Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C50799BADEEB11EF94A1A986762E951A.roa
File: C50799BADEEB11EF94A1A986762E951A.roa (raw, json)
Hash identifier: G5USCv502QO/7Khom/GMQ65c72lBbAycnvzhyqO7ttw=
Subject key identifier: 31:D6:3E:ED:76:72:09:96:B2:0C:F0:80:C7:9A:C6:90:80:F5:44:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0115C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C50799BADEEB11EF94A1A986762E951A.roa
Signing time: Thu 30 Jan 2025 09:22:48 +0000
ROA not before: Thu 30 Jan 2025 09:22:43 +0000
ROA not after: Tue 18 Feb 2025 09:22:43 +0000
asID: 214834
IP address blocks: 156.253.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71107 (0x115c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 30 09:22:43 2025 GMT
Not After : Feb 18 09:22:43 2025 GMT
Subject: CN=679b44e8-ef73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:ea:3d:77:87:a8:bf:fe:56:18:c0:aa:25:
34:9f:66:c1:6c:ea:26:4d:f1:f9:20:0c:6b:42:e5:
cb:e1:52:f6:36:ef:62:6d:0a:e1:d0:77:38:f5:78:
38:48:62:72:7b:c9:0c:05:81:f2:94:54:ad:06:66:
c4:8f:e3:eb:92:c5:d4:82:24:fe:0e:af:81:8b:d5:
6b:f5:97:09:3b:36:44:98:9a:bf:c0:69:eb:c4:2f:
b7:b8:fa:9c:39:0b:b9:29:7a:2c:53:5d:28:59:b7:
90:c1:92:24:2e:55:49:10:ad:d4:03:53:61:cb:91:
16:bf:99:f6:9e:92:d9:52:7d:7c:69:cd:34:6a:3d:
ca:ef:9e:5d:f9:58:e5:2d:85:2e:4b:99:14:78:3e:
85:d3:0c:da:1c:d3:d0:6f:e3:c2:98:25:8b:da:d7:
80:8b:fa:54:81:49:5a:b2:96:e7:98:32:16:a0:ca:
7d:a1:c5:59:43:3f:9f:20:ea:34:7f:70:a1:44:70:
34:d4:0e:26:f8:50:e6:c7:d5:9d:6b:37:18:72:ff:
5b:28:9c:4b:c6:03:81:36:2e:c0:0c:0e:15:cc:8d:
99:54:39:ea:90:1d:6d:35:72:f7:d5:4f:f3:e2:90:
52:ac:87:e3:0e:b4:f7:13:88:0c:7c:7d:c1:d2:1c:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D6:3E:ED:76:72:09:96:B2:0C:F0:80:C7:9A:C6:90:80:F5:44:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C50799BADEEB11EF94A1A986762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.227.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:1d:73:2e:4e:e3:3f:a9:6f:41:60:ad:19:e3:a0:07:62:8d:
cd:72:c1:20:3a:20:f6:50:84:26:48:42:fa:a2:20:ba:04:91:
a8:c2:bf:f6:21:48:33:03:5e:26:f0:07:05:d3:43:21:5e:b2:
88:c7:78:ed:a3:75:c0:01:82:2b:1a:15:04:c7:90:0f:e6:39:
ee:f3:c9:15:25:07:c9:38:92:33:4b:6b:ab:95:e3:96:8d:c3:
7b:e2:c2:43:1b:1a:4a:77:e5:c4:f0:fa:a3:20:e2:2c:54:9a:
b5:1c:9e:ca:45:80:dc:cd:54:06:35:af:dd:74:61:53:62:62:
dd:72:1a:d2:62:00:f5:50:a4:e9:94:dc:4f:a1:da:f9:a8:45:
87:ce:a6:cc:16:7c:f3:4e:42:4e:85:aa:8c:0a:92:75:49:6e:
46:03:e0:08:57:42:6b:16:8b:a2:56:50:d8:51:27:15:73:4e:
32:88:08:79:0a:bb:36:fc:20:1c:b2:ee:c7:43:bc:47:85:9f:
47:1c:2f:8f:aa:30:0b:3a:39:d0:75:18:b9:66:24:3e:20:42:
f1:5b:ad:15:61:10:e5:ed:98:03:c3:30:c8:71:09:06:1c:65:
6e:ae:b6:71:e4:dc:fb:63:ee:2c:08:85:6a:bf:23:c1:95:bf:
81:f2:8c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:15:02 2025 by rpki-client