Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E5ED032DB0211EFA89A658E762E951A.roa
File: 8E5ED032DB0211EFA89A658E762E951A.roa (raw, json)
Hash identifier: eG2aEYMr/O4k57SEBQmyiA4ocNxRuF053mP/8QBXB/s=
Subject key identifier: A8:71:A7:A9:68:BF:92:9C:5C:5B:85:54:AA:2B:23:4B:A1:81:9C:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E5ED032DB0211EFA89A658E762E951A.roa
Signing time: Sat 25 Jan 2025 09:55:50 +0000
ROA not before: Sat 25 Jan 2025 09:55:46 +0000
ROA not after: Sun 23 Feb 2025 09:55:46 +0000
asID: 48031
IP address blocks: 156.246.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70095 (0x111cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 09:55:46 2025 GMT
Not After : Feb 23 09:55:46 2025 GMT
Subject: CN=6794b526-1902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ba:02:e3:b5:ac:63:55:c5:b2:61:bb:95:f6:
ef:39:b9:f8:f4:a8:b0:27:be:dd:4b:52:2a:60:1e:
4e:f2:0e:20:f4:98:3b:d0:33:91:74:7a:e2:c9:b7:
68:16:01:4a:ed:dd:6b:e9:c2:be:17:b6:22:a0:5f:
bf:03:4d:05:86:8a:a9:b4:4d:4f:2f:3f:8a:be:cf:
47:f5:a8:87:e5:da:c9:e8:7c:84:c5:b5:f0:86:0f:
fc:95:d4:e9:b2:7a:4a:d8:2f:03:9f:5b:ff:72:b6:
27:16:e4:c6:8d:97:58:8b:6a:c1:b5:e1:f7:80:75:
5a:27:06:25:67:40:ab:65:51:a0:78:c1:fc:1e:fc:
59:68:29:04:3b:ed:2c:c2:82:f9:70:5a:df:86:a2:
be:fb:bd:bc:83:db:e9:d1:a8:72:ee:99:2d:66:c2:
36:bf:e2:7e:01:23:b5:37:de:e2:65:64:2b:93:ce:
0e:b1:7d:49:5b:25:c5:c1:87:03:b5:5b:98:7f:ed:
2e:29:6f:ea:61:f3:8d:ab:04:7e:ba:af:45:50:58:
15:58:dd:e3:13:34:f2:ee:bd:d5:d4:fc:2d:0a:53:
9f:f7:52:f7:c3:8a:f3:7c:c3:c4:56:29:3f:10:60:
af:cf:1f:23:d1:20:63:79:a8:c6:66:5d:16:7c:d4:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:71:A7:A9:68:BF:92:9C:5C:5B:85:54:AA:2B:23:4B:A1:81:9C:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E5ED032DB0211EFA89A658E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.146.0/24
Signature Algorithm: sha256WithRSAEncryption
01:99:12:a0:69:fd:f5:86:d1:e9:d8:45:ba:5f:cb:1f:38:fd:
e7:0b:0b:10:c2:a0:fe:99:2d:ae:5c:f6:26:3e:ee:9c:0c:f4:
d4:38:dd:ad:49:1d:bb:0a:9c:a0:58:66:a0:5c:78:4d:8f:de:
75:f9:5a:df:88:9c:d3:9f:57:94:4d:58:ad:7a:d7:fe:57:74:
b5:bc:e8:bb:6e:8f:eb:18:ef:36:87:c2:e5:50:08:c6:5a:b1:
aa:35:f0:4b:1e:61:3e:59:75:fd:29:28:d7:dd:16:9b:75:82:
eb:0a:cd:18:fb:b4:03:ad:65:a7:06:d3:f8:fc:6d:1d:9c:61:
0f:64:0a:af:eb:64:42:dd:2c:a5:f9:06:47:24:45:60:c4:ee:
05:15:9c:1d:e2:60:c5:60:6f:d6:8d:7e:94:d7:45:48:25:5b:
36:1d:da:0c:e9:e4:97:1c:00:a1:99:38:b1:b2:bd:cc:5d:78:
18:b7:d0:b2:c0:c9:a9:89:3f:df:b1:85:41:56:c1:12:95:d2:
aa:34:37:0f:9a:21:e6:8d:46:83:3c:2b:3b:c8:07:f7:8d:d5:
d1:ee:39:4e:64:1d:d9:54:57:af:26:eb:19:f6:62:3d:de:df:
df:87:26:08:61:1f:e4:3d:27:35:a8:29:14:3f:b8:fc:07:31:
47:a2:25:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:48 2025 by rpki-client