Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9EC62FCDA9211EFA8AB4592762E951A.roa
File: B9EC62FCDA9211EFA8AB4592762E951A.roa (raw, json)
Hash identifier: RP7wZV1YvNV7t4SSyOPnrBERBMMO3T+UaJre9KA+xtc=
Subject key identifier: 5B:C5:A3:9F:2E:6B:5B:C1:D9:F8:08:DD:0C:8F:DD:8C:9F:8E:7B:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011082
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9EC62FCDA9211EFA8AB4592762E951A.roa
Signing time: Fri 24 Jan 2025 20:35:19 +0000
ROA not before: Fri 24 Jan 2025 20:35:15 +0000
ROA not after: Tue 25 Feb 2025 20:35:15 +0000
asID: 44559
IP address blocks: 156.246.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69762 (0x11082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 20:35:15 2025 GMT
Not After : Feb 25 20:35:15 2025 GMT
Subject: CN=6793f987-d90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:43:eb:88:5c:4b:fa:af:8e:d8:41:f6:ed:
20:d1:22:3a:48:82:5d:65:bd:db:31:59:05:88:5a:
65:b1:c5:51:3f:fd:f4:a5:9c:8a:2d:cf:9c:bf:5c:
26:7a:1f:66:46:9d:27:e6:a6:a0:b0:15:30:a9:3d:
d1:51:ce:83:70:c9:ef:90:9a:7c:c2:94:ee:1a:20:
88:d8:44:93:49:f2:c8:ab:3f:0a:05:d0:fb:c6:27:
89:b9:67:9d:23:62:46:e0:1b:77:24:7b:41:79:13:
05:aa:eb:81:56:31:34:aa:bb:3c:14:ec:8a:37:80:
80:e6:7e:88:9d:e1:44:d5:f5:9c:01:da:61:05:75:
cd:d0:0e:84:c3:10:b9:79:b3:d8:76:9f:2b:f6:ca:
33:3e:38:d4:16:f4:fe:1f:62:25:be:53:f6:98:49:
5d:e9:b2:06:1b:48:1a:b5:ef:74:e4:82:80:2a:38:
80:5b:22:cf:a1:7e:ec:fc:94:94:ef:20:e8:e2:87:
6d:f8:ec:ad:b9:47:56:0f:cc:2d:d0:d2:ad:57:b0:
ea:a3:82:c7:7d:3c:ca:62:9b:de:a3:52:f9:70:12:
cb:ac:af:86:83:ed:30:4d:c8:98:67:91:3c:1b:d7:
30:d0:2d:63:2d:31:2f:ed:32:68:61:3c:9e:0f:cf:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C5:A3:9F:2E:6B:5B:C1:D9:F8:08:DD:0C:8F:DD:8C:9F:8E:7B:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9EC62FCDA9211EFA8AB4592762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.218.0/24
Signature Algorithm: sha256WithRSAEncryption
02:79:97:fc:f8:eb:c3:8c:2b:ed:db:45:1d:2f:71:43:8f:8f:
19:3e:b6:18:d3:02:fe:54:bf:40:18:52:b6:97:61:29:5b:8f:
05:e9:7d:9c:f0:df:24:fd:e3:8a:dc:70:4b:6a:37:1b:22:13:
d7:52:b0:4e:04:e5:06:9d:6b:76:6d:9b:4a:19:0c:a3:34:f5:
68:32:a3:18:89:4f:ca:1e:a3:c8:57:1b:dc:94:db:d8:a5:04:
69:ba:70:33:12:20:44:59:55:f2:55:de:4e:eb:4c:af:59:8b:
79:3a:c2:8c:4d:9e:c1:c1:b5:6f:8e:de:14:b4:49:6c:7f:c4:
10:2f:d1:d5:aa:16:11:bb:d0:fa:3c:88:3e:0a:1b:cc:68:64:
54:ce:51:c0:14:9c:5c:b9:76:4b:76:52:b7:9f:64:07:22:a0:
41:ec:0c:28:0a:67:0c:cb:5e:43:ed:b2:52:4b:39:21:2d:b2:
d7:13:95:77:6d:c1:86:01:4b:24:1d:9c:ac:1c:04:7a:17:1e:
1e:ac:4d:f8:96:85:6d:c5:f3:2c:73:ae:b1:78:09:88:82:9c:
11:29:15:1f:e5:27:02:1f:e2:69:9f:f4:40:1c:35:b7:0b:71:
82:73:c7:5c:cd:69:b9:a2:54:96:d5:cd:5c:33:4f:92:0a:50:
f2:70:f7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:34:25 2025 by rpki-client