Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1A713F0DA7411EFA159524D762E951A.roa
File: E1A713F0DA7411EFA159524D762E951A.roa (raw, json)
Hash identifier: LP5dfqm97RJoorNZ6LxJkzwwjqWr/jlsKups7P9Yv1Q=
Subject key identifier: 51:F1:33:8F:2C:62:8D:AA:08:98:FC:E4:AC:2B:64:4D:7B:4D:4E:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010FC0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1A713F0DA7411EFA159524D762E951A.roa
Signing time: Fri 24 Jan 2025 17:01:41 +0000
ROA not before: Fri 24 Jan 2025 17:01:37 +0000
ROA not after: Tue 25 Feb 2025 17:01:37 +0000
asID: 44559
IP address blocks: 156.246.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69568 (0x10fc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 17:01:37 2025 GMT
Not After : Feb 25 17:01:37 2025 GMT
Subject: CN=6793c775-a7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7a:4c:3c:8b:67:35:8e:ce:20:94:0a:3a:7e:
a2:21:8c:11:50:72:2c:5a:09:9b:17:a1:3d:da:06:
62:45:78:f6:ef:93:56:7d:03:b3:94:61:49:c5:ed:
1c:d9:4a:aa:04:4a:2d:30:bc:43:74:48:1b:0a:76:
1b:12:9e:ac:4d:a7:78:07:2b:84:e3:dd:a1:a3:78:
1a:1b:e8:07:6c:9b:2e:b0:6a:4f:fd:dd:8b:38:7e:
2c:f6:72:0c:b6:95:52:87:81:dc:08:58:d7:35:eb:
3c:85:8f:ea:c7:59:8b:fc:13:54:84:4f:96:93:d2:
26:63:b5:a7:3b:c0:e1:66:7c:f5:db:ad:bb:e2:c1:
a3:51:b8:1e:9b:67:bb:76:5a:0d:29:62:1a:a0:98:
2a:dc:eb:d5:ef:d0:bf:53:62:05:a5:43:ad:99:20:
b2:29:82:76:fc:36:d9:4f:f8:a5:f1:7d:e7:b9:f0:
4b:eb:aa:32:8f:54:f6:13:07:03:44:d8:6c:55:fa:
23:85:9b:25:a7:e3:8a:06:51:84:6a:39:73:b4:79:
21:ab:bc:25:c7:eb:58:84:2f:b8:d0:04:af:87:a2:
e3:04:ad:b6:7a:85:47:b3:e9:a4:82:3c:2c:44:04:
22:88:65:e7:76:e0:6e:1e:18:30:98:da:46:8b:4d:
34:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F1:33:8F:2C:62:8D:AA:08:98:FC:E4:AC:2B:64:4D:7B:4D:4E:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1A713F0DA7411EFA159524D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.188.0/24
Signature Algorithm: sha256WithRSAEncryption
92:9f:5e:6f:b0:90:af:4e:93:01:28:4e:ba:9e:4a:42:51:28:
66:9a:33:cb:55:84:51:87:4c:d5:2c:df:b7:b5:82:75:15:3d:
43:98:fb:61:fe:b2:41:7c:d4:7a:6a:f2:40:36:f5:e7:5e:a5:
27:ce:6c:82:7d:37:9d:63:37:52:34:b2:b7:18:ba:e6:8f:40:
14:a9:23:16:4f:d6:4e:c9:87:6c:1d:da:40:b7:f8:85:86:5f:
d9:2c:ed:a3:e1:19:5b:8c:1f:33:18:ab:8e:34:58:f0:be:df:
20:ec:54:ea:25:c1:34:bc:0c:4a:20:3d:f9:d7:d2:02:9e:e3:
49:42:16:fb:74:65:d4:3d:66:b5:fa:3e:80:36:8f:81:be:6f:
02:0d:87:67:31:83:d6:01:1b:e4:4c:91:5e:db:a4:a0:61:9f:
0f:6b:1f:e1:72:53:21:fd:58:ed:79:50:3a:cc:c1:16:e3:a4:
20:45:16:f3:c2:8e:fc:eb:c2:b1:96:65:84:6f:77:da:cd:6b:
8b:56:44:50:4e:37:07:04:ec:b4:1a:98:9e:8b:32:ef:59:ae:
2c:9e:d2:b5:35:3a:cc:8a:01:86:f4:4d:18:98:9d:46:c4:e0:
30:9d:18:b9:d9:9b:2b:1c:1a:f1:52:d0:b4:ae:38:4a:2a:f4:
fc:77:09:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:09 2025 by rpki-client