Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C886992AD3D211EF8FBD2A85762E951A.roa
File: C886992AD3D211EF8FBD2A85762E951A.roa (raw, json)
Hash identifier: u03GSa5pJvNt0PqGUc1V7RahWY1IMt95hs7xwtnkl6I=
Subject key identifier: C0:15:65:47:ED:DD:1D:74:AD:50:ED:A5:8D:92:20:9E:82:BE:D8:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C886992AD3D211EF8FBD2A85762E951A.roa
Signing time: Thu 16 Jan 2025 06:26:13 +0000
ROA not before: Thu 16 Jan 2025 06:26:09 +0000
ROA not after: Wed 19 Feb 2025 06:26:09 +0000
asID: 7018
IP address blocks: 156.238.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67746 (0x108a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 06:26:09 2025 GMT
Not After : Feb 19 06:26:09 2025 GMT
Subject: CN=6788a685-b581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3f:6c:d6:f9:e4:74:59:0c:3e:08:70:45:e7:
8a:ab:79:d0:3d:01:29:3e:d1:2f:55:27:39:d7:c7:
e3:98:8e:ca:ab:1f:29:f6:54:5e:ee:a3:f4:ef:11:
7e:0d:8b:c0:7f:c2:fa:bb:62:e0:02:0b:ae:7f:9d:
19:bc:1a:61:aa:c2:02:c0:55:96:71:4e:75:29:45:
05:7c:4c:49:6f:5b:f9:43:62:31:f8:ea:a2:fd:41:
92:95:f6:bb:1e:a8:4d:f4:88:6b:0b:72:90:5d:eb:
04:04:b5:d0:db:ef:25:52:6d:1b:20:a2:1f:99:8f:
52:ed:ec:5b:87:e1:54:ee:9d:43:80:de:22:61:9e:
9f:37:eb:a6:e8:3e:55:d8:86:f2:73:58:8f:51:d6:
65:fe:ce:6e:75:ea:3d:21:e2:6e:11:13:b0:ca:e1:
a4:1e:8b:42:bc:7e:34:40:82:7e:03:87:a0:37:0f:
20:6d:0f:5b:3b:af:9a:ac:25:9d:44:b7:26:dc:c5:
fd:33:e8:bf:04:e8:b5:48:fc:6b:fe:39:90:ae:ed:
87:97:ed:c5:17:eb:79:28:85:4a:57:5b:ab:5d:e0:
b3:76:b3:9a:4a:fb:63:62:f0:ea:4e:8a:19:83:69:
17:af:8a:05:31:19:a5:f1:9a:3f:d0:1b:ad:61:b5:
19:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:15:65:47:ED:DD:1D:74:AD:50:ED:A5:8D:92:20:9E:82:BE:D8:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C886992AD3D211EF8FBD2A85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.12.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:c3:a7:32:b9:fa:1f:9d:09:a0:59:1e:14:a2:10:42:46:ac:
08:70:d8:d9:7f:04:8c:72:bd:06:63:aa:c2:6f:d8:f5:69:59:
88:93:ba:38:18:3f:90:85:48:6d:87:b0:cc:44:8e:fb:02:72:
e8:d9:ad:66:22:f2:86:0a:97:fc:46:73:66:04:4f:f1:6e:24:
8c:52:0c:6d:7d:e1:48:01:d7:48:be:d9:32:87:ec:76:a9:0b:
8b:dd:b2:07:ba:75:9c:fd:52:0e:fc:7f:49:db:3d:f4:b6:9f:
ea:8b:88:db:c7:91:b8:27:a7:e0:df:0b:14:37:f3:84:7b:89:
7b:41:e3:97:f1:b7:6f:3e:7d:a1:e9:56:6f:03:3a:d0:29:fd:
a6:db:2b:95:b6:7b:81:0d:90:8a:af:3e:37:0d:4c:69:5e:b7:
81:c7:76:4b:aa:4e:55:85:94:1e:52:7a:16:90:25:97:de:74:
d7:b9:19:01:f0:ba:6a:f7:aa:f6:34:66:a1:48:9b:6b:66:70:
dd:d2:89:28:f3:80:67:3d:fa:b5:6e:f9:44:07:68:28:a3:79:
79:6b:53:27:55:90:5a:08:3a:88:03:d9:2f:8a:01:04:83:3a:
6e:67:25:5c:fc:96:02:6e:3b:56:5a:f6:c4:bd:73:9d:7a:06:
d9:c6:04:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:34:51 2025 by rpki-client