:4a:32:
d7:d7:39:55:a8:20:c3:75:78:ae:b4:c2:90:1f:b3:
43:bd:a0:89:c0:c0:f0:43:9d:60:69:51:02:35:86:
09:8d:4d:3a:5d:7b:ca:f2:2c:e6:6f:f2:f9:3a:5a:
65:3a:f1:ab:e0:b2:93:8e:d0:a9:00:7f:57:a5:8a:
ff:d7:0c:e6:12:ca:58:82:09:da:ed:b4:03:29:15:
44:ce:db:68:ab:fc:01:c2:db:cc:5b:6b:dc:7f:3d:
d1:bb:bf:8b:01:bd:64:2f:87:e8:7e:f8:fd:8c:85:
5c:cb:d2:43:09:9a:15:44:fc:4e:aa:05:30:db:30:
c1:9e:23:0d:78:d6:53:02:34:6a:00:ba:da:82:e5:
99:9a:b9:fa:5c:be:8a:da:76:a7:90:44:29:c6:07:
36:79:7f:29:6e:52:55:c4:a1:d0:51:bf:fd:37:7e:
ec:e3:41:4e:78:98:8e:1d:71:5d:dc:44:0b:34:37:
63:83:dd:8d:c0:f9:df:48:b6:86:ad:f5:c5:97:3b:
9f:92:bf:2e:29:04:0c:f9:f7:ee:3c:98:cf:29:50:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5F:03:2E:6A:D1:47:34:44:4A:8F:4E:F2:15:5A:87:55:72:3D:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D00F9FAD50711EF81C4AC5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0/19
Signature Algorithm: sha256WithRSAEncryption
42:82:b0:f5:2d:6b:82:af:89:60:cd:4b:41:b9:39:e0:77:72:
9f:02:c3:41:b2:b7:10:e0:40:c7:50:58:b8:bc:ce:5c:64:fc:
e4:cb:86:b9:8a:0f:fb:a7:22:5b:7e:16:39:c1:16:6a:8b:a7:
71:7b:c8:f5:71:a1:9c:e5:e0:39:3a:5e:f7:ac:bd:f6:bb:31:
e7:88:c8:a5:b3:f2:c4:cc:eb:cc:6a:b0:07:12:9f:74:9f:78:
6a:ea:57:37:f8:c9:cf:1c:c3:75:61:46:4e:16:a2:36:67:ab:
b4:1c:48:2a:85:ca:be:d8:07:56:ef:a3:7b:3f:93:a4:b6:ec:
d8:3e:38:b1:39:4a:6e:b3:d4:24:c1:b6:8e:38:89:09:37:ab:
16:d2:a5:f3:95:e6:55:fb:5f:a9:98:c8:0d:c5:86:8d:63:c7:
cc:37:95:cc:d4:0c:c2:46:2b:e4:db:37:45:3f:e4:b3:96:e2:
ce:db:5d:92:13:b3:51:ab:9f:e1:6a:e3:07:58:e0:6a:48:92:
cb:3d:e4:7f:87:7e:2e:15:d8:d5:38:fd:cb:54:cc:3d:f3:0e:
e2:75:72:cb:c7:6d:cb:2e:2b:bc:a0:8f:6c:57:2e:1a:3d:ca:
20:63:d5:ad:5a:e9:c8:24:44:fd:c5:a8:bc:e4:fe:2b:57:90:
ec:cd:55:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:37:16 2025 by rpki-client