Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B4EEEE0D67E11EF97404D78762E951A.roa
File: 9B4EEEE0D67E11EF97404D78762E951A.roa (raw, json)
Hash identifier: v8Y12kISETHWtRtGfMWQWzo43mHVr7w/7axgZ8gLyNY=
Subject key identifier: 14:CE:CB:13:AC:37:AD:6A:90:EF:6E:6B:7A:0D:C2:4D:A8:A9:99:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010BAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B4EEEE0D67E11EF97404D78762E951A.roa
Signing time: Sun 19 Jan 2025 16:01:13 +0000
ROA not before: Sun 19 Jan 2025 16:01:09 +0000
ROA not after: Sat 22 Feb 2025 16:01:09 +0000
asID: 55020
IP address blocks: 156.239.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68522 (0x10baa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 19 16:01:09 2025 GMT
Not After : Feb 22 16:01:09 2025 GMT
Subject: CN=678d21c9-6d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:45:15:5c:7d:7e:1d:bf:f0:9f:fe:7c:0a:60:
e3:e8:d2:59:8b:6d:eb:fc:d7:62:e2:19:29:55:0d:
7a:e1:a7:e3:1a:10:40:94:1f:a5:0c:b7:55:33:31:
3a:86:c0:7e:1d:8a:a2:9d:be:5e:79:dc:d3:ee:3a:
85:59:4b:6f:3d:90:51:80:91:b1:a9:e1:27:3a:8e:
fe:52:73:e3:b9:c3:85:50:b1:3f:54:3a:8b:b1:5f:
10:99:02:8f:d2:68:fb:da:75:99:0e:6a:cf:4e:db:
53:ca:9e:c1:23:0e:fb:fe:d8:54:6a:1f:56:c1:a9:
5b:e7:cd:9c:77:d9:0e:98:ff:0c:b4:f5:6a:8a:46:
f7:cf:df:29:34:53:d7:5f:9b:e0:23:5a:41:05:a2:
fd:1a:c7:2e:bb:fa:d3:6d:ad:a4:12:6a:ee:47:79:
e0:0a:89:c1:4a:43:c9:e3:3b:02:19:19:29:33:00:
f7:73:c4:cb:da:f4:8e:b3:75:fa:8d:43:2b:6b:79:
13:39:b1:8d:e4:5a:d7:15:39:d4:51:f4:2b:b3:c8:
50:59:b4:93:2f:f3:41:d1:74:7d:d6:29:38:27:74:
69:c3:08:cc:0e:01:8d:f9:94:36:35:2c:96:8f:81:
6f:60:8c:10:7a:3a:09:e2:90:b9:46:f8:a2:c8:31:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CE:CB:13:AC:37:AD:6A:90:EF:6E:6B:7A:0D:C2:4D:A8:A9:99:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B4EEEE0D67E11EF97404D78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0/21
Signature Algorithm: sha256WithRSAEncryption
30:d0:eb:0f:a3:dc:66:03:42:93:08:b1:ee:db:13:83:39:98:
0b:20:3a:be:93:0c:e2:69:08:e2:52:bb:a7:fe:b8:45:3f:2c:
4f:6b:5e:45:29:73:c3:68:c4:7d:5d:11:e0:f3:bf:8e:91:ad:
86:15:52:31:82:0b:a7:50:3f:a0:9f:56:15:36:b5:86:eb:95:
8a:78:e6:fd:5d:2b:c6:57:ef:c2:0d:c3:f8:d1:30:d0:a0:ed:
5e:26:eb:79:74:5b:7d:fd:e6:47:85:91:05:9b:23:fb:0f:de:
e0:3a:42:0f:7b:57:06:31:e4:7b:90:ce:2a:c3:32:6c:de:d0:
b1:9a:41:f5:3a:b4:69:f6:e7:28:39:e6:91:a6:88:cd:62:d8:
1e:93:8b:99:c7:ca:0e:87:d5:a2:73:ce:b5:99:3b:3d:8c:a7:
61:be:cc:f9:8c:8e:af:cd:af:e6:09:71:27:2a:1e:43:86:92:
35:a6:ae:92:b2:6a:bc:3b:19:96:14:1a:4d:9d:88:7c:b1:a2:
8d:ed:a5:33:a9:0e:95:b6:bf:4d:cf:bc:70:95:c2:99:b8:1d:
dd:e8:09:60:24:eb:a5:07:94:aa:fe:cf:04:d3:dd:85:e3:89:
74:ce:6f:9b:16:df:2a:87:da:79:87:73:46:0f:ff:ff:03:42:
9b:74:15:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:55:58 2025 by rpki-client