Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7229A9ED7FE11EFA8A87351762E951A.roa
File: D7229A9ED7FE11EFA8A87351762E951A.roa (raw, json)
Hash identifier: eHmgBE4RLqhwL0oKF8Nllcfb6DVQfNwni36AUzYC67M=
Subject key identifier: E3:C4:B2:D2:B9:6E:A6:03:B0:44:C9:72:99:02:FB:A4:C5:46:C2:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DEE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7229A9ED7FE11EFA8A87351762E951A.roa
Signing time: Tue 21 Jan 2025 13:51:40 +0000
ROA not before: Tue 21 Jan 2025 13:51:37 +0000
ROA not after: Sat 01 Feb 2025 13:51:37 +0000
asID: 48031
IP address blocks: 156.246.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69102 (0x10dee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:51:37 2025 GMT
Not After : Feb 1 13:51:37 2025 GMT
Subject: CN=678fa66c-4ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:25:87:b3:22:fb:b1:f8:c9:c6:87:5b:30:
94:6c:7a:28:5c:4f:b7:f4:f5:21:6c:b0:74:fc:27:
66:f4:4d:5f:ec:53:c6:0b:84:5f:1f:76:07:15:75:
be:67:cf:d0:0a:63:23:b7:ed:b9:9e:c1:a3:ef:a0:
e1:ac:55:b9:f6:4b:6e:1e:7e:8a:05:49:30:7c:95:
2d:4b:1d:fd:54:71:9b:13:02:13:af:59:5c:d4:6c:
6d:c6:e2:a6:1f:18:7d:f3:01:6b:e9:19:3c:95:59:
a7:ef:13:d7:e8:0f:ef:92:17:d7:b7:9c:f9:b1:68:
9f:f9:fd:fe:42:88:29:c7:53:6f:e6:18:b3:41:99:
55:93:60:79:0c:46:9c:b2:71:ab:d8:91:ec:9e:46:
df:e1:e7:fa:a4:03:75:1e:2a:3f:91:69:0e:53:cd:
dd:25:68:55:7e:55:43:5c:75:0e:28:89:fb:3a:c9:
73:79:79:73:86:06:08:b8:de:e5:bd:a9:2a:b4:5e:
98:28:cd:01:7d:d8:50:6f:61:70:03:4c:ff:ea:5c:
f1:0b:09:98:fd:e2:14:2b:71:32:49:95:4d:04:dd:
e2:ae:e0:21:1d:dd:2e:ba:07:e2:b1:2d:35:12:08:
a8:f2:5b:f3:60:51:5b:39:79:36:ae:d7:77:8d:81:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C4:B2:D2:B9:6E:A6:03:B0:44:C9:72:99:02:FB:A4:C5:46:C2:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7229A9ED7FE11EFA8A87351762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:b6:8b:a5:e4:a7:7c:4f:87:92:f6:5c:dd:5d:88:91:9b:fe:
2f:de:5a:8b:e4:b5:a8:3e:7a:fd:1f:b8:bc:c8:c3:f6:b5:62:
4e:c8:b0:fb:8e:36:6a:35:d7:f7:1f:37:ff:e8:5b:0a:ad:39:
59:43:76:9b:88:c5:b9:c4:10:85:1a:ca:c6:e7:f0:1a:30:44:
71:c8:42:ed:8c:5b:91:6f:0b:06:0a:6c:58:fd:ab:b1:81:60:
b4:c5:a2:dc:11:12:85:04:21:7d:c8:5d:cc:74:78:9d:8f:fe:
f9:05:18:9d:5d:7f:da:98:08:ed:87:f4:46:8e:78:04:1b:55:
46:42:15:75:f2:f4:b9:fa:c9:ab:bd:34:ed:0c:ad:5f:27:ec:
76:38:02:53:55:dd:b9:bc:6f:b4:b6:ba:56:26:11:07:f5:60:
8e:5f:aa:9b:74:ec:ea:0a:9d:8c:97:77:9b:3e:89:da:0b:19:
3a:3f:72:bc:db:98:6f:48:59:28:ef:04:47:9a:4a:87:09:eb:
69:db:a6:1f:b2:26:51:e2:b4:ba:48:44:80:60:e4:da:ef:bd:
56:38:e4:8d:46:a5:93:d3:d1:cf:69:c2:b5:65:b5:01:b9:87:
41:74:c1:9e:70:e1:cd:09:91:c6:9d:a6:7d:3e:27:ae:39:ef:
b2:7b:dc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:05:14 2025 by rpki-client