Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C768329CD96D11EF90EBC95D762E951A.roa
File: C768329CD96D11EF90EBC95D762E951A.roa (raw, json)
Hash identifier: C58YJofc2eOvDBwtTqd/m5RfFDmpRU+YaLbiuHpqT2o=
Subject key identifier: BD:8F:DA:D4:3E:C7:EA:54:0D:71:C0:4F:CE:5D:6D:91:27:1F:82:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010EF0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C768329CD96D11EF90EBC95D762E951A.roa
Signing time: Thu 23 Jan 2025 09:38:19 +0000
ROA not before: Thu 23 Jan 2025 09:38:15 +0000
ROA not after: Sat 15 Mar 2025 09:38:15 +0000
asID: 138915
IP address blocks: 156.244.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69360 (0x10ef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 09:38:15 2025 GMT
Not After : Mar 15 09:38:15 2025 GMT
Subject: CN=67920e0b-9ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b7:42:e5:59:17:b7:0d:4f:9d:a0:9f:3d:d8:
a0:50:c6:a2:59:ed:b6:87:70:51:d3:db:6c:21:c4:
f3:22:1a:df:6e:37:b0:06:74:82:62:1d:26:cb:01:
c9:24:0e:06:5b:8d:57:6a:32:65:61:e5:cf:50:b7:
dd:1f:bf:20:b9:79:8c:a2:88:ee:74:ae:a2:c7:bc:
34:67:5e:3e:22:31:82:59:db:0b:e0:32:a8:18:83:
02:60:a9:66:01:eb:4a:e6:cf:df:ee:44:50:aa:bb:
b6:e8:74:51:c9:2a:ce:6a:eb:e6:d5:88:8c:73:bf:
96:47:85:65:cd:5b:8f:84:af:4f:55:37:7f:4e:d8:
6c:50:3f:87:5b:49:5d:90:3f:73:af:2b:dc:a6:4e:
3b:d0:98:00:a2:7b:00:4a:54:d4:e0:6d:84:1e:8b:
67:56:ca:f9:18:c0:ce:78:fe:5b:b7:0e:79:30:c7:
2d:25:1d:b3:25:7d:00:67:07:62:28:49:7d:e4:91:
07:a8:c2:a7:46:1e:c5:20:08:43:ed:9e:78:98:2d:
f5:1d:6b:6c:59:8b:f7:c0:1c:9d:ef:f0:42:62:1f:
71:f0:3e:de:1d:50:6e:15:e6:8d:0a:2c:e8:e6:ff:
e0:3a:02:e3:5c:c1:b7:4f:69:83:92:14:a4:06:45:
ea:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8F:DA:D4:3E:C7:EA:54:0D:71:C0:4F:CE:5D:6D:91:27:1F:82:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C768329CD96D11EF90EBC95D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.19.0/24
Signature Algorithm: sha256WithRSAEncryption
02:84:c8:92:0a:28:de:8f:7a:2b:c5:4c:82:e6:9e:3d:fa:96:
af:6b:92:32:4f:1b:74:d3:e6:3d:79:9b:81:2e:88:ed:aa:ba:
0f:4d:e8:00:25:3a:df:e9:b2:81:a6:d5:e5:24:91:f7:14:d0:
33:b3:cf:c0:03:f4:0e:18:42:dd:9d:1f:ab:d1:54:fb:70:88:
95:27:d3:d6:9d:43:10:2f:32:35:4c:7e:9d:5a:8d:32:bd:fb:
ad:4e:4b:86:31:97:43:4a:cb:77:36:04:76:ef:84:a0:69:ca:
5b:91:c0:8d:2c:16:f3:9d:ad:57:6d:e6:9c:6c:f3:09:9c:0c:
1b:d6:bf:72:25:cb:41:ad:b1:a6:58:e4:09:c6:8c:af:6c:0c:
67:07:2e:52:6f:e1:03:7b:cd:1f:d8:a1:6d:32:b1:cf:94:dd:
1e:c2:99:67:b2:3a:d5:9c:2d:f8:01:2f:15:e3:6a:4e:fc:87:
d3:93:b1:72:c6:3f:5f:e4:8d:85:b3:5f:cf:5c:45:d6:66:2a:
f4:c9:ff:7d:a2:63:cc:54:aa:19:43:33:57:59:3b:26:26:a9:
2a:21:63:70:e9:d3:2a:50:62:00:b0:b6:cb:2d:a9:2d:1c:27:
fd:3a:a1:e8:c1:df:2a:04:59:8a:a6:44:9e:e3:b9:9a:29:fb:
2e:61:e2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:34:26 2025 by rpki-client