Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA8DEEE2DBE611EF8FED658F762E951A.roa
File: BA8DEEE2DBE611EF8FED658F762E951A.roa (raw, json)
Hash identifier: 7+Zkp3cN71A2Z6Jl65a3y9Tira06SOzbFnWHX/2S3nI=
Subject key identifier: 47:4E:77:5C:14:69:44:81:11:B6:17:60:95:56:2F:5C:2F:6E:C6:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA8DEEE2DBE611EF8FED658F762E951A.roa
Signing time: Sun 26 Jan 2025 13:09:09 +0000
ROA not before: Sun 26 Jan 2025 13:09:05 +0000
ROA not after: Tue 04 Mar 2025 13:09:05 +0000
asID: 203020
IP address blocks: 156.243.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70576 (0x113b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 13:09:05 2025 GMT
Not After : Mar 4 13:09:05 2025 GMT
Subject: CN=679633f5-9e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:1d:14:78:1f:ab:7a:d8:ce:fd:1e:3b:72:
a8:53:f9:fe:a4:72:3d:8b:88:df:a5:f0:33:4b:a3:
a2:96:c4:05:75:2b:68:7f:9f:2d:54:16:18:19:91:
77:7f:ea:f6:e2:e8:af:d0:92:e0:f6:ff:9b:99:60:
ab:d1:c0:55:61:9f:d3:f0:86:9a:b2:7f:85:0f:18:
31:d7:bf:00:af:f5:3d:b2:d6:a5:97:be:da:a9:07:
a8:fb:f3:93:1b:a2:e6:63:f7:e4:87:9e:3d:a2:7d:
39:48:6f:a8:9d:0b:43:1c:ad:78:9c:0d:fd:62:dd:
85:19:4d:fb:43:0b:2f:a0:c1:43:c0:19:52:d5:f2:
fb:6f:15:a3:7e:73:52:91:4b:54:cb:b2:e4:0f:44:
bb:20:9f:93:bc:34:77:c6:c7:54:14:69:ca:55:77:
75:68:2a:31:b3:bc:47:93:40:23:26:f5:38:0a:26:
1e:6b:58:bd:28:10:88:e7:23:bd:b3:21:97:92:b0:
71:ae:a3:d0:06:7a:30:07:01:28:7b:32:e6:b7:f4:
12:89:fb:86:f1:bd:db:0e:9d:d8:f5:34:e6:72:6b:
f0:04:34:df:cc:19:c2:d9:7a:70:d1:db:93:0e:dc:
24:41:40:fa:4a:23:c9:99:a5:20:8e:23:d0:d0:e7:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4E:77:5C:14:69:44:81:11:B6:17:60:95:56:2F:5C:2F:6E:C6:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA8DEEE2DBE611EF8FED658F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.247.0/24
Signature Algorithm: sha256WithRSAEncryption
31:77:37:e4:4b:d8:33:91:29:44:2b:d1:38:e3:3b:63:73:35:
7c:ec:d0:0d:f8:2a:30:4d:2e:e3:43:fc:49:cc:b0:4b:a9:1a:
3f:39:cf:ed:8e:b9:07:0e:5a:85:b3:eb:1b:dd:2c:aa:84:2f:
00:6b:ad:c2:64:9f:51:3a:ff:ce:0c:96:41:b1:c7:7c:03:c8:
6f:0a:8e:f9:7f:19:da:39:39:15:75:2f:d9:11:a3:ee:eb:be:
17:5a:4d:17:33:28:2e:32:f1:17:2a:92:c6:59:38:e3:a8:2d:
35:24:40:3a:a6:7f:83:77:3e:22:05:09:fc:66:f3:6c:50:21:
92:4c:83:c7:5d:38:bc:a7:68:4e:08:8e:15:cd:44:28:0a:f7:
3f:bd:db:dc:19:df:bb:4d:56:9d:9a:2c:72:f1:9b:f0:9c:b1:
f7:c5:9a:ee:1e:e1:73:77:f1:72:f9:b7:36:de:69:bd:20:3e:
69:1b:83:4e:4c:71:71:25:21:81:c8:c0:c5:ad:4a:93:75:40:
9a:82:5e:7e:63:cb:5a:71:91:b3:c7:2d:25:9d:ed:19:70:5b:
fd:28:eb:32:6a:06:e1:c2:b2:24:ee:2d:cb:e8:c9:33:4f:ae:
33:e0:ea:88:e3:1e:2f:6c:c6:0d:3b:14:bb:71:83:71:22:c1:
eb:e0:16:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:43:11 2025 by rpki-client