Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0707F34DAF611EF9E3EAABD762E951A.roa
File: A0707F34DAF611EF9E3EAABD762E951A.roa (raw, json)
Hash identifier: +Z70BTwr6MDA7gJU8lPJnh1bDVpHf7UpCm32oV/xykY=
Subject key identifier: A4:23:82:D0:7B:6A:14:84:E2:14:68:31:EA:73:B1:8D:CC:E7:B7:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01117F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0707F34DAF611EF9E3EAABD762E951A.roa
Signing time: Sat 25 Jan 2025 08:30:26 +0000
ROA not before: Sat 25 Jan 2025 08:30:22 +0000
ROA not after: Sun 23 Feb 2025 08:30:22 +0000
asID: 44559
IP address blocks: 156.246.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70015 (0x1117f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 08:30:22 2025 GMT
Not After : Feb 23 08:30:22 2025 GMT
Subject: CN=6794a122-c7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:15:ec:2d:14:71:f6:e2:40:2a:4c:7f:57:
46:ad:f2:e9:2f:c3:6b:3d:c0:37:57:9b:fb:5a:ea:
fd:68:a1:04:23:a8:ee:35:d0:a9:23:89:e0:38:5f:
4c:05:94:96:e0:e8:85:57:8f:c4:bf:d8:7c:5b:2c:
3d:56:b8:31:08:00:10:78:29:b6:03:0d:84:76:55:
56:d3:50:60:b4:fc:70:9d:7d:e2:2f:a9:3d:f7:05:
91:83:9a:21:b6:0e:e4:20:b8:cd:f4:a3:72:ce:d7:
85:d7:4d:1b:52:d3:bd:de:05:7e:2f:74:58:23:46:
fa:e8:c6:00:f7:e9:7a:c6:3d:86:eb:90:09:47:0b:
0e:df:0a:42:6e:60:0a:51:39:f5:96:97:f8:7c:2d:
12:d0:38:4f:08:52:b7:bb:9f:d0:c1:19:ec:7d:21:
57:2a:b7:23:53:ff:9a:9b:8b:84:48:7a:63:60:a3:
8e:64:75:1e:a4:e4:27:1b:96:21:05:1f:83:0d:0b:
9b:bb:04:52:35:66:ec:d6:b1:41:65:b5:d0:66:26:
06:46:3d:37:c6:11:32:8b:f7:62:da:67:ac:1b:18:
4c:50:42:c9:0c:2e:a9:ff:40:14:2e:ee:eb:d8:16:
05:59:3f:90:c5:62:c9:4a:cc:bd:19:ce:c9:18:1a:
b8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:23:82:D0:7B:6A:14:84:E2:14:68:31:EA:73:B1:8D:CC:E7:B7:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0707F34DAF611EF9E3EAABD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.242.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:da:21:aa:d8:04:b1:ea:51:b6:ed:97:9d:6e:d2:4f:e5:35:
61:1d:98:11:4f:ea:f7:03:f9:52:c1:bd:6f:58:85:ec:d2:13:
72:18:0e:7b:a7:30:68:94:c9:69:03:36:fb:f7:79:eb:5c:d5:
a1:2b:4a:92:bd:63:21:19:b5:62:85:56:1f:11:59:2d:ae:41:
9f:cf:50:dc:96:24:45:aa:f3:55:57:5a:67:fb:0d:af:7f:04:
7a:ab:be:51:9d:a7:4d:de:bc:c5:54:35:3c:5f:00:d3:56:15:
8b:1b:a8:9f:60:0d:84:20:d8:42:fc:36:cc:81:50:13:b6:8f:
90:b2:3d:b8:4a:c4:df:f1:37:cd:cc:f6:a1:f9:0d:ae:dc:48:
54:34:bf:7d:2a:74:30:ae:e3:1f:84:ea:32:9f:16:24:eb:eb:
62:e3:f7:87:6e:b8:5b:83:b8:fb:83:4a:63:35:6b:ae:ea:fc:
09:da:89:66:04:ba:02:6b:8f:7e:91:ff:33:38:82:5b:76:ac:
1f:4d:4c:2f:30:1c:94:91:1d:82:a2:d2:4b:2f:ed:58:e6:d3:
65:97:f5:a3:2c:f8:84:fa:68:6e:af:56:22:6a:02:82:0c:e2:
9f:f6:a3:4e:b2:bd:3f:97:f8:84:9d:62:87:34:ed:d7:9f:3e:
e3:20:e0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:20:09 2025 by rpki-client