Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5C602F2D8DC11EFA05E9E88762E951A.roa
File: C5C602F2D8DC11EFA05E9E88762E951A.roa (raw, json)
Hash identifier: BkJkLWw/2U6nx2U7b2Ug9c562gz9q4Adp199nfyJ5ZU=
Subject key identifier: 13:61:2F:CB:6C:D6:AA:75:E7:4E:57:1B:6A:EE:3D:CC:CB:2F:C8:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E7E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5C602F2D8DC11EFA05E9E88762E951A.roa
Signing time: Wed 22 Jan 2025 16:20:19 +0000
ROA not before: Wed 22 Jan 2025 16:20:16 +0000
ROA not after: Sat 15 Mar 2025 16:20:16 +0000
asID: 138915
IP address blocks: 156.244.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69246 (0x10e7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 22 16:20:16 2025 GMT
Not After : Mar 15 16:20:16 2025 GMT
Subject: CN=67911ac3-ef37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:8f:f0:fa:f9:f1:e6:8f:81:5f:94:20:a1:
35:b5:72:c7:67:cd:c2:86:ca:9f:41:e7:db:d0:b1:
64:45:69:ae:e7:44:51:07:42:37:34:6f:57:d1:7c:
5c:52:27:bd:a4:64:5e:65:93:28:4c:28:f8:f0:1e:
ca:96:95:46:85:2c:b9:71:24:fb:39:d3:b2:bf:5b:
4a:fb:71:0e:18:ec:cd:d3:3a:5e:29:ac:2d:3c:5d:
78:b5:af:51:a6:13:cd:35:87:c1:1f:54:45:e9:87:
73:77:18:3e:65:be:5b:84:5c:3e:8c:75:fe:c6:01:
4f:78:d8:2f:10:01:98:71:2f:c0:f2:86:4a:90:fd:
21:ae:c5:78:cd:ae:82:26:f3:09:5a:a4:55:14:83:
99:e0:a1:66:84:36:c8:5d:a9:eb:c7:74:0a:36:d9:
49:7c:dc:1c:ca:8f:41:80:c4:1a:43:47:e0:0c:e2:
71:cc:14:59:45:c6:81:8c:59:37:05:36:3e:fd:1b:
fc:c9:63:40:91:37:45:4a:34:83:6a:59:8b:0e:59:
ca:ca:ce:8d:b9:1c:13:62:3f:84:78:38:c9:66:6d:
c1:c1:3b:c8:c8:88:19:95:e3:4c:8a:ac:37:25:c5:
b5:dd:d9:b7:2d:2d:43:69:9c:1b:32:24:e9:63:96:
e1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:61:2F:CB:6C:D6:AA:75:E7:4E:57:1B:6A:EE:3D:CC:CB:2F:C8:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5C602F2D8DC11EFA05E9E88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.54.0/24
Signature Algorithm: sha256WithRSAEncryption
91:3f:73:2d:8b:07:4b:e9:04:a0:61:5c:ce:91:9b:49:bb:b7:
e4:0c:fb:f3:1c:ab:30:b7:50:07:e7:1a:79:71:5a:b2:37:05:
e6:20:8b:de:e7:32:66:80:54:b5:9b:8b:79:71:c4:c2:30:0d:
88:06:2d:04:75:6f:0d:df:71:70:86:9b:fa:7b:ff:a0:db:e7:
51:e3:8a:54:76:bd:d2:38:c0:ab:2a:10:93:be:8c:c7:56:1d:
ea:7b:69:58:5e:89:48:25:ff:13:ed:e9:ff:b5:43:dd:87:80:
58:b1:af:cf:90:1c:b1:b1:63:0d:21:14:f8:32:69:c0:91:5d:
f5:6b:71:b5:e2:4a:59:4a:cf:8b:4f:62:50:a1:49:7e:d1:f9:
4b:66:cc:d1:32:b8:14:89:c1:de:6d:48:8c:a7:19:69:93:3a:
5d:ec:44:3a:7d:76:50:4d:64:ff:51:85:03:97:34:02:2d:bc:
77:a3:b1:7d:12:a6:e1:92:ff:4f:a7:b6:04:f3:45:ef:02:bf:
8a:74:e9:0b:72:a0:8d:a9:69:80:38:d1:6e:b2:92:65:ad:2a:
9f:ff:49:61:fe:73:fc:a9:32:b2:da:26:a1:19:ea:03:bd:a9:
19:82:e5:82:43:8d:dd:2e:a8:51:c8:7c:f9:d5:f0:10:1e:c7:
eb:a2:18:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:22:38 2025 by rpki-client