Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B479BB30DCD111EFAF678CB9762E951A.roa
File: B479BB30DCD111EFAF678CB9762E951A.roa (raw, json)
Hash identifier: oZ8oSnf/OzYNovIH0oFAU3aXtWJJ3PfHL3ge/ITFM7k=
Subject key identifier: FA:FB:EE:D1:0C:F8:53:3D:ED:35:7E:8F:74:F2:3B:B3:64:EA:70:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011549
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B479BB30DCD111EFAF678CB9762E951A.roa
Signing time: Mon 27 Jan 2025 17:11:11 +0000
ROA not before: Mon 27 Jan 2025 17:11:07 +0000
ROA not after: Sat 15 Feb 2025 17:11:07 +0000
asID: 39600
IP address blocks: 156.237.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70985 (0x11549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 17:11:07 2025 GMT
Not After : Feb 15 17:11:07 2025 GMT
Subject: CN=6797be2e-02d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:87:ca:f5:66:7f:62:be:4f:59:ff:09:ba:
ef:da:f3:8a:ff:36:7e:2b:28:1d:83:12:4a:db:7f:
64:03:bc:d1:d6:4a:4b:8d:e0:27:fa:c0:d0:54:52:
7a:85:8c:17:a3:9b:a1:d2:29:32:3b:f5:3c:95:d8:
5e:1a:51:ed:97:9e:dc:e7:de:ca:fc:f4:82:c6:4a:
e2:cd:8d:93:f0:72:d7:44:a8:51:7a:12:ec:16:7e:
7c:9a:e2:31:b6:7a:02:27:f0:eb:96:7a:c0:7d:05:
c9:23:56:1d:7a:63:73:40:3f:78:58:48:b9:44:1d:
8b:4f:81:f4:76:9a:92:6b:4c:02:45:b2:06:91:0b:
b5:64:b3:6b:0a:3d:c2:7e:f5:ba:2f:55:fb:71:f0:
22:d4:1a:e0:e6:8e:1f:b5:f8:27:09:91:14:43:3a:
0d:30:59:c7:f4:98:68:ba:46:85:f4:df:f0:32:5e:
f2:e9:e8:70:f1:46:84:f7:75:ff:52:3f:06:29:61:
90:fa:1a:be:f5:cf:3c:13:98:a9:ad:03:35:fc:90:
b2:4f:c8:c9:79:5d:d2:72:5d:ea:a8:6f:e3:62:5c:
b7:02:75:53:a4:06:05:de:a6:2e:00:8d:c7:62:2c:
f1:71:45:d4:0a:91:7a:b8:77:0d:ef:9b:7e:38:b7:
3b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FB:EE:D1:0C:F8:53:3D:ED:35:7E:8F:74:F2:3B:B3:64:EA:70:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B479BB30DCD111EFAF678CB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.113.0/24
Signature Algorithm: sha256WithRSAEncryption
40:85:97:64:82:19:95:f6:4c:be:cd:de:ed:09:21:4e:d1:c6:
74:e3:d9:e3:8d:2b:33:7d:6a:8c:2d:7f:cf:00:22:b2:76:55:
4c:21:dd:c6:67:fd:d1:62:b6:a4:bc:d7:18:d0:7f:19:5b:bf:
d5:4c:f7:9a:8d:e0:cd:d8:db:93:5e:ec:cf:b0:ed:38:87:11:
06:92:85:8d:60:86:15:b5:ee:c9:7e:21:a9:6b:32:03:26:55:
59:85:c0:06:22:f8:e9:e6:11:1a:8f:58:00:83:76:f0:09:24:
cc:bf:85:cf:60:af:de:b7:68:87:a2:41:36:f6:91:49:87:9b:
1a:53:cb:0c:03:6a:8c:ac:ed:6e:b7:3a:6d:21:c5:d5:60:e9:
9f:e9:64:de:40:a2:11:8a:b7:6d:3f:3d:20:7a:41:42:3d:35:
dd:c4:ed:0c:ab:5d:41:8f:94:83:70:7d:a2:e4:d5:d7:83:3c:
37:1a:92:b3:02:a2:ec:be:17:7f:87:a3:f2:a5:f2:74:0a:f2:
90:e5:27:49:b3:a7:e0:ca:d7:6d:d1:81:c8:de:7b:c1:1a:92:
0b:e5:28:12:64:36:69:41:b1:ee:e6:bd:00:3f:dd:96:5d:af:
a4:65:2f:6d:83:87:23:d0:81:ae:62:00:75:a0:c0:57:87:3f:
80:bd:4a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:37:19 2025 by rpki-client