Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0356304DAF711EFBBA32248762E951A.roa
File: E0356304DAF711EFBBA32248762E951A.roa (raw, json)
Hash identifier: FCWEhypRd/0XGmC9WEweo3E3ZCb+Xz5YQgNy75MCT98=
Subject key identifier: F0:B3:35:25:C4:3F:AD:01:EC:42:CC:5A:58:BD:A8:D0:97:EA:BE:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011187
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0356304DAF711EFBBA32248762E951A.roa
Signing time: Sat 25 Jan 2025 08:39:23 +0000
ROA not before: Sat 25 Jan 2025 08:39:19 +0000
ROA not after: Sun 23 Feb 2025 08:39:19 +0000
asID: 44559
IP address blocks: 156.246.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70023 (0x11187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 08:39:19 2025 GMT
Not After : Feb 23 08:39:19 2025 GMT
Subject: CN=6794a33a-2462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:2e:47:29:89:b5:08:d5:be:3b:c8:99:d4:
90:58:ef:2f:c6:ee:4d:90:b4:f4:c6:13:87:8a:54:
9b:f5:6a:19:65:14:90:b8:d9:ff:96:89:2f:78:3e:
4a:fc:83:75:34:6b:ac:48:1d:c4:8c:97:b9:e0:1f:
a2:f2:ce:b5:4d:0e:b2:41:dc:22:13:a7:90:46:8b:
a4:58:c7:ec:c1:f7:95:5e:57:d2:af:dc:6a:90:e3:
ee:ca:7c:71:c1:20:07:4f:ab:95:1e:17:c1:1c:71:
ec:fc:9e:7d:a5:da:82:2f:7d:b2:6c:69:d6:67:d2:
0a:94:f0:d3:f1:8f:31:d2:54:b8:a1:66:41:b2:42:
23:f5:9b:e7:e7:ce:da:e0:74:79:7b:74:01:22:f3:
e4:8c:ac:d2:ed:20:fc:5a:e9:fd:d9:ad:8d:b8:a0:
48:33:ac:5d:88:bf:5f:c2:62:7c:0d:32:9c:fa:c1:
d7:68:d8:8c:22:54:c9:c7:4d:1e:d9:c1:8a:dd:c3:
e0:37:88:42:c8:c0:4b:e4:9e:22:cf:b4:bd:72:96:
6a:d0:64:79:6d:50:f3:1f:67:dd:b9:2f:83:ec:54:
fc:b7:35:5d:fc:96:41:c3:f0:7c:04:b1:86:9a:b4:
9f:d7:0d:98:24:5b:73:79:ca:0d:1e:33:c5:ae:00:
9c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B3:35:25:C4:3F:AD:01:EC:42:CC:5A:58:BD:A8:D0:97:EA:BE:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0356304DAF711EFBBA32248762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.246.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a3:d3:36:c1:97:fe:f1:f8:bb:01:5a:3e:4a:67:ed:d6:cd:
f9:2f:81:36:20:36:e7:49:e1:01:81:fc:30:eb:59:9f:26:80:
5b:77:f9:60:fd:ea:ba:cf:1b:ca:97:66:07:74:81:d6:78:30:
21:4f:89:28:29:63:ad:4d:47:60:2a:a6:83:75:e0:35:25:e3:
1b:52:e2:e9:2a:fe:78:a9:8f:00:2e:30:05:07:a6:2b:7c:6d:
83:aa:99:02:59:8f:35:f9:f3:cb:52:ee:13:8f:90:4e:c4:fc:
52:df:3a:f4:68:90:03:5f:b5:9f:85:bf:e1:d1:8f:ff:e8:88:
6e:2a:9d:21:d3:0f:73:eb:c2:4e:b2:2c:f5:89:65:22:fa:39:
ad:dd:f0:41:69:89:bc:cc:8f:e5:de:08:e1:be:76:ed:ba:3c:
96:47:09:cd:b4:00:eb:ba:37:1e:6a:9d:0c:df:b9:30:95:7a:
d9:27:69:bc:40:b3:51:68:ac:b6:c8:60:24:d6:57:0b:dd:79:
88:70:99:9f:bd:61:b2:a3:31:3e:78:12:83:9a:c7:68:a7:39:
cf:f2:4a:eb:a6:01:8e:f0:f8:e6:d2:85:29:ba:4f:e8:6b:59:
20:6a:0b:69:94:b3:63:1a:6a:75:1e:43:e7:d7:5a:0a:77:cb:
85:2b:38:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:27:17 2025 by rpki-client