Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C373552D7D111EF9B6707AC762E951A.roa
File: 9C373552D7D111EF9B6707AC762E951A.roa (raw, json)
Hash identifier: m3YquxIiZrtz98eufFO548Wx5ZsuZetow3nE7Ss4tfc=
Subject key identifier: F0:F1:0F:F5:20:05:F9:42:70:D0:06:8A:FA:55:68:F1:7A:B1:3D:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CFE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C373552D7D111EF9B6707AC762E951A.roa
Signing time: Tue 21 Jan 2025 08:27:54 +0000
ROA not before: Tue 21 Jan 2025 08:27:50 +0000
ROA not after: Sat 01 Feb 2025 08:27:50 +0000
asID: 44559
IP address blocks: 156.246.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68862 (0x10cfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 08:27:50 2025 GMT
Not After : Feb 1 08:27:50 2025 GMT
Subject: CN=678f5a8a-b953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:5e:ce:bf:42:13:39:31:68:8d:7b:3e:14:
28:e2:53:0b:8a:41:32:27:09:96:c7:87:e8:d9:56:
9c:99:f8:d5:49:fa:d5:26:7f:11:46:43:c4:2c:d8:
b9:0e:57:c1:08:cd:4a:0a:1a:f4:e1:9d:c7:34:8d:
e7:ca:09:01:c3:17:75:00:46:e0:a4:fc:dc:e4:46:
cb:c4:f4:49:4e:e8:25:7b:df:cb:ad:0a:8f:3e:1b:
41:1b:c9:b2:66:28:7c:7e:80:72:86:65:26:fc:b5:
12:48:c4:54:f9:69:84:4e:1e:04:b1:9d:b7:87:6a:
13:31:dd:32:42:b4:5c:38:12:74:a8:94:82:23:ee:
60:3e:14:45:8d:c7:c3:ee:45:1e:72:60:93:9c:aa:
98:4d:62:fc:a0:70:75:fe:28:ee:df:fa:42:20:93:
d9:04:c6:37:43:08:7e:fc:c9:a4:3e:84:da:6c:04:
d3:7f:86:2a:6b:10:60:0d:3e:62:97:c7:cc:df:4c:
f0:73:55:d2:12:cd:c1:77:7e:ac:96:c2:c8:d5:29:
2e:78:34:62:f0:d8:d1:0c:06:a9:b6:af:7c:7f:95:
db:76:69:26:11:e5:e5:11:63:8b:8f:24:ae:2c:0a:
f0:13:76:19:36:26:de:1a:1d:9c:e7:bf:59:e2:d9:
44:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F1:0F:F5:20:05:F9:42:70:D0:06:8A:FA:55:68:F1:7A:B1:3D:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C373552D7D111EF9B6707AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.151.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:00:84:57:b5:26:cb:ce:01:43:dc:61:3b:4f:71:b9:1c:1a:
b2:f2:84:99:23:c5:32:7f:45:84:3a:f3:cd:ba:95:b1:88:75:
90:9b:14:fd:2f:d7:b7:d2:07:67:76:ec:fb:33:02:26:36:d0:
1f:af:cc:eb:42:69:8a:17:70:fb:8d:76:1b:56:af:df:96:05:
a9:a8:a9:1b:9c:8c:f1:f5:da:04:a0:36:9a:2a:7a:f1:42:7a:
e1:bc:14:ee:c8:e8:cf:3f:cf:bc:17:75:15:cf:0e:e1:36:25:
d6:c2:c0:f3:30:86:cf:f1:d6:e9:ee:7e:48:09:52:e0:06:de:
58:32:3c:c4:2e:15:98:7e:60:13:b0:50:20:0c:3b:98:18:03:
02:40:71:8e:7e:4a:ed:32:5a:23:c5:9c:0c:5d:c1:ea:cd:a8:
cb:e4:32:2f:55:08:f1:50:dc:7e:54:df:83:b7:60:3b:d4:a5:
5f:c3:1c:19:a8:67:a6:81:05:77:6c:56:74:ea:8e:5f:4d:82:
57:76:18:5d:fe:fe:f2:71:6e:02:70:b0:61:f8:0e:65:b7:e0:
d3:a3:65:3a:1b:58:75:e8:6d:2e:82:1a:4f:1e:db:f4:3b:a5:
3c:66:e1:71:37:45:d5:bb:a9:ef:de:7e:fb:c7:5a:51:dc:4f:
84:97:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:19:54 2025 by rpki-client