Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5344468D7FA11EF899C15B5762E951A.roa
File: B5344468D7FA11EF899C15B5762E951A.roa (raw, json)
Hash identifier: dckA8jy1kqNV6lBLpKDiBDPuUTRUwOYT7vUi1wSbhlE=
Subject key identifier: 48:97:03:C1:11:9F:4B:57:99:A8:B7:06:DE:13:33:69:7F:94:C9:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DD2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5344468D7FA11EF899C15B5762E951A.roa
Signing time: Tue 21 Jan 2025 13:22:05 +0000
ROA not before: Tue 21 Jan 2025 13:22:01 +0000
ROA not after: Sat 01 Feb 2025 13:22:01 +0000
asID: 48031
IP address blocks: 156.246.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69074 (0x10dd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:22:01 2025 GMT
Not After : Feb 1 13:22:01 2025 GMT
Subject: CN=678f9f7d-7f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:17:2e:2f:73:da:4b:88:9f:9e:8f:37:09:
a7:e3:d5:a2:37:26:dd:d9:87:6a:ed:07:5d:d7:54:
9c:29:55:70:10:d2:aa:77:06:37:f4:22:e3:da:bb:
93:70:ae:11:1a:b9:6a:11:79:2c:fa:21:8e:30:d5:
c9:e9:34:4c:b1:84:a1:51:71:ab:f9:63:22:9c:3d:
a7:34:6d:35:77:79:c4:46:a3:09:f0:4c:0e:e9:54:
3e:95:c7:5d:6f:64:08:0f:a6:b8:ac:7f:47:d6:97:
01:13:0a:7b:c8:28:b7:02:22:bd:9f:d6:b3:11:ba:
5a:ec:45:4b:3d:35:ed:a7:98:ec:2d:79:c4:d0:4a:
49:df:5e:b9:b6:6b:70:15:5a:34:cb:d5:3f:90:66:
ba:46:00:f0:ee:a5:74:bb:be:40:68:6f:8e:ff:fe:
d0:aa:d3:10:28:a0:de:1f:f6:cd:17:c1:42:71:0c:
74:e1:7a:43:16:02:23:28:72:14:8b:23:58:ae:cc:
c3:28:77:90:a5:4e:67:3e:e2:f1:d9:2f:1f:61:fb:
4d:a6:31:b5:12:d5:35:54:b2:49:8f:bc:ba:c4:74:
6e:26:dc:64:d7:99:df:bd:93:0a:6f:99:0a:eb:c9:
4b:5b:ec:a0:99:31:e8:f5:42:e6:14:89:c8:9c:02:
59:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:97:03:C1:11:9F:4B:57:99:A8:B7:06:DE:13:33:69:7F:94:C9:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5344468D7FA11EF899C15B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.138.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:79:ad:e9:45:ef:70:06:d0:dd:75:5e:6a:49:15:7b:a4:f4:
be:b5:9a:27:d6:05:c8:f4:77:d2:87:a5:c1:0c:4c:59:03:93:
d2:51:e5:3b:87:9f:f4:29:87:82:cf:3e:5f:36:79:bc:40:43:
46:33:b2:2b:7c:27:5d:31:68:23:e7:8e:e3:75:dd:42:e6:48:
ef:7c:20:c9:11:f2:7d:80:36:46:fd:b7:f4:b8:43:7c:01:17:
fa:89:ac:63:f1:b0:ef:1e:e3:17:06:c3:03:bd:28:09:c8:5f:
54:8c:33:1b:b7:f7:cb:46:22:db:74:ea:44:bb:9d:34:07:e6:
d3:bc:b8:74:7a:40:de:c3:c7:41:4a:fb:3f:2e:08:cd:0d:79:
1c:14:96:42:8e:af:09:5b:e0:31:ab:05:97:23:71:75:1b:72:
87:1c:ab:4d:5b:a2:37:0b:7a:8a:a9:38:58:13:0d:85:50:a9:
30:e4:96:f9:d0:ea:11:8f:7c:d8:9b:cd:34:af:1b:df:86:59:
a4:70:fa:b0:3c:d5:50:42:e1:35:52:a8:5e:f1:4d:de:1f:3c:
ab:1b:c5:cd:dd:d6:28:c6:af:e8:1f:c9:6f:6a:58:fa:69:32:
32:b6:38:84:1d:e9:c9:d7:49:05:0b:7f:45:5a:b4:7f:0f:7a:
67:a4:81:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:36:30 2025 by rpki-client