Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9A0B788D70911EF8DEEDC8E762E951A.roa
File: D9A0B788D70911EF8DEEDC8E762E951A.roa (raw, json)
Hash identifier: HEwr52sOwAJPIoGsvVkNRPr50rYZfvQSOYlVRry7SAs=
Subject key identifier: CE:3F:1E:83:5C:3C:55:65:8A:0A:AB:A8:10:0C:9C:8D:79:8F:E5:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010BFF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9A0B788D70911EF8DEEDC8E762E951A.roa
Signing time: Mon 20 Jan 2025 08:37:58 +0000
ROA not before: Mon 20 Jan 2025 08:37:54 +0000
ROA not after: Sat 01 Feb 2025 08:37:54 +0000
asID: 44559
IP address blocks: 156.246.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68607 (0x10bff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 08:37:54 2025 GMT
Not After : Feb 1 08:37:54 2025 GMT
Subject: CN=678e0b66-d83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:ba:40:b1:af:00:01:13:83:77:ea:28:c7:
b9:76:cf:ed:4b:11:8e:f2:34:fd:7d:ee:df:48:29:
b9:be:1e:5b:95:c2:a7:5b:6b:1e:36:d0:f9:7f:66:
ab:d2:4a:1b:48:46:21:25:13:f5:43:f4:ce:eb:6a:
3f:73:c8:72:95:a5:6e:0c:eb:35:dc:9b:7c:43:b5:
a0:d4:77:cb:53:a0:31:d7:00:96:41:bb:b2:ef:2a:
9b:9e:89:27:2f:00:f8:9c:60:35:03:70:74:34:06:
bb:d0:97:cd:b0:46:38:ca:ce:fa:90:54:ea:ef:2c:
91:c1:ab:1d:75:f0:41:70:5e:1f:8b:5c:ec:9a:ab:
68:f8:6a:cb:b8:cc:5e:50:46:d5:33:0c:c0:a6:d0:
7f:85:05:42:a5:a3:16:e9:1d:53:23:bb:cd:76:a2:
ef:72:78:82:05:80:40:ca:ea:5a:69:01:42:a9:ea:
d9:91:14:58:5b:0c:36:6c:89:09:8e:9a:5a:d4:c2:
9c:60:21:76:4c:fd:f3:03:a3:41:e9:1d:20:bd:56:
74:ce:7c:0d:48:7b:79:b1:73:43:cd:74:f5:de:d2:
7f:cd:d2:7b:c9:60:7e:ab:96:ca:33:23:0c:a7:61:
36:0e:19:28:5e:f1:4e:15:ff:67:48:de:9f:82:7c:
7a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3F:1E:83:5C:3C:55:65:8A:0A:AB:A8:10:0C:9C:8D:79:8F:E5:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9A0B788D70911EF8DEEDC8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.160.0/24
Signature Algorithm: sha256WithRSAEncryption
53:72:62:45:09:98:33:04:78:c3:b7:04:38:e6:48:da:b7:48:
b9:41:70:ba:62:3e:00:62:5a:b1:c9:a6:ac:b9:c4:2c:18:84:
15:13:21:c4:7f:ea:a9:d6:5a:3a:b2:2f:0e:46:eb:4b:93:6f:
a1:35:bd:4c:71:00:f8:0f:7d:b8:82:1e:fa:5f:e7:e6:95:9f:
a5:ed:0d:d4:c1:56:f6:87:ef:0d:07:b7:47:ae:7f:f4:22:47:
91:4b:f9:74:c8:b1:b2:b3:eb:5d:31:66:a8:4d:4e:3f:90:bf:
b2:2c:53:55:68:43:90:ac:00:a2:d4:b1:2d:b6:c7:ca:7b:54:
71:58:6e:c4:e0:a3:80:f6:52:4e:43:52:36:10:33:58:7e:bf:
ab:52:5a:8c:11:f2:67:9c:89:fd:b5:06:43:27:6b:d8:c3:69:
eb:f0:6b:a5:45:1e:50:e4:eb:73:24:f6:67:24:eb:0c:ca:a0:
e8:93:1f:50:cb:fd:51:68:63:ec:7e:2e:d4:22:ea:7e:04:3c:
e0:2f:b4:8a:91:af:48:db:ef:8b:51:4f:78:91:e6:fe:97:79:
36:21:38:52:e9:88:79:42:c7:1b:42:e9:1c:b1:a3:92:fc:2d:
a7:5c:55:3c:71:8c:55:2b:31:af:6a:8c:6c:da:49:85:41:86:
bb:86:7d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:20:56 2025 by rpki-client