Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/914102C2D7EF11EFAD13436E762E951A.roa
File: 914102C2D7EF11EFAD13436E762E951A.roa (raw, json)
Hash identifier: haC1gtskpdDEC5M8FK7vIqqA1U/GKJIEcNguK4+3HBY=
Subject key identifier: 13:C9:2F:35:5E:DF:DA:7A:D9:FD:6A:D4:A2:E8:90:A0:2B:A2:36:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D8A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/914102C2D7EF11EFAD13436E762E951A.roa
Signing time: Tue 21 Jan 2025 12:02:21 +0000
ROA not before: Tue 21 Jan 2025 12:02:17 +0000
ROA not after: Sat 01 Feb 2025 12:02:17 +0000
asID: 44559
IP address blocks: 156.246.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69002 (0x10d8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 12:02:17 2025 GMT
Not After : Feb 1 12:02:17 2025 GMT
Subject: CN=678f8ccd-109c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:69:05:79:34:13:39:fa:83:47:1e:ae:d1:
0f:ae:3c:ae:0d:17:3b:73:0b:c0:36:49:6d:a7:25:
ae:14:66:49:35:e6:11:40:69:95:f3:b2:4d:68:f3:
2e:13:07:ad:33:3f:c4:9e:9a:cb:57:db:de:3c:3d:
23:c3:68:2e:04:41:16:ff:b4:80:1a:e9:0c:64:58:
e6:8a:b0:1e:64:1b:94:c2:cb:89:14:65:12:a7:7f:
79:c3:45:4e:ec:13:0c:bc:8b:fa:ca:82:41:a9:87:
9e:1b:22:49:ac:f5:35:f7:fd:e0:9f:19:d0:e9:bc:
76:2d:6d:70:de:0c:c8:54:34:b6:d0:47:d4:3c:fc:
d0:22:9b:46:83:9d:7a:f0:88:92:47:dd:7b:a0:a8:
20:29:f0:4b:07:58:8a:18:1a:4e:7d:8a:9f:23:02:
cd:64:88:f5:15:c3:ae:1a:14:1e:2d:fb:a5:e1:18:
fc:f9:53:13:67:2f:ac:21:49:af:97:6b:35:fe:ab:
63:e4:f0:7b:2d:00:d0:95:65:a8:f0:17:a3:67:93:
3e:9d:ed:c9:61:5d:53:24:21:02:4d:90:af:54:0c:
63:36:82:3c:33:d3:cc:5d:c3:03:86:3f:dd:69:ec:
e1:8a:70:71:ff:58:08:8e:56:c9:9e:dd:25:05:b8:
5c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C9:2F:35:5E:DF:DA:7A:D9:FD:6A:D4:A2:E8:90:A0:2B:A2:36:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/914102C2D7EF11EFAD13436E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:4c:4f:67:f5:bf:a5:c0:6c:15:af:8f:1c:7f:3e:76:55:14:
99:0d:98:73:ce:56:db:45:f0:f0:7c:aa:de:d4:37:ec:9c:5e:
f0:37:c6:31:ae:7d:bb:76:12:ca:f8:9b:28:5f:a3:c6:8e:7d:
a4:f5:5a:59:1c:08:c5:b1:28:7b:f6:89:61:09:08:63:c1:5a:
7e:cb:38:2a:02:5b:7c:41:01:f8:60:1e:e4:65:cb:02:ec:f5:
a4:73:d9:24:29:81:b4:bc:24:b6:d2:21:c7:e5:24:f7:f3:a7:
35:25:cb:1f:ea:6d:3f:97:a1:56:89:9f:e7:fe:5b:5f:2a:0f:
e0:47:e8:f0:94:9d:9b:4c:8b:7f:b8:95:20:10:48:84:17:83:
36:99:02:72:4d:30:be:ae:32:7f:ae:78:35:4b:ba:d3:2b:1f:
ae:49:1e:8a:31:52:d1:56:48:30:d9:c7:a5:b9:88:be:a0:33:
4c:be:0c:09:77:20:f2:d2:32:8a:a8:f7:5d:15:b7:ec:b1:78:
bc:40:43:fa:f8:e2:ba:1d:26:f2:09:0f:5c:27:f3:b6:d3:fa:
00:bc:2f:90:22:83:e0:0c:da:27:a7:b6:3d:9a:82:e3:1c:7b:
05:e8:e6:6e:25:c0:cc:98:52:59:f4:a6:02:3d:92:cb:cc:b7:
c5:e2:9f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:27:04 2025 by rpki-client