Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B818DFECD95B11EFBC69D463762E951A.roa
File: B818DFECD95B11EFBC69D463762E951A.roa (raw, json)
Hash identifier: uhyDmx6G5kQv6kxSRFDlTT1voEB4SZ0Q3mA0nEZzfck=
Subject key identifier: 6E:D8:78:80:B1:2E:F6:07:78:E0:84:A9:C1:01:B2:86:6E:3E:40:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010EBF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B818DFECD95B11EFBC69D463762E951A.roa
Signing time: Thu 23 Jan 2025 07:29:03 +0000
ROA not before: Thu 23 Jan 2025 07:28:59 +0000
ROA not after: Sat 15 Mar 2025 07:28:59 +0000
asID: 138915
IP address blocks: 156.244.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69311 (0x10ebf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 07:28:59 2025 GMT
Not After : Mar 15 07:28:59 2025 GMT
Subject: CN=6791efbe-45b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:de:3f:bb:60:44:ac:79:3f:19:0f:9b:d2:
fd:f7:c0:91:39:9f:41:1d:da:4d:50:45:4b:a7:05:
52:9f:5e:00:d0:b8:10:47:f4:f0:d1:f7:c1:94:8a:
e1:5f:04:d0:42:d2:4c:ea:0f:90:1e:95:3c:b6:fe:
ca:6e:49:00:9b:1f:d1:a3:0e:d2:6c:d4:5e:9d:e9:
ca:91:c8:b3:9d:6a:f2:03:52:cd:0b:35:31:7c:2e:
77:4c:3b:db:cb:5a:03:f6:4e:31:cc:65:07:fa:58:
89:e9:e8:95:3c:82:53:48:12:15:74:49:b5:cc:5d:
6f:5a:4b:48:a0:60:7b:3a:bf:71:a6:1a:a4:64:5a:
f6:48:86:5e:e4:2c:1d:29:23:e5:1c:27:12:45:fe:
aa:79:5c:33:04:9c:30:6b:35:f7:61:55:20:f2:cd:
d3:69:ac:b5:75:68:74:23:5f:30:4b:ec:01:23:f3:
45:fc:0b:ae:e1:41:24:af:ef:24:10:25:53:65:ee:
19:8b:e5:9c:2d:11:8c:e9:1e:b5:5a:90:65:f2:40:
ba:65:ac:51:81:f7:7b:67:82:8e:fe:36:49:6c:61:
5c:57:89:a6:62:b4:3c:4b:49:a6:73:5e:53:4f:64:
32:b5:66:e7:d1:4a:ba:98:f7:ec:fb:e8:94:ec:1f:
a9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D8:78:80:B1:2E:F6:07:78:E0:84:A9:C1:01:B2:86:6E:3E:40:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B818DFECD95B11EFBC69D463762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.25.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:d0:77:8c:7c:b7:cc:61:69:9f:b1:8b:34:62:77:25:9b:88:
13:04:2f:ec:f5:af:c7:02:bd:b0:a9:09:0b:df:72:fe:3d:55:
7b:d1:77:d2:4f:d9:81:c0:69:1a:57:5e:78:72:a3:d8:2c:b8:
75:bf:d6:9a:5f:8b:fa:8d:87:2d:b4:0d:e0:41:7b:49:44:25:
39:89:86:ff:d0:eb:49:90:25:46:92:e9:09:ed:9d:0d:47:d5:
76:84:f4:e9:21:07:43:cb:6c:5d:d1:30:bd:24:47:45:0a:b0:
ca:b0:e4:14:5b:2e:57:c9:b9:2e:0b:71:1d:7c:e5:c6:e7:c7:
c0:c2:56:dd:b0:95:c5:b1:0a:5c:8a:0b:bb:ec:23:fa:02:81:
fd:76:a3:44:e0:06:e8:4e:b7:d8:33:ba:71:68:1e:fb:13:5f:
6b:e2:b6:a7:46:2a:2e:5d:90:ca:ba:b2:a4:c3:05:c4:67:91:
f5:3f:07:82:20:70:d0:b5:7c:fa:4f:a9:c2:4c:5b:f4:3b:bf:
67:98:b4:c6:65:39:4f:34:51:3f:f5:81:35:e0:47:c4:2a:a9:
6e:63:47:c4:50:2c:76:cc:38:c0:9c:5d:0a:3c:bb:c2:c7:3e:
ac:ab:a1:91:c6:0d:0d:66:ae:9b:2f:9f:be:24:9f:ab:02:b1:
3a:19:af:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:16:09 2025 by rpki-client