Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/906404D2DFEF11EFB5BD5144762E951A.roa
File: 906404D2DFEF11EFB5BD5144762E951A.roa (raw, json)
Hash identifier: /dR5t7FE1PBOz2QVVxA0TajJ6rO7Z8BJam4ik8blpS8=
Subject key identifier: 88:A5:9F:66:4C:FE:B8:3A:C4:AC:77:ED:38:2E:34:E1:1D:F9:76:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011655
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/906404D2DFEF11EFB5BD5144762E951A.roa
Signing time: Fri 31 Jan 2025 16:22:28 +0000
ROA not before: Fri 31 Jan 2025 16:22:25 +0000
ROA not after: Tue 25 Feb 2025 16:22:25 +0000
asID: 152092
IP address blocks: 156.245.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71253 (0x11655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 16:22:25 2025 GMT
Not After : Feb 25 16:22:25 2025 GMT
Subject: CN=679cf8c4-d971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:14:e5:a2:5e:d4:43:0a:39:e7:0b:ba:17:2d:
11:26:5d:05:6b:92:a7:63:fe:4a:09:f7:09:3c:43:
86:52:18:59:d4:65:9d:24:1c:91:c8:fe:ad:00:70:
51:6e:a6:a7:f0:f3:80:78:de:ee:66:92:d7:90:73:
65:ad:2d:45:dd:2a:2d:92:9b:4f:d5:07:c9:9d:32:
a9:09:c8:42:e2:ba:2d:16:10:ef:2a:f4:aa:48:63:
e5:dd:75:8f:57:3d:82:5f:e1:f6:98:2e:17:16:c9:
2d:9a:cf:d5:a9:0e:c9:64:ed:d8:07:bd:7a:8e:bf:
06:d8:77:93:82:2b:77:5e:b8:db:58:ca:18:12:7c:
93:e9:57:81:fe:51:a2:7b:5e:99:d3:20:20:c5:08:
66:3a:43:07:e8:6d:bb:d8:3c:25:d0:bb:d3:08:2c:
26:4e:e1:b7:06:30:bc:25:e3:d6:01:df:03:86:fa:
09:eb:84:95:fd:77:ff:7b:26:d0:ce:aa:0f:9d:8b:
03:9a:52:c4:be:73:52:c9:26:d3:ec:4e:ff:cf:c5:
93:11:30:16:8e:07:7f:1c:4d:0d:ff:cb:01:da:bc:
4d:c7:ff:f6:ce:89:bc:4f:2e:ad:6d:f0:61:75:fc:
12:ac:22:75:1f:ee:29:48:03:f1:81:8f:77:e9:a9:
24:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A5:9F:66:4C:FE:B8:3A:C4:AC:77:ED:38:2E:34:E1:1D:F9:76:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/906404D2DFEF11EFB5BD5144762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:d0:b2:4b:46:01:26:78:33:c7:08:0e:45:bd:f4:0d:fd:83:
df:9b:da:b0:6c:33:f5:58:62:8f:d8:c1:79:7a:5d:45:6c:e3:
fe:e1:f4:3d:dc:0c:7c:e0:95:a5:43:4f:6c:c4:ef:fd:72:5e:
3e:bf:00:68:fb:26:93:67:09:8e:5c:9d:a1:39:46:d1:91:20:
d2:d7:71:f5:28:e7:de:51:7d:cf:dc:16:bd:e0:80:51:68:66:
76:18:f6:97:ed:e5:52:e0:c7:87:a6:1e:2d:e8:a0:56:65:dd:
58:09:b9:7e:59:61:04:9a:3e:e1:84:05:32:7c:2d:aa:86:fc:
a7:81:56:4b:0e:78:33:fe:6e:87:e6:89:eb:ac:36:15:9e:43:
71:31:2e:55:45:13:64:93:d1:ee:aa:fb:a0:52:52:0c:14:96:
e8:2a:7c:97:ac:ea:01:28:11:7a:7d:1d:14:23:82:d6:71:8b:
6e:27:23:19:0c:0d:ae:d8:24:ec:cc:33:3e:b9:08:61:61:38:
c7:bf:74:9b:d8:46:25:32:d5:5f:c9:3f:91:87:27:1c:f7:eb:
38:9e:9c:06:6e:6f:ff:20:e0:3d:b4:bc:d0:ad:56:82:53:d4:
9c:81:20:b3:39:e2:f1:93:5b:25:2e:cd:e9:40:23:ec:94:95:
d9:d0:87:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:13:53 2025 by rpki-client