Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF77EBA4D7E711EFA78A35BA762E951A.roa
File: BF77EBA4D7E711EFA78A35BA762E951A.roa (raw, json)
Hash identifier: oULvOVW0A0i0Xv/0i+WDP005z0OgNH837k2oze3NhGc=
Subject key identifier: F6:3C:20:1B:A0:25:37:66:71:62:53:B7:7B:13:E5:2B:24:F8:56:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D56
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF77EBA4D7E711EFA78A35BA762E951A.roa
Signing time: Tue 21 Jan 2025 11:06:22 +0000
ROA not before: Tue 21 Jan 2025 11:06:18 +0000
ROA not after: Sat 01 Feb 2025 11:06:18 +0000
asID: 44559
IP address blocks: 156.246.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68950 (0x10d56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 11:06:18 2025 GMT
Not After : Feb 1 11:06:18 2025 GMT
Subject: CN=678f7fae-c386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:a5:e7:7a:31:14:60:82:2c:89:2c:47:7e:
21:d3:79:65:75:cd:33:5f:d4:84:ea:d3:27:ac:a2:
02:08:f8:30:92:83:e7:83:c7:de:e5:4c:6d:cf:e7:
0b:d0:be:8c:a2:d9:ad:2a:31:38:dc:66:a5:11:ac:
6b:59:8e:42:84:26:f2:23:bf:58:20:76:c6:c3:ba:
07:d5:5f:aa:12:82:e2:a6:9f:13:14:4d:2c:e0:d1:
3b:18:a8:8d:99:65:70:93:e6:e9:c1:02:0c:e5:42:
0b:93:3f:56:c1:56:6d:f5:d4:47:98:4e:2f:73:f2:
2c:01:e4:9f:0f:1e:81:81:e5:10:a5:5d:e3:f3:9d:
69:cb:d5:24:52:e0:74:90:7b:76:54:65:53:79:b4:
c9:07:0f:eb:1b:b3:0e:ec:cf:c1:82:6e:0b:50:c6:
1b:a9:92:ac:ed:46:f2:ab:5d:69:e5:b8:67:ea:02:
4c:e4:d1:6f:66:ef:ed:51:4e:e0:e9:d9:69:e0:10:
18:e6:a9:27:b0:07:bd:af:c4:87:4e:33:08:f5:7b:
da:a9:7f:eb:f9:ba:53:bf:1b:3b:93:df:29:fe:64:
29:b1:e1:ae:5a:b0:e7:6f:a1:38:4b:4c:85:1b:ee:
69:2c:20:08:2a:2f:d8:7b:93:e2:2f:fe:4d:a6:35:
d5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3C:20:1B:A0:25:37:66:71:62:53:B7:7B:13:E5:2B:24:F8:56:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF77EBA4D7E711EFA78A35BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.204.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b7:46:1c:27:d5:10:b7:3b:a9:c8:f8:4c:1b:ae:54:ca:70:
ed:fc:a5:e1:69:fc:cf:a2:e5:62:ef:59:8e:6a:4f:70:0b:35:
24:ef:b5:04:03:6c:84:44:cc:df:64:1f:f7:64:9b:49:46:51:
51:37:79:7f:77:4b:cf:33:07:b9:48:6e:56:c2:70:bd:b4:33:
a0:dd:c1:59:21:8c:c1:d8:70:52:e8:48:25:8f:f1:c4:5d:37:
9c:77:10:04:b2:bb:c0:98:f3:a0:2f:23:29:1e:c5:db:92:4e:
27:25:07:00:1a:97:dc:b9:e0:dd:bc:f3:da:2c:89:5e:b4:40:
47:44:7b:e4:d5:dc:98:80:54:91:81:59:ab:0e:30:81:e6:ed:
d6:35:eb:ab:37:5e:99:2f:42:ab:7a:56:6a:60:2f:b4:db:69:
4c:e6:9e:64:0a:cd:b9:50:dd:61:db:73:05:f8:ff:70:8a:70:
d8:3c:1b:90:f9:84:12:8a:2f:f1:e8:f9:6b:61:22:8c:a4:c5:
5f:56:b1:a0:8a:e5:39:d0:4a:94:2a:22:2d:8f:f2:68:fa:05:
fb:bb:75:6e:99:da:4e:47:82:46:c5:a2:88:58:68:49:07:8a:
0d:60:4c:f8:6a:fa:f1:76:ea:c0:4b:d2:01:38:4f:f6:98:53:
7f:68:30:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:03:25 2025 by rpki-client