Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D26FF0B2DA5311EF91F0DB6D762E951A.roa
File: D26FF0B2DA5311EF91F0DB6D762E951A.roa (raw, json)
Hash identifier: ul1rOECK5CGEllvXDl92aIlhXOBruzci/oIXLsQ0i0I=
Subject key identifier: 23:51:27:68:CB:B1:74:CF:78:83:8D:FF:48:06:18:09:30:42:8C:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F6A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D26FF0B2DA5311EF91F0DB6D762E951A.roa
Signing time: Fri 24 Jan 2025 13:05:02 +0000
ROA not before: Fri 24 Jan 2025 13:04:58 +0000
ROA not after: Wed 26 Feb 2025 13:04:58 +0000
asID: 59187
IP address blocks: 156.238.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69482 (0x10f6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 13:04:58 2025 GMT
Not After : Feb 26 13:04:58 2025 GMT
Subject: CN=67938ffe-fa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:b1:00:6a:13:de:8a:41:cc:44:db:b5:ff:
ef:9c:be:26:eb:f2:7b:4f:17:e5:c0:33:0a:55:26:
20:97:d9:cb:93:68:75:6b:a8:5a:c6:46:1c:f4:49:
65:fc:37:e0:38:25:f7:8c:fd:f1:bb:e8:cc:07:36:
ef:c2:70:5c:07:ab:3c:34:a2:dc:22:08:c3:22:70:
01:cd:82:70:d6:26:2b:fc:9e:39:df:71:e5:a5:b7:
6a:d6:84:e0:4a:d7:81:a9:36:fd:fd:ff:38:06:09:
e0:f6:24:93:40:8e:ba:9f:3d:22:04:f7:78:6a:59:
48:dd:34:a8:80:8c:78:d6:a9:94:a6:86:68:e4:96:
24:5d:73:02:ad:08:66:a1:8e:33:2f:02:ea:e1:fe:
9b:38:bb:b8:c8:4c:fa:bf:75:f7:80:83:6e:b2:4d:
7f:10:46:31:2e:5a:61:8c:14:4d:9e:be:c5:c6:4a:
d5:ab:6e:86:c3:6d:1e:04:39:68:34:e2:2c:ca:46:
03:ba:cf:a5:a9:64:44:4c:01:15:14:0a:15:76:6e:
59:68:c7:dc:65:ab:35:f0:17:d5:a5:b5:95:86:8e:
37:cb:28:82:f0:61:67:c3:08:09:f7:11:e0:cf:1e:
77:01:c6:bd:29:74:bf:4c:dc:37:0b:1b:15:73:b4:
7a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:51:27:68:CB:B1:74:CF:78:83:8D:FF:48:06:18:09:30:42:8C:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D26FF0B2DA5311EF91F0DB6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.97.0/24
Signature Algorithm: sha256WithRSAEncryption
89:02:d7:f8:0e:c3:81:72:02:65:08:ee:ae:a7:86:83:87:ae:
13:b4:a6:f3:b5:dc:0a:17:75:1a:a3:ba:0d:04:58:a7:9b:9a:
4e:c7:76:3a:ca:fe:98:c0:31:97:c4:9e:83:05:cb:b1:cf:01:
c8:e2:1d:cc:97:c0:11:09:fe:49:ae:53:1f:6b:11:d8:74:1d:
21:d0:55:2e:29:89:bf:a8:26:d6:44:5e:d8:57:47:79:ee:9c:
12:fd:05:83:c0:ac:36:0a:57:1e:bd:8d:f1:65:b4:b3:b4:f7:
95:6f:ca:c9:26:18:ee:db:74:9c:2e:b4:c6:70:1c:8b:ea:76:
35:1f:e1:e7:3d:2d:c3:4b:c5:d4:dc:ae:8e:3d:0a:66:94:66:
21:ac:7a:db:37:c5:5c:ca:4f:66:10:7b:79:1c:57:69:bc:db:
19:97:96:58:30:fc:43:13:3f:d2:8d:f1:a7:2c:20:f1:a9:04:
f9:b8:c8:c3:17:5c:33:73:80:0d:a3:e2:12:99:d6:6f:e1:b6:
53:97:d1:35:b7:43:95:89:f9:38:34:a0:e3:67:31:cf:24:0f:
32:a5:d8:91:33:e7:d9:c5:b0:71:c6:9c:cb:30:0d:73:91:84:
7c:5c:ff:15:79:46:7e:89:78:67:b4:20:30:48:b4:06:34:af:
36:92:30:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:49:20 2025 by rpki-client