Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E15B8B78C33711EFB0E1797F762E951A.roa
File: E15B8B78C33711EFB0E1797F762E951A.roa (raw, json)
Hash identifier: Snvli5VIbZTbSA5Rsb8gT7eSnBacDYrFxBi3oMcqf8g=
Subject key identifier: 25:91:D0:E4:A7:1F:87:5E:EB:3C:33:3E:D0:E0:82:8C:93:24:48:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E15B8B78C33711EFB0E1797F762E951A.roa
Signing time: Thu 26 Dec 2024 03:17:04 +0000
ROA not before: Thu 26 Dec 2024 03:17:01 +0000
ROA not after: Wed 10 Dec 2025 03:17:01 +0000
asID: 984
IP address blocks: 156.244.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60255 (0xeb5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 03:17:01 2024 GMT
Not After : Dec 10 03:17:01 2025 GMT
Subject: CN=676ccab0-36dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8b:02:54:ef:24:eb:e0:a7:32:5a:00:5f:fb:
23:ac:c7:7a:ee:fd:70:b0:25:42:f0:2b:e9:de:3e:
dc:34:c2:8a:19:8d:68:82:a3:02:73:39:51:ba:0f:
bb:c4:d5:99:3d:aa:3b:ff:14:fd:f5:0d:fe:8b:a1:
85:3a:39:4e:6b:07:c3:3d:84:f7:1a:1c:ac:68:f0:
4e:3d:00:29:ef:60:10:54:69:fd:ea:e7:f4:ad:26:
10:e9:81:e1:0a:16:5f:61:a8:f8:4a:b9:03:78:83:
3f:95:d4:70:9a:00:f8:1c:85:2f:03:49:e8:8c:64:
85:03:14:e3:64:83:e2:bb:8c:33:6a:f8:d2:a6:07:
17:04:06:29:42:c7:f7:0e:1a:35:b7:94:b0:d3:96:
01:02:32:be:b8:d7:70:d2:bf:ee:9a:fd:e7:b2:5f:
3c:50:62:58:df:82:67:c5:c5:27:6d:ef:48:5a:07:
ff:3d:de:2f:59:e9:18:43:f7:c2:d9:af:b6:fe:1a:
27:a5:d0:39:4a:e7:50:0e:5f:b5:2c:8a:8a:f6:ec:
96:84:a2:f8:ab:a7:86:ce:94:52:f5:b8:24:ec:99:
e0:01:11:36:4d:1b:51:f5:6f:97:27:d3:22:76:3f:
e2:5f:e7:21:0c:eb:aa:d9:4a:a8:17:e7:71:2b:22:
31:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:91:D0:E4:A7:1F:87:5E:EB:3C:33:3E:D0:E0:82:8C:93:24:48:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E15B8B78C33711EFB0E1797F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.171.0/24
Signature Algorithm: sha256WithRSAEncryption
13:51:ea:7b:76:4e:1e:92:f3:f3:42:fe:54:1c:83:ca:df:22:
7a:7d:e9:0f:43:a6:d2:8a:a3:e1:3e:0f:06:4f:fe:dc:88:dd:
45:f2:89:05:ed:9d:c9:38:d0:e9:d0:06:2d:68:e9:e2:38:77:
b9:b6:68:e9:08:fd:e4:65:f0:ea:9f:02:dd:86:dc:55:b3:5e:
13:e3:27:21:65:26:58:12:a9:26:6b:bc:43:d6:10:b9:9a:7d:
f2:58:11:b7:4b:7c:6f:ce:7c:29:92:d4:1d:39:e5:50:37:bf:
eb:8b:b5:bc:8a:80:4f:66:83:f3:a7:37:8f:10:c2:c6:26:74:
6b:1e:ab:4b:0f:56:aa:2a:ea:aa:b4:1c:82:3b:d4:b9:49:4b:
89:05:97:2a:94:ba:ff:a7:55:25:bd:b1:d2:b6:02:e8:62:9a:
5b:9f:a9:eb:81:84:d9:9c:32:16:6c:5c:a7:45:72:c8:81:be:
d4:3a:54:0c:7f:9c:e6:ca:67:cc:f7:8b:d9:e0:18:53:60:a3:
54:34:ff:ba:6e:2a:66:07:ae:72:06:b3:8e:17:b4:77:db:8d:
51:98:97:de:fc:02:aa:f5:bc:3a:70:c8:77:c0:31:08:79:41:
55:61:23:a9:80:60:b3:0f:6b:f6:98:6f:bc:52:58:a9:bc:03:
67:e8:d5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:45:16 2025 by rpki-client