Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/982AEA3CCCFD11EF906A929A762E951A.roa
File: 982AEA3CCCFD11EF906A929A762E951A.roa (raw, json)
Hash identifier: 1GP4XAdgJ5fIuNVccS+TLnsXsSc0JJz2qsn1kNEFjTE=
Subject key identifier: 06:C1:D2:AE:F7:22:A6:81:E5:37:E8:CD:21:18:CF:9A:F3:02:3E:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/982AEA3CCCFD11EF906A929A762E951A.roa
Signing time: Tue 07 Jan 2025 13:45:02 +0000
ROA not before: Tue 07 Jan 2025 13:44:59 +0000
ROA not after: Sat 13 Dec 2025 13:44:59 +0000
asID: 984
IP address blocks: 156.238.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64597 (0xfc55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 13:44:59 2025 GMT
Not After : Dec 13 13:44:59 2025 GMT
Subject: CN=677d2fde-acbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:0f:7c:f4:c8:ee:a9:b7:3d:8c:bb:67:84:
2e:cb:91:cd:cc:3e:6c:32:4c:c3:99:8a:2e:a7:60:
3f:5c:f3:30:37:f8:5d:a0:56:a5:e2:f9:c4:6f:bc:
7e:5e:f4:48:72:c2:e0:57:e6:78:f0:7f:cd:41:35:
b4:14:16:62:63:74:44:6e:35:a2:08:db:56:a4:be:
f1:f4:7d:38:c0:c1:4c:5d:ba:be:ac:e2:9a:45:a6:
db:d0:b3:9e:34:c5:02:dd:2e:67:12:d3:f1:c2:08:
7d:34:3f:f1:e7:74:61:b1:cb:9c:6f:4f:08:73:34:
90:d5:e4:52:08:35:af:6c:4b:b7:e8:24:00:f3:77:
c1:63:a4:b2:d0:1c:5f:db:1c:e5:a7:5a:23:8c:4c:
26:6a:71:c1:ef:d3:bf:f7:a7:cc:6e:be:6a:6f:49:
a8:44:a0:0c:91:e4:d9:e8:b3:d9:23:4f:80:d8:fb:
c6:82:87:3a:05:70:49:61:af:25:07:f4:90:c2:e6:
f9:e1:9d:e8:da:9f:06:8c:ea:f6:05:96:5e:5e:2e:
71:b5:5d:8e:23:4d:79:1a:2c:f0:3f:c8:cc:0c:f1:
db:f1:b3:bb:af:b0:f8:43:0e:69:f0:74:7b:db:ae:
34:49:9b:f1:0a:1d:dc:a5:df:38:9a:e9:42:09:36:
1d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C1:D2:AE:F7:22:A6:81:E5:37:E8:CD:21:18:CF:9A:F3:02:3E:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/982AEA3CCCFD11EF906A929A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.95.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:7e:59:06:5a:33:ee:6d:27:df:b4:f0:5f:72:29:15:60:b5:
43:be:58:15:c8:98:ea:3c:a1:2f:a3:48:44:a7:7a:f9:49:35:
21:cc:50:b4:aa:d0:a3:8e:7c:23:ff:f7:d7:a7:da:1a:f9:9c:
9a:13:34:29:49:43:92:7f:7c:0f:3e:c2:be:3a:16:ce:83:39:
8e:da:1a:ab:18:02:1a:e1:de:59:70:e4:04:de:47:c0:88:25:
eb:8c:71:ed:c3:a7:e7:e5:27:3e:0b:19:83:78:e8:62:fb:ec:
aa:61:6a:e1:c3:b9:c8:1b:62:02:ae:36:d7:2f:9f:1e:f5:ec:
96:35:48:38:18:e1:d6:9b:a9:b0:3c:c7:49:53:0b:31:b3:88:
c5:ff:6e:e0:b0:ec:8a:ed:5e:65:e0:36:a3:db:b5:6a:d3:5c:
fd:ec:d7:c3:ae:12:94:5a:67:96:9a:0c:18:fe:08:f2:81:ce:
b4:bb:de:8c:55:05:9a:13:41:0f:d9:13:0e:e6:4a:9c:b2:a7:
70:b1:ca:f2:21:e9:d4:8f:8e:59:11:1d:07:8d:5e:d5:3f:ab:
8b:8b:91:8e:ba:9c:7c:b9:2c:21:4d:71:91:64:2f:92:af:f6:
5a:95:56:fa:3d:29:c7:0a:6f:01:c8:81:8c:27:4c:61:33:f4:
03:26:a2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:55:58 2025 by rpki-client