Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0556014D7CB11EFA4A5BA84762E951A.roa
File: B0556014D7CB11EFA4A5BA84762E951A.roa (raw, json)
Hash identifier: PAqC/sj6sY9rtff35jAPkxDeDcQ0m5ST8FyjFC6+ZF8=
Subject key identifier: 87:1E:C6:E5:DC:A9:04:66:65:DA:5A:32:DB:BF:B1:90:9B:B9:67:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010CD4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0556014D7CB11EFA4A5BA84762E951A.roa
Signing time: Tue 21 Jan 2025 07:45:31 +0000
ROA not before: Tue 21 Jan 2025 07:45:27 +0000
ROA not after: Sat 01 Feb 2025 07:45:27 +0000
asID: 44559
IP address blocks: 156.246.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68820 (0x10cd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 07:45:27 2025 GMT
Not After : Feb 1 07:45:27 2025 GMT
Subject: CN=678f509b-2b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0b:b6:e8:41:0f:90:dd:8f:cd:5d:0d:b9:c0:
09:09:7b:be:b8:63:a7:85:d6:79:1d:44:31:5a:48:
8b:b5:d0:13:f5:c5:67:b7:aa:59:94:04:a1:09:c7:
89:59:41:81:f4:76:07:d6:12:1c:bf:c3:14:13:3e:
c0:5c:f8:6f:17:85:5c:19:e2:68:26:78:32:6e:12:
e3:43:f8:2a:bd:bd:45:84:23:91:60:71:ea:4c:22:
f3:56:b6:71:1d:1b:36:e9:f1:5b:a6:60:db:d5:e2:
06:e9:9b:6a:43:cf:61:aa:52:cd:40:83:c9:9d:fa:
9b:aa:de:ec:f5:c3:b8:17:eb:42:d9:69:ec:20:57:
4c:bf:f9:5c:cb:67:0f:72:5b:dc:ba:75:64:f8:95:
1e:72:37:8b:08:3e:82:7d:eb:f9:b6:92:19:7c:ba:
68:d5:85:51:43:23:f2:40:21:75:75:77:76:46:97:
34:38:c9:32:b0:d6:03:95:63:22:d3:3f:fb:88:dd:
d3:56:e1:79:a5:03:ae:a4:e6:c9:31:e3:a8:35:a1:
5f:c1:ec:ae:39:e9:86:4d:55:a8:d3:4b:7d:ac:f4:
27:07:e8:1d:76:14:be:16:d5:62:24:18:c8:aa:6f:
d4:17:c8:e2:1c:3f:0b:7b:5e:d0:3d:ba:36:ce:e4:
d8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1E:C6:E5:DC:A9:04:66:65:DA:5A:32:DB:BF:B1:90:9B:B9:67:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0556014D7CB11EFA4A5BA84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.190.0/24
Signature Algorithm: sha256WithRSAEncryption
38:e3:ee:5d:bc:16:82:33:31:a9:ac:8f:5d:7b:4b:7b:49:91:
db:50:19:de:3a:41:59:f0:27:71:9b:88:c2:a4:10:ad:37:38:
3a:aa:a5:28:97:7c:bc:b8:ec:17:78:34:c3:90:fe:b2:00:90:
99:8a:ab:cd:d4:f7:f7:f0:e7:5a:46:39:45:63:19:a0:4c:75:
f1:f2:b0:25:07:e7:81:fa:66:33:ca:84:83:c6:ae:c5:67:c0:
84:54:e1:b9:7e:00:c6:79:f9:78:1e:44:28:4d:68:c2:b2:91:
cf:0e:50:e2:72:ad:7b:e1:c0:c9:09:ae:3a:25:67:4f:7e:08:
41:ad:47:71:11:18:6a:90:06:4e:76:6a:f1:0f:0a:71:51:99:
36:8d:09:e1:59:6d:8e:2c:03:59:1e:01:37:76:b3:0a:3e:d1:
2e:c2:f6:24:3f:41:47:5a:6b:84:ec:68:00:89:5f:ce:f2:5e:
08:20:cf:1e:06:c5:b6:72:92:95:f3:de:9c:55:f2:4a:ea:a0:
c0:ee:bc:83:b3:41:96:9c:4c:b2:f7:4f:80:2a:d8:46:14:a7:
da:86:7e:e4:00:71:b2:08:17:00:f2:28:53:35:f2:c2:db:ee:
0c:c6:6a:ae:00:6f:32:68:67:15:c2:76:d6:64:dd:59:99:6c:
9b:76:54:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:34:27 2025 by rpki-client