Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E257F912D95811EFAE587551762E951A.roa
File: E257F912D95811EFAE587551762E951A.roa (raw, json)
Hash identifier: W/HFE4Cpjpx1vj9RlqkE7DSG8oSBlhMLYFw99iHW95w=
Subject key identifier: 8D:09:BF:A9:F1:AF:41:96:2A:4C:11:4D:DE:34:90:43:D6:7C:FC:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010EAF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E257F912D95811EFAE587551762E951A.roa
Signing time: Thu 23 Jan 2025 07:08:45 +0000
ROA not before: Thu 23 Jan 2025 07:08:41 +0000
ROA not after: Sat 15 Mar 2025 07:08:41 +0000
asID: 138915
IP address blocks: 156.244.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69295 (0x10eaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 07:08:41 2025 GMT
Not After : Mar 15 07:08:41 2025 GMT
Subject: CN=6791eafd-1853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:3c:95:86:34:be:1d:7f:e2:9e:ac:e4:c2:
fe:a3:1f:ed:a1:70:18:9e:26:38:cd:80:ea:65:f4:
b0:ab:2a:a5:02:08:17:ea:37:a1:91:0c:b1:cb:41:
d5:28:83:05:db:ef:42:20:2d:c0:11:6b:fe:b4:19:
2d:3e:02:e2:ab:e2:f7:16:8c:40:3b:de:2d:af:67:
e5:46:76:c3:b5:91:53:bb:5d:5e:83:f2:0b:18:f0:
38:c4:2d:bf:20:8c:3f:44:77:0e:b6:bf:03:b4:20:
c2:a1:53:6b:7f:73:c2:f4:a4:65:a9:05:22:e6:83:
16:1e:59:be:45:5f:a9:6b:40:9e:89:b4:d6:69:aa:
5e:5c:eb:d6:eb:70:50:4b:7e:8d:8f:e0:f6:a9:6b:
ed:6a:b6:02:01:48:07:0b:0c:e6:25:2a:d2:52:99:
ef:5f:ff:35:9b:e2:2f:bc:0a:01:d5:b6:74:f3:31:
97:4d:1e:49:f6:13:8c:95:10:22:13:f7:a9:90:90:
43:76:b9:1d:bd:48:27:b9:33:e8:e3:00:8c:a9:f7:
13:75:63:0b:f2:84:c0:c4:45:26:5d:9f:f4:4c:f4:
58:f5:fc:1a:ca:c0:b5:84:f8:f2:d7:53:38:c2:99:
3e:37:b2:22:86:f3:da:39:af:9c:7e:05:e7:8e:c8:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:09:BF:A9:F1:AF:41:96:2A:4C:11:4D:DE:34:90:43:D6:7C:FC:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E257F912D95811EFAE587551762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.24.0/24
Signature Algorithm: sha256WithRSAEncryption
82:4f:87:73:78:56:67:f5:06:f1:b6:c7:80:37:a9:e8:92:74:
1f:06:6a:fc:cf:b9:65:db:76:4b:d8:95:05:c0:d6:a6:8e:e6:
21:e5:ed:78:a9:aa:59:b9:32:4f:31:1a:bf:65:a1:b8:40:da:
a9:c2:33:b1:f0:82:d4:f1:a9:fc:20:55:67:d5:d3:e8:9f:6a:
c2:18:23:d1:10:51:ce:9a:01:67:06:f3:ab:a9:d8:03:63:f0:
a0:49:24:31:2e:0f:22:78:bf:52:7d:91:b3:b3:07:ef:f0:dd:
74:58:ff:45:70:15:db:b7:db:c3:e2:d1:5c:af:b0:b2:53:78:
8f:6b:9f:28:32:1c:30:87:e9:72:52:2c:ab:df:0d:4d:9d:b4:
bb:82:6e:22:c5:b7:cd:85:fa:f4:83:78:a5:4a:22:f4:7a:e5:
47:5d:b3:6d:a4:78:31:e1:80:05:82:58:54:5b:d4:dc:1e:80:
15:86:6a:f0:97:84:9b:78:cd:a2:3d:49:51:e5:09:98:32:fc:
46:a7:87:1f:3a:d2:03:ec:ba:41:12:e8:7a:6a:93:57:94:7a:
e1:a2:40:5b:2d:aa:be:0b:d2:90:80:92:31:a3:01:cf:2f:9c:
89:53:6b:8d:02:10:5f:37:92:d6:34:7a:2a:0d:38:1e:22:e4:
94:48:b5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:47 2025 by rpki-client