Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9932C8BCDCB311EFB72CFD71762E951A.roa
File: 9932C8BCDCB311EFB72CFD71762E951A.roa (raw, json)
Hash identifier: kB4rkK/MhQ5EUqTanrzaRZ1A8YjBdpPVMsxG8HG0gRA=
Subject key identifier: F1:AD:3F:FA:99:7B:0A:3D:27:8E:01:44:E3:8A:D7:AC:0D:C5:72:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011515
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9932C8BCDCB311EFB72CFD71762E951A.roa
Signing time: Mon 27 Jan 2025 13:35:40 +0000
ROA not before: Mon 27 Jan 2025 13:35:36 +0000
ROA not after: Sat 08 Feb 2025 13:35:36 +0000
asID: 212238
IP address blocks: 156.239.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70933 (0x11515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 13:35:36 2025 GMT
Not After : Feb 8 13:35:36 2025 GMT
Subject: CN=67978bac-eb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:af:68:e2:11:f6:66:f0:06:8c:00:13:ac:
1e:28:54:56:ff:a4:35:8b:f4:d6:79:e0:df:72:f9:
c5:f9:15:00:b2:34:e2:03:03:dc:ab:d8:ec:77:c5:
55:72:63:11:c5:3b:71:68:f7:d8:29:fb:da:4d:7f:
da:05:e9:1d:04:3c:9f:0f:9c:b1:98:69:8e:5e:55:
b5:5f:da:dc:26:11:e6:04:fd:34:b2:2a:13:a9:0a:
5b:cc:a1:5c:8b:d7:11:11:f8:c2:be:1f:7f:ab:18:
10:fb:82:5a:18:2d:f4:0c:dc:9f:4e:ce:6d:37:ed:
ab:28:cf:0d:0f:0b:89:40:99:87:ed:ff:d5:6c:51:
46:77:17:74:0e:9e:ad:fb:99:de:db:22:89:b1:a5:
b4:5e:cc:54:15:22:8e:18:89:88:e6:2a:f7:62:80:
97:ec:91:2d:01:90:bb:e1:33:e4:35:34:1d:2d:8f:
14:ba:dc:54:ce:c9:c9:d2:12:be:12:a7:61:80:ba:
c6:d0:dd:f0:d9:36:dc:14:32:d3:43:bc:b6:1c:ec:
3e:00:19:c7:d3:62:3b:35:78:cb:1a:6b:ae:45:84:
a5:2d:0c:d3:f1:fb:a0:6f:52:bc:d7:0a:b2:66:7b:
f8:d9:6c:29:bc:ed:8a:30:81:c3:f2:de:18:60:b6:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AD:3F:FA:99:7B:0A:3D:27:8E:01:44:E3:8A:D7:AC:0D:C5:72:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9932C8BCDCB311EFB72CFD71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.18.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:dc:5c:e8:1b:25:a2:12:06:cc:ed:c5:8b:2f:ab:8c:0e:e2:
9e:d2:01:4d:05:74:f8:8d:b0:ec:f3:d5:96:f5:2f:e5:43:05:
77:ea:52:91:2c:4d:6b:a8:c4:36:d0:e0:1f:0c:0e:e3:b5:e6:
dc:dc:78:0c:e1:54:b6:3e:65:c1:f5:ed:bc:19:ec:dd:45:90:
9f:df:20:5f:6e:1b:e1:d1:1d:ec:03:86:47:dd:68:cc:06:c2:
56:e9:e5:6b:5b:71:c5:2f:4f:2b:7f:26:80:d5:f2:44:eb:4c:
a8:4e:a1:06:2c:b5:25:c8:f1:7c:be:77:10:4c:25:20:47:f4:
62:22:eb:92:c4:ec:68:aa:20:9b:d8:41:32:fd:20:60:ef:0a:
ce:a3:5d:a8:eb:fe:15:b7:95:97:f3:90:ab:1d:d4:cb:d6:fd:
71:5a:eb:99:93:37:11:c0:3c:75:32:d4:45:c6:d6:21:f1:2f:
49:48:a4:a9:17:31:77:ac:f4:2e:e1:42:12:1d:af:c2:ab:2f:
03:70:0a:7e:a4:e2:fc:9d:85:e8:f4:d4:86:9e:71:2a:8a:a3:
0b:b5:7b:4b:d0:20:2a:a9:cf:d6:0c:d9:b9:c7:fd:36:96:e0:
49:ed:34:71:ce:ef:01:69:99:33:bc:f7:86:7b:d1:b9:cc:e3:
83:4a:ff:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:09:31 2025 by rpki-client