Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA28423AD7D311EFB33789B7762E951A.roa
File: AA28423AD7D311EFB33789B7762E951A.roa (raw, json)
Hash identifier: g+u+2dcLS6lMyxtq2A5qOYElzKaYSVBUA5V+TUTNjjU=
Subject key identifier: C1:92:8E:3A:CF:64:41:48:9B:DA:DE:A5:62:81:4A:22:2E:4E:81:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D0E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA28423AD7D311EFB33789B7762E951A.roa
Signing time: Tue 21 Jan 2025 08:42:36 +0000
ROA not before: Tue 21 Jan 2025 08:42:33 +0000
ROA not after: Sat 01 Feb 2025 08:42:33 +0000
asID: 44559
IP address blocks: 156.246.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68878 (0x10d0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 08:42:33 2025 GMT
Not After : Feb 1 08:42:33 2025 GMT
Subject: CN=678f5dfc-6edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:ae:60:c6:10:29:66:03:4e:2c:a5:18:29:
ad:7b:7b:e0:e1:0a:86:79:b6:27:db:ee:8f:ad:59:
2b:ed:24:32:6a:bd:fc:12:85:38:8d:ad:19:59:b0:
d3:b7:ad:49:20:fe:17:34:3c:43:c3:8e:f6:04:3d:
04:1e:a8:bc:04:f1:3c:a5:cb:37:45:0e:1a:e4:2f:
3e:f0:f7:65:92:e6:91:f4:94:bc:a6:5b:44:10:90:
00:8c:65:a6:91:f0:2c:00:f7:1d:3d:f9:c5:16:a1:
bf:8c:ff:ba:b5:73:bd:e9:45:d4:97:22:42:e6:0b:
2e:c9:c4:70:a3:f4:c8:e2:02:6c:3a:4b:b2:c6:c1:
b5:f9:00:db:87:56:b4:6a:22:f7:01:51:e7:44:27:
29:da:18:ff:17:58:87:f7:8e:31:dd:5f:ce:1a:85:
71:00:d2:1a:04:3e:75:0e:68:d8:45:eb:de:30:dc:
37:76:6f:f4:52:be:3a:3d:ec:0a:bf:44:14:1e:e5:
8f:90:aa:8d:dd:34:37:38:12:cc:19:87:16:01:12:
84:09:7d:7b:10:53:f5:8e:2a:6d:50:9e:3c:f2:91:
fe:47:f7:f8:c7:29:5c:4c:24:06:e0:bc:37:83:ab:
3b:8e:e5:67:40:88:4d:0f:0d:89:7b:fe:7c:c9:2b:
e7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:92:8E:3A:CF:64:41:48:9B:DA:DE:A5:62:81:4A:22:2E:4E:81:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA28423AD7D311EFB33789B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.157.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f4:a0:a5:51:8e:e0:81:22:18:ac:21:09:2b:48:a1:b0:15:
c0:58:bc:6f:b8:ec:d2:93:d5:66:5f:8c:eb:71:cb:e1:6f:4b:
89:5d:2c:e0:b6:f0:97:b0:06:ed:c3:49:11:66:6d:9d:ac:2e:
06:43:d9:15:c9:64:80:e5:e9:ee:39:c0:41:b7:92:08:19:d8:
ba:f9:2d:5c:32:9b:91:e2:f2:7b:71:5c:1d:0d:2e:3a:c4:f0:
4d:f8:a0:40:02:d0:ee:a3:20:b2:f3:7b:e7:37:f2:5d:8f:22:
93:61:93:15:b0:f2:4f:3e:62:ef:1b:bd:9f:ae:1c:5c:13:c2:
9a:83:b7:95:66:96:d2:50:b0:d0:ea:e8:05:d8:6b:7e:1c:fd:
c6:86:bd:cf:72:5d:57:c1:3a:4e:3e:76:33:98:f8:44:98:08:
39:90:ef:d6:e3:15:4a:66:50:88:b2:d1:a8:fa:89:90:1b:1b:
f9:f1:9c:d5:06:69:cd:13:3d:fb:ee:a1:bd:c5:84:3d:a4:e3:
cd:ec:fc:2d:7d:d2:92:7d:c4:04:78:d3:cc:10:f8:d2:e1:c5:
c0:d6:4f:f6:1d:98:65:41:05:12:41:35:4c:a2:6e:22:fe:42:
b5:59:2c:16:1e:e4:f9:30:78:f3:2d:ca:2c:4b:82:91:52:9d:
33:44:d9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:36:03 2025 by rpki-client