Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99298054DFF611EFAB639472762E951A.roa
File: 99298054DFF611EFAB639472762E951A.roa (raw, json)
Hash identifier: HhDXkeUA4Q4XLAnWvwfImCnPd3vsgptWGEvauRTBYfw=
Subject key identifier: E7:06:2B:E7:EA:EC:32:7D:E0:F5:30:8A:74:F2:41:E8:B2:55:CE:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99298054DFF611EFAB639472762E951A.roa
Signing time: Fri 31 Jan 2025 17:12:50 +0000
ROA not before: Fri 31 Jan 2025 17:12:46 +0000
ROA not after: Tue 11 Feb 2025 17:12:46 +0000
asID: 131471
IP address blocks: 156.238.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71341 (0x116ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 17:12:46 2025 GMT
Not After : Feb 11 17:12:46 2025 GMT
Subject: CN=679d0492-f535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:a0:1f:1b:eb:2c:ec:06:4f:0d:f5:6d:9c:
f0:f3:98:24:10:89:68:45:14:a2:63:9b:59:62:4d:
41:79:59:9d:b0:62:20:53:d5:fb:ea:40:e9:25:5b:
3b:d4:98:59:be:85:19:4e:93:ea:dc:33:db:99:ee:
83:48:a3:a3:2e:3f:e0:d3:1d:e7:a2:10:20:4e:28:
e0:5d:40:f7:48:b3:08:f7:71:a1:fe:53:bc:c4:a6:
9c:60:cb:e7:32:20:10:f2:f9:e6:ab:b6:75:b8:d0:
a6:3e:d6:c2:62:6a:f4:7d:e3:38:f5:91:53:82:05:
6c:75:a0:7b:b5:8d:15:48:57:b7:0c:4b:52:1f:02:
73:6b:b3:9a:ed:db:a4:92:d8:aa:23:84:f1:55:e1:
fd:dc:28:c0:a4:2c:b1:2e:e5:72:76:f2:eb:0b:83:
fa:07:c2:50:70:c8:50:be:18:34:68:06:6a:82:13:
be:0a:29:1a:58:3e:81:67:9f:52:da:8a:8b:31:46:
da:47:b8:31:44:d0:eb:9a:0a:99:e7:1d:20:46:85:
f2:6f:5d:e1:13:91:f4:1c:cf:d0:7e:af:ca:2c:58:
86:f2:10:7c:58:d3:ed:99:d3:71:8a:ea:87:65:73:
f4:85:8f:8e:72:18:fd:b5:5d:12:59:fc:16:53:5f:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:06:2B:E7:EA:EC:32:7D:E0:F5:30:8A:74:F2:41:E8:B2:55:CE:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99298054DFF611EFAB639472762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.67.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:3f:38:cf:bc:23:42:57:79:73:ed:e9:ba:6a:09:75:14:0e:
47:43:45:77:c8:e6:d4:e8:4e:7b:18:64:35:82:91:f5:58:21:
15:5c:2b:53:4f:f3:c6:fb:a4:40:f7:9b:25:8d:25:04:a8:fa:
e8:c4:b3:04:36:43:a8:ff:61:37:f1:45:bf:e6:85:10:07:b6:
d7:61:de:ab:b4:9d:9b:0f:7d:79:a1:f5:49:4f:bb:39:e7:f4:
f1:73:d0:b3:eb:ad:7d:d0:b6:4d:80:e0:9b:03:b0:fe:02:16:
70:f5:fe:63:60:32:f1:fa:09:f8:a0:86:5e:31:47:fc:79:92:
e3:b7:17:40:cb:63:4d:db:4a:11:33:11:42:ae:80:c9:7d:21:
2b:3d:31:7b:d9:e4:96:a1:ee:61:1c:bf:84:23:3f:97:c0:82:
fb:23:c1:86:24:8e:11:66:88:1d:e4:cf:6f:ed:c8:3f:ff:78:
00:60:7d:27:e4:cb:88:4f:e5:d8:59:c8:3c:b4:14:39:12:c2:
c8:e0:97:9f:cf:1f:06:38:ac:4b:1f:6f:87:de:14:e1:26:4a:
35:b2:83:68:24:ab:af:a9:26:ba:c4:52:d3:a9:16:bb:c4:ab:
f2:ec:f9:2c:77:40:f5:d6:ce:5a:4b:b5:e8:2d:b8:ed:fc:dd:
cc:50:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:21:42 2025 by rpki-client