Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCF6B62ADA4E11EF8245024C762E951A.roa
File: CCF6B62ADA4E11EF8245024C762E951A.roa (raw, json)
Hash identifier: pMX0yJpHEX57J8fXJuxvGCDINBJAY6BU7spNOWOj1fw=
Subject key identifier: 7C:08:D3:22:B8:74:3C:25:E7:E1:3D:88:87:C5:62:E4:7E:9E:CB:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F60
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCF6B62ADA4E11EF8245024C762E951A.roa
Signing time: Fri 24 Jan 2025 12:29:05 +0000
ROA not before: Fri 24 Jan 2025 12:29:02 +0000
ROA not after: Thu 27 Feb 2025 12:29:02 +0000
asID: 5068
IP address blocks: 156.224.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69472 (0x10f60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 12:29:02 2025 GMT
Not After : Feb 27 12:29:02 2025 GMT
Subject: CN=67938791-94af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9b:6b:b1:08:bc:81:cb:14:5b:c4:30:7d:25:
89:07:6e:24:36:83:48:9f:76:e2:c0:98:ff:19:56:
90:28:c1:b8:92:7f:e3:14:48:e3:07:fc:cc:ea:0e:
66:67:8d:77:bf:e5:17:d4:df:b8:d7:9a:ea:de:d3:
e6:03:3a:85:c7:ab:1b:cb:1a:87:48:1c:16:08:60:
34:d2:7f:9d:56:6a:b4:9f:a5:ff:fe:c6:b3:a7:18:
68:7d:b5:30:df:8d:5e:6d:d5:96:66:ee:01:26:3e:
9e:e0:80:5a:4f:c3:cf:7a:63:27:8b:34:35:67:38:
b1:e7:7d:83:95:5e:2c:b4:8e:54:78:81:a7:47:e0:
80:96:3e:51:0b:76:0c:be:ad:44:a1:94:99:a7:98:
16:c3:1b:8c:1c:10:cb:a3:de:30:d8:a8:61:30:64:
c9:42:5a:7d:1a:d6:fa:cc:4a:b6:f6:f0:b9:c3:0a:
a6:d4:43:a6:28:f1:d1:d5:a4:67:57:ba:a2:c2:54:
11:fb:b8:a2:80:90:d5:09:2a:7b:d9:4a:a0:52:0d:
09:24:cf:e2:2a:36:22:2c:57:23:8b:28:8c:11:dd:
3d:4c:79:38:23:12:a9:0a:2a:50:1a:b1:2f:64:7b:
97:2a:8c:15:f3:6f:2a:9f:01:79:c8:6c:9b:64:fd:
d6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:08:D3:22:B8:74:3C:25:E7:E1:3D:88:87:C5:62:E4:7E:9E:CB:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCF6B62ADA4E11EF8245024C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.96.0/19
Signature Algorithm: sha256WithRSAEncryption
53:74:65:51:5f:70:90:90:a5:1e:ea:41:60:f4:10:6e:db:cf:
a3:9f:79:62:3d:6f:e6:64:1f:d0:8c:c7:15:92:35:f9:59:83:
8a:cb:f4:a4:05:20:fc:77:8d:f7:ec:5b:27:48:98:a3:31:3d:
2b:b9:76:39:09:e0:44:14:05:e9:67:70:0c:6e:91:d3:b1:88:
2f:bd:19:bf:c4:b3:95:ad:bc:8d:d9:05:cf:94:c1:f2:ab:d3:
2a:9e:0c:1f:73:6a:53:88:8a:81:c6:71:59:d6:89:7c:4a:d5:
ab:d5:ec:01:83:7a:19:d4:45:e8:e2:44:d7:4e:59:52:32:32:
e4:c3:54:3a:a1:08:37:81:5c:3d:d6:9e:e0:ad:c8:81:54:a0:
15:fb:fe:3f:9f:09:8b:72:4e:85:2f:af:a9:7a:05:94:29:44:
1e:c5:87:72:58:f1:52:49:86:85:5b:70:88:a9:59:f6:54:26:
ea:22:af:07:49:70:24:b1:5c:21:81:c5:14:db:0d:af:c4:17:
a0:0e:d5:6a:0e:23:7d:3c:76:1a:a0:9e:27:1e:c6:46:33:70:
7a:28:b4:03:13:2e:c0:b2:6b:d5:ec:9d:72:d0:61:23:a6:47:
8f:a2:c7:a1:11:71:37:9c:cf:d9:91:6c:ad:cb:2c:be:a0:9f:
3a:cc:2e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:35:24 2025 by rpki-client