Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94320D6EDFF111EF86117950762E951A.roa
File: 94320D6EDFF111EF86117950762E951A.roa (raw, json)
Hash identifier: hXXKxKveg6Rw0zcKzKZODa6E7yoRbvcK+kXZpBMzXn8=
Subject key identifier: 06:09:BE:28:60:AE:15:98:7F:F3:25:E4:05:C4:C2:B9:19:DE:84:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011669
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94320D6EDFF111EF86117950762E951A.roa
Signing time: Fri 31 Jan 2025 16:36:54 +0000
ROA not before: Fri 31 Jan 2025 16:36:49 +0000
ROA not after: Tue 11 Feb 2025 16:36:49 +0000
asID: 138985
IP address blocks: 156.238.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71273 (0x11669)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 16:36:49 2025 GMT
Not After : Feb 11 16:36:49 2025 GMT
Subject: CN=679cfc26-1c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:27:9a:92:9a:e1:79:5a:9c:0b:72:7b:99:
72:21:9a:f1:e9:b5:01:ee:a4:54:e4:1a:f2:32:9a:
43:8e:79:54:5a:b0:29:46:5d:18:c6:80:10:f3:f4:
3f:62:65:0a:9e:95:25:3f:5c:88:68:e1:79:34:ba:
c1:a2:e1:14:8c:ed:dd:14:02:e3:84:97:0b:ba:71:
83:86:5b:a6:2e:84:6b:11:cd:e2:23:51:f6:ed:39:
2f:67:58:79:82:42:b3:d7:ab:3d:65:e9:33:0f:35:
59:7d:c0:17:a1:35:9e:ca:0a:b4:a4:2c:13:78:0e:
dd:7c:4c:d7:c7:af:d1:9c:94:87:ee:f5:2d:a3:ad:
84:65:d7:13:58:9a:b6:a8:b7:ae:27:a5:60:c9:5f:
19:60:35:57:ef:78:21:72:f7:01:4b:aa:bb:00:a6:
bb:a0:48:9b:6a:a2:19:3c:49:c2:f2:9d:95:72:fe:
91:a3:4a:8d:c0:f9:40:bb:4c:c9:e7:6f:58:03:39:
5d:61:3b:0c:30:b1:6c:70:5d:ec:95:34:f2:24:27:
55:5c:78:f1:e8:80:24:2c:55:3d:1b:d7:bf:73:07:
be:cf:ae:12:3f:87:79:d2:33:6e:cf:6c:09:ef:c2:
d0:44:8e:36:de:0f:ac:44:fb:93:fd:15:2b:82:d9:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:09:BE:28:60:AE:15:98:7F:F3:25:E4:05:C4:C2:B9:19:DE:84:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94320D6EDFF111EF86117950762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.81.0/24
Signature Algorithm: sha256WithRSAEncryption
34:7b:49:78:6c:6c:37:17:a6:64:d4:0b:f7:76:f5:0c:f6:f9:
a0:fe:7d:2b:87:02:35:70:31:ba:c9:9d:ce:f4:2a:0e:9f:8f:
48:d6:5d:eb:d9:92:3b:8e:cc:5d:96:2a:97:e5:ce:4a:67:93:
84:6f:b1:4f:08:ce:a4:ba:b1:af:5e:49:56:ad:09:2d:63:ec:
31:77:2a:f5:3a:75:5b:e4:cf:c4:bf:df:e3:1a:42:48:72:0b:
03:a0:f2:6e:1c:c4:99:1e:41:37:7c:ba:5c:c1:33:16:99:ae:
fa:8d:a4:b7:f6:93:01:07:d5:ba:ae:90:f4:35:51:00:c5:0d:
df:29:f5:55:b5:84:4d:b7:35:1e:b9:a9:0a:2f:9e:0a:63:e2:
f5:ca:62:08:0f:97:72:c8:36:00:3b:4f:14:26:09:1b:73:eb:
ed:21:b5:66:86:13:f0:ee:76:31:75:c1:58:f1:2c:8c:0e:7d:
57:61:10:ed:d5:cb:3a:3a:b6:b9:8c:12:34:ff:05:2f:54:2a:
27:ff:c9:b1:9a:a5:3e:53:28:84:8a:3f:30:35:00:9a:42:b2:
88:a8:2b:67:f5:fb:03:b9:a4:b7:ad:ca:e7:31:e3:be:3a:6f:
ff:e0:61:e2:d6:8b:af:e9:80:97:58:01:6b:48:95:cf:9f:9a:
d0:1d:15:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:22:19 2025 by rpki-client