Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D459D2B2DC0611EF814AF964762E951A.roa
File: D459D2B2DC0611EF814AF964762E951A.roa (raw, json)
Hash identifier: yUHdQmBWxC2EgHpObF/kyAUwmZs7yB7bxC7b6wA3vZM=
Subject key identifier: 68:B0:D0:EE:47:9A:34:CD:20:76:C9:18:04:6C:AE:39:4D:30:78:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011418
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D459D2B2DC0611EF814AF964762E951A.roa
Signing time: Sun 26 Jan 2025 16:58:56 +0000
ROA not before: Sun 26 Jan 2025 16:58:53 +0000
ROA not after: Sun 23 Mar 2025 16:58:53 +0000
asID: 138915
IP address blocks: 156.227.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70680 (0x11418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 16:58:53 2025 GMT
Not After : Mar 23 16:58:53 2025 GMT
Subject: CN=679669d0-aa35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:50:cf:65:f9:f6:b5:67:fd:db:e7:b6:73:
2b:9f:79:ef:56:5b:6f:e5:da:a0:4d:97:47:b0:f8:
47:07:6a:a5:f3:9a:6a:90:09:6c:c0:5a:41:d9:87:
63:f0:13:00:d9:16:a2:68:83:1a:a1:35:fe:51:2f:
1e:a9:01:81:a0:88:f1:37:d7:9c:63:1a:61:3a:3d:
88:be:02:a1:42:ba:bf:d9:20:54:6d:8f:96:16:9c:
0e:78:9c:3a:96:5f:f1:9c:ba:60:c3:6e:ca:89:26:
67:7d:3d:bd:df:b8:fd:63:b7:2e:ed:03:d0:ff:69:
92:d7:62:67:26:b2:a8:1f:0e:82:5a:03:e7:9e:23:
12:8b:ce:36:c2:5f:34:bb:44:7e:e7:ea:98:8e:4c:
a0:b0:61:41:1d:8c:b4:27:86:55:02:18:b8:27:7f:
bf:2f:8a:8e:2f:a4:1d:bf:fa:71:99:07:1c:60:7a:
11:df:4a:4e:5d:80:47:ce:2a:51:19:50:78:b1:b8:
04:f6:71:23:34:37:52:42:30:1f:ff:40:ab:4b:28:
24:0f:d6:79:e1:f5:0a:1e:92:f5:14:d8:50:f2:80:
6e:9e:e8:3a:34:a5:e6:34:ef:ab:cc:37:2a:4a:d4:
a8:b2:76:11:44:a1:45:a4:51:d6:62:14:61:f0:26:
59:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B0:D0:EE:47:9A:34:CD:20:76:C9:18:04:6C:AE:39:4D:30:78:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D459D2B2DC0611EF814AF964762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.193.0/24
Signature Algorithm: sha256WithRSAEncryption
65:93:48:aa:54:50:63:a8:26:fe:73:81:c7:64:09:a6:53:fc:
a2:30:8f:1a:34:d8:05:a3:77:cb:65:0b:a2:5c:f2:7d:83:a4:
9a:cf:84:2d:df:c3:c0:65:c0:9a:2b:34:95:fd:5b:b5:8e:66:
ba:d1:1d:b4:41:a7:98:85:c5:4f:d3:79:04:98:b7:54:1c:15:
07:6e:3e:b4:8e:e4:6c:dd:14:7d:96:8b:9a:1f:74:05:0d:97:
20:98:10:98:dd:de:03:57:1a:ac:17:02:a9:b4:ec:32:c8:b6:
b9:62:20:cd:50:d3:c9:1f:a8:d4:3a:fd:54:80:6f:c7:a7:3d:
39:1a:23:ac:cf:4e:75:f5:5b:50:b1:cd:7f:e6:e3:ca:1b:bc:
d8:ed:1e:a7:e6:87:cc:35:57:16:41:fe:c7:81:33:45:97:3e:
da:7d:8d:f6:bb:21:01:f9:bf:eb:6d:cd:51:c4:7f:91:e9:32:
73:49:02:c5:29:51:3c:1e:43:9d:36:86:9b:26:86:61:6c:0c:
9f:8b:9a:d8:cb:71:ef:9c:9d:cb:d1:e8:31:f6:a1:48:c0:54:
82:93:72:84:95:8b:ee:36:f8:06:13:35:aa:ef:3a:ca:f5:f4:
73:a7:95:a0:f9:c6:0d:87:8b:2d:7d:85:45:4e:f5:05:8b:0b:
bd:dd:02:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:07:27 2025 by rpki-client