Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E01B7D26D70611EF82A3177B762E951A.roa
File: E01B7D26D70611EF82A3177B762E951A.roa (raw, json)
Hash identifier: f9e5A+RrhAIv0vd1mluCuoZSMyE0MOe3oh9tOI4Njso=
Subject key identifier: C0:A1:67:FD:42:88:5D:CA:38:DF:8B:A6:D6:FD:BC:42:78:55:3F:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010BEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E01B7D26D70611EF82A3177B762E951A.roa
Signing time: Mon 20 Jan 2025 08:16:40 +0000
ROA not before: Mon 20 Jan 2025 08:16:37 +0000
ROA not after: Sat 01 Feb 2025 08:16:37 +0000
asID: 44559
IP address blocks: 156.246.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68587 (0x10beb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 20 08:16:37 2025 GMT
Not After : Feb 1 08:16:37 2025 GMT
Subject: CN=678e0668-3f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:db:23:7c:99:54:6b:f7:51:4e:36:c8:dd:
8b:da:4a:23:8e:b8:82:b3:89:74:34:86:65:59:8c:
07:75:e7:d2:3c:62:f7:78:30:60:9e:58:a9:b4:b8:
e4:a6:c4:74:9f:6a:dc:4c:61:7b:98:a5:98:a0:71:
0d:d0:7d:f5:13:4d:2a:a6:03:15:8b:b0:9f:05:42:
74:a3:1e:65:a6:10:de:5b:d7:6e:d9:21:e2:78:ee:
e9:4e:a2:a6:a1:4e:b9:7a:25:cd:2b:58:33:bd:3c:
c3:9a:cd:83:98:d8:44:27:c2:cc:e0:67:ea:c5:0f:
62:2a:2f:42:a6:96:9d:29:6a:45:1e:4c:9f:04:7a:
27:75:73:f5:6d:76:3a:10:a1:d5:05:ad:11:b1:c1:
e4:0a:07:b7:71:9a:f2:73:8e:71:6b:fa:e5:11:7c:
5b:79:f8:d0:40:0a:7e:16:7f:88:70:68:11:d9:cc:
d4:df:14:dd:fa:a4:b2:7f:81:9c:d6:fc:6b:ec:ce:
77:9f:ed:be:cb:2a:00:4a:b6:10:c0:8f:2f:a3:2d:
90:a0:2d:b4:30:f3:eb:28:c9:1d:50:0e:86:0c:38:
b7:63:3d:f9:bc:92:89:2c:7f:09:54:86:1c:ad:b0:
b6:04:a8:8a:6e:50:e0:d7:2c:5d:16:b8:b6:b4:cd:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A1:67:FD:42:88:5D:CA:38:DF:8B:A6:D6:FD:BC:42:78:55:3F:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E01B7D26D70611EF82A3177B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.184.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:24:2d:2b:42:66:0f:74:ae:6d:54:5b:ef:fa:e5:52:74:49:
d7:6c:4b:9e:86:ad:ea:88:8a:4a:b3:76:c7:d7:6d:31:0c:24:
d2:c2:3c:cf:e0:03:0c:fe:2b:53:b2:c0:5b:2e:47:e7:31:9d:
95:04:e4:12:70:df:6c:02:ab:76:1d:ee:ce:f6:73:47:67:4e:
22:f4:16:de:d9:cb:c4:39:fa:16:98:59:35:82:d2:f1:ec:6d:
08:a6:de:59:d7:5c:c7:35:cc:f1:e4:e9:31:c8:0f:25:b7:be:
d7:bf:24:54:7a:fb:7a:58:29:59:cf:99:30:ae:de:55:44:15:
02:32:8a:2b:e0:ea:b4:f7:2d:a4:55:53:d6:77:c2:89:1f:fe:
68:f9:8f:56:69:6d:72:2c:eb:43:15:c3:24:61:e8:5a:14:6f:
3d:b2:66:63:63:5a:6b:c9:50:8e:37:68:9d:e2:eb:1c:97:23:
ae:22:57:4c:e8:9e:80:70:9f:ec:5b:8a:71:ab:e2:f3:e2:59:
cf:68:88:86:3c:11:13:c2:eb:12:63:fe:05:9e:9c:3f:b7:81:
cd:22:c8:09:2f:d8:da:5a:b3:d4:24:c9:cf:b4:6d:7b:7c:d3:
86:2f:55:52:3b:f9:cd:ca:65:2c:cd:50:6c:ad:4e:be:32:5e:
de:6d:c1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:21:41 2025 by rpki-client