Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D14EFC1ADA7F11EF87909794762E951A.roa
File: D14EFC1ADA7F11EF87909794762E951A.roa (raw, json)
Hash identifier: 8SybAAcT5T2AEQk75egHtVs22egUj1nd0WKwJhVOLLU=
Subject key identifier: FA:B9:0D:36:66:6F:69:9B:74:7C:CB:1B:BF:4E:F9:DB:EA:A5:BF:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011008
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D14EFC1ADA7F11EF87909794762E951A.roa
Signing time: Fri 24 Jan 2025 18:19:58 +0000
ROA not before: Fri 24 Jan 2025 18:19:54 +0000
ROA not after: Tue 25 Feb 2025 18:19:54 +0000
asID: 44559
IP address blocks: 156.246.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69640 (0x11008)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 18:19:54 2025 GMT
Not After : Feb 25 18:19:54 2025 GMT
Subject: CN=6793d9ce-0dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8d:ac:bb:78:52:39:d6:9d:19:82:9c:f8:1d:
ac:16:68:35:76:0b:d2:d0:97:6f:67:71:fb:72:53:
e0:17:63:1b:31:cb:58:b3:95:67:33:96:f1:af:1a:
ea:8e:71:e6:b6:4b:d9:2a:ad:9e:d4:ba:45:0d:86:
da:95:ff:d0:ac:d2:78:e5:57:1c:8c:98:c5:49:8c:
ca:65:23:6d:04:3a:1e:0b:eb:65:bd:fd:1c:c0:43:
95:5a:61:84:04:7c:c0:a1:ff:a2:ad:7f:da:80:fa:
7f:ff:b7:e2:4f:ad:9a:7f:26:f9:c3:bc:a0:e3:29:
a4:fe:3a:e1:39:4b:61:79:9f:33:4d:ad:fe:86:2d:
cb:19:e3:57:d9:a5:e0:e5:23:be:6b:02:be:80:91:
06:21:35:e8:43:b4:56:8c:5c:4d:5b:6d:ba:39:0f:
4e:94:df:34:d4:0b:f5:39:c5:fc:e2:40:79:e3:94:
58:9e:12:4b:43:d6:36:67:d3:3f:dc:f8:6a:55:f6:
77:2b:0a:0e:65:eb:bb:47:35:3b:85:1e:8a:20:91:
e5:2d:43:62:3e:4e:69:c3:d8:c7:fc:6a:7e:b6:42:
8a:fe:1d:fb:27:76:6b:fc:87:c4:7f:b4:5e:f5:5c:
0c:ee:08:39:b4:b2:3a:96:10:1e:b9:bd:10:0b:ec:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B9:0D:36:66:6F:69:9B:74:7C:CB:1B:BF:4E:F9:DB:EA:A5:BF:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D14EFC1ADA7F11EF87909794762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.166.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:5f:f8:a8:ce:b1:6e:e0:a8:53:5e:8f:e8:ee:59:91:74:64:
7d:d7:01:f9:22:dd:e3:84:5b:c5:ea:42:c6:c1:6d:88:3e:af:
24:c2:b4:f9:71:28:58:93:6c:5f:a1:00:7f:63:5e:76:f7:4a:
65:92:99:15:8f:3c:19:59:84:3f:c9:b4:a8:d0:59:7f:1f:01:
44:5a:a4:14:f4:65:d1:60:86:99:c0:91:fc:e8:7f:74:58:5a:
48:33:fe:32:ef:cb:42:3f:96:a0:34:f5:ba:2a:6c:81:e5:99:
05:27:5f:38:d5:bc:b3:4e:82:73:9e:4e:0f:1a:f8:a8:75:53:
84:1d:6f:d6:84:43:24:39:c6:5e:36:ab:1a:3c:ca:60:4a:d9:
db:73:40:6f:aa:f4:da:0d:23:d4:4f:26:50:35:76:70:45:5c:
78:ec:09:52:8e:4c:b7:e4:6c:34:6b:9b:6b:f6:29:7f:43:ab:
f1:52:00:ed:dd:f7:75:fb:ae:2c:7d:86:e4:e3:0a:20:25:f8:
12:d3:d6:ff:64:13:b3:fe:05:3e:3d:26:00:06:01:63:66:dd:
88:3d:45:8a:e0:fb:dd:c4:f1:5d:f5:8b:7e:f7:26:2d:3a:ee:
37:6d:d2:7d:0a:64:da:ad:4f:83:70:bb:0d:6a:a0:5a:f5:ac:
81:7e:96:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:09 2025 by rpki-client