Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC4875D8DCAF11EF9F00C45A762E951A.roa
File: DC4875D8DCAF11EF9F00C45A762E951A.roa (raw, json)
Hash identifier: OSdHsIOiiiTHfBzBCRDEvYKRzpaO1kfpDSY6qlGR6oA=
Subject key identifier: E3:80:45:84:89:60:12:69:7A:6B:50:22:35:F3:BA:0E:A0:70:70:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0114FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC4875D8DCAF11EF9F00C45A762E951A.roa
Signing time: Mon 27 Jan 2025 13:08:54 +0000
ROA not before: Mon 27 Jan 2025 13:08:51 +0000
ROA not after: Sat 08 Feb 2025 13:08:51 +0000
asID: 22773
IP address blocks: 156.235.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70909 (0x114fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 13:08:51 2025 GMT
Not After : Feb 8 13:08:51 2025 GMT
Subject: CN=67978566-22a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:14:ad:8f:f1:a0:7c:17:fb:4e:7f:d7:73:
5a:7c:de:52:5c:69:b4:14:2d:81:f5:08:06:02:b3:
03:44:8c:49:11:1f:88:f3:ce:4c:8d:45:68:83:b4:
a1:06:c6:90:ab:28:00:f4:e9:19:b1:4c:5b:7b:36:
a3:2e:e6:4a:4d:1d:c9:92:c5:28:93:1c:54:85:76:
6f:de:7d:34:f5:be:bb:5e:24:40:d9:cd:c7:3b:7e:
1e:1f:8e:89:1b:44:65:3d:b7:47:b5:87:07:13:6c:
e4:15:eb:d6:b8:50:59:4a:52:cb:72:58:7e:61:0b:
95:a4:a1:93:f8:6a:79:ed:23:2a:9c:19:e5:20:4a:
da:d1:13:7d:66:51:bc:93:5e:5d:b9:c9:2a:dd:3d:
b0:6b:24:85:56:cb:d2:79:6e:24:d9:43:04:c6:60:
5b:63:b5:86:27:a3:0a:fa:d4:b5:9b:fd:bb:05:e7:
de:7e:00:bc:bb:65:3a:23:d8:67:46:b8:b6:d4:be:
ea:2e:0a:d3:df:55:d5:56:bc:bd:38:12:9e:b7:6d:
03:09:b7:a2:23:be:02:87:88:c0:bf:99:fa:33:d7:
69:61:84:2f:e5:d1:97:67:3d:d7:da:b8:d8:b2:45:
58:0e:98:be:cd:01:0a:99:55:b7:4b:af:ed:06:33:
63:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:80:45:84:89:60:12:69:7A:6B:50:22:35:F3:BA:0E:A0:70:70:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC4875D8DCAF11EF9F00C45A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.54.0/24
Signature Algorithm: sha256WithRSAEncryption
18:47:1b:cd:6a:b7:fb:bb:85:d3:47:54:53:1f:e6:de:4c:42:
d6:e1:39:b2:14:ae:87:73:73:d0:bd:0a:82:15:99:e5:0b:93:
6d:53:b0:03:2d:de:4c:27:d1:92:14:6d:ec:c9:9e:03:d7:4a:
43:07:28:bf:89:f6:78:9e:18:f6:0b:ab:16:3f:49:7f:53:c2:
cc:c9:16:97:e0:89:01:96:36:03:ef:25:f0:e2:fd:6a:12:53:
15:28:29:e4:57:1e:77:5b:f7:2a:18:ed:50:f8:e7:22:aa:1f:
73:ce:f1:60:77:8a:f6:4c:d0:f1:85:0f:4e:9e:60:58:86:5d:
27:4a:62:dc:35:45:c3:d2:78:dc:e3:3a:9a:6f:79:32:f5:d6:
f6:b3:91:2b:06:fc:96:89:59:db:52:41:6e:f1:a9:1b:48:a4:
b5:45:10:0a:40:b8:0e:6c:59:8c:98:be:79:dc:e4:3e:a9:53:
39:05:34:6f:54:2f:a6:65:b9:ac:e9:ad:74:ae:b9:57:cb:ec:
2a:61:f3:6d:48:2e:7e:aa:ea:fb:f8:c6:55:ad:1d:21:0c:c3:
c1:10:4c:2f:f5:9c:c1:1b:e8:eb:bd:56:42:80:78:3a:ba:b7:
e5:5d:64:1a:db:32:b9:9b:a5:61:ff:56:d1:88:31:73:d6:7f:
1d:d1:76:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:34:36 2025 by rpki-client