Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5FCB0DCDC1811EF81FFB25D762E951A.roa
File: D5FCB0DCDC1811EF81FFB25D762E951A.roa (raw, json)
Hash identifier: bQ6yUMqRsx4CelN/+mfVh9lLFN/p5oYOD17qS9Bnocw=
Subject key identifier: 28:42:2C:20:80:72:BC:30:EB:BF:38:43:97:52:E1:47:53:BF:7B:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01144A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5FCB0DCDC1811EF81FFB25D762E951A.roa
Signing time: Sun 26 Jan 2025 19:07:50 +0000
ROA not before: Sun 26 Jan 2025 19:07:46 +0000
ROA not after: Fri 07 Feb 2025 19:07:46 +0000
asID: 399077
IP address blocks: 156.248.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70730 (0x1144a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 19:07:46 2025 GMT
Not After : Feb 7 19:07:46 2025 GMT
Subject: CN=67968806-8c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:95:7c:5c:48:82:ff:4b:27:57:70:d1:af:
05:dd:66:0c:32:ce:19:2a:c0:35:66:07:66:d9:f0:
67:32:74:59:58:33:a9:eb:94:32:d6:05:1b:ff:78:
1d:c7:de:75:75:90:33:d5:02:db:62:94:3c:9e:a5:
2d:1a:fe:46:12:b0:57:60:61:e2:4c:bb:56:34:98:
4a:6d:1d:1c:58:b0:11:af:f6:c4:6b:73:ed:7b:ce:
53:5a:16:34:8c:71:24:1e:8c:ce:5e:8d:fe:1c:55:
78:6e:18:ae:0d:7d:d9:2e:01:e0:30:77:f8:f6:49:
06:8b:5b:31:31:b7:41:d6:eb:56:2a:ba:6f:ac:f0:
84:9d:04:35:08:d3:d7:51:a0:f9:a4:ec:67:b1:97:
17:17:45:50:e3:d2:80:6f:27:37:c6:49:2d:fc:30:
9d:a8:75:8d:4a:c0:e3:00:ce:18:e5:5d:20:4c:46:
c6:12:0e:e8:10:0f:0d:42:bd:3a:87:28:7c:01:6f:
ea:29:3b:01:83:6f:f0:4d:8e:97:93:55:38:9a:19:
96:94:43:79:78:17:62:3e:31:a0:24:bb:62:e5:fd:
aa:34:1f:e5:32:b1:05:ae:a9:8b:bd:60:08:33:3a:
11:b9:19:34:0a:27:e7:b8:cd:da:ba:7c:a3:41:b9:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:42:2C:20:80:72:BC:30:EB:BF:38:43:97:52:E1:47:53:BF:7B:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5FCB0DCDC1811EF81FFB25D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.76.0/24
Signature Algorithm: sha256WithRSAEncryption
37:3e:c4:b7:cf:32:ec:b8:c0:00:4d:c4:5b:ba:ec:48:75:b9:
04:bb:1f:f5:bc:1b:e5:ac:ff:8a:a6:fb:49:ca:9d:60:4f:83:
fc:67:77:58:6d:ce:7e:42:c5:cd:3d:14:5a:ce:17:c0:39:e6:
76:73:ed:25:c2:08:80:e3:ff:59:e5:4d:b6:cc:ac:98:4d:c9:
0f:bd:cc:54:8e:e8:1f:aa:45:0c:30:7e:f2:c7:06:24:39:67:
d2:b4:f6:db:0d:ee:39:90:50:81:88:62:82:4c:e1:63:61:fc:
39:b0:aa:32:37:96:2d:64:9c:de:51:b9:f3:29:0e:e2:51:7a:
04:99:42:ab:fe:33:3b:90:4b:cd:e3:35:94:12:c9:b9:23:40:
55:62:e6:1a:e2:17:95:2f:7b:7a:0e:73:24:3c:a7:d4:d6:8d:
26:46:ae:05:40:87:0a:61:1a:83:4d:71:f9:19:c8:d4:ac:e5:
f2:ef:6e:1d:84:ed:6f:2d:a6:cf:ce:18:5b:b7:58:62:30:0a:
e2:67:44:9e:77:0f:dd:d7:fb:e6:1c:5c:dc:de:ad:bb:de:14:
b1:23:43:98:bd:b8:1d:d5:37:4e:63:97:b8:14:bf:ed:8a:8f:
62:3f:4a:e0:e6:16:ea:55:9e:5c:fb:06:e1:fc:2a:d0:ce:5c:
d6:1c:34:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:47 2025 by rpki-client