Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2A8CC36DFF511EFA501F56D762E951A.roa
File: E2A8CC36DFF511EFA501F56D762E951A.roa (raw, json)
Hash identifier: Yfdg/K9dEpX2FO/pXDY/v/WALcEMs1Rby5tC5Hp/YWU=
Subject key identifier: E7:1E:93:90:69:86:F4:11:8C:DA:1B:02:93:0D:F4:4D:D5:9B:84:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116A5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2A8CC36DFF511EFA501F56D762E951A.roa
Signing time: Fri 31 Jan 2025 17:07:43 +0000
ROA not before: Fri 31 Jan 2025 17:07:40 +0000
ROA not after: Tue 25 Feb 2025 17:07:40 +0000
asID: 62468
IP address blocks: 156.245.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71333 (0x116a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 31 17:07:40 2025 GMT
Not After : Feb 25 17:07:40 2025 GMT
Subject: CN=679d035f-1f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:f3:ce:4b:d6:e3:54:bf:90:f3:cb:9a:87:
e9:2c:5a:01:a1:ac:b4:9c:17:1f:2d:0f:da:74:91:
20:0a:72:fa:df:d2:77:04:03:28:ed:23:df:58:c6:
da:0d:c8:ba:75:7d:f1:c6:d6:e9:82:5a:6d:2a:7b:
dc:89:09:b2:e2:fa:87:3c:6d:4d:25:ba:0e:8d:81:
2c:aa:64:28:35:97:33:0c:b0:b5:f4:50:91:32:aa:
f2:8a:c9:a9:bf:a3:0a:81:43:64:9a:1d:51:df:4a:
2b:4f:7c:3e:f6:27:12:bf:0f:28:21:c2:f4:23:b3:
19:e6:e6:4b:da:3c:88:04:c0:2e:cf:58:04:90:10:
cd:0d:e7:3f:81:64:a8:36:2a:c3:82:dc:fa:8a:5e:
4c:80:1c:93:18:14:f1:79:16:4e:14:07:d8:1b:98:
3d:64:a0:79:34:9e:08:d1:c0:cf:81:38:e8:8b:28:
df:66:6c:85:c0:4f:b4:d2:35:e0:e7:e9:79:33:10:
2e:eb:7e:af:04:63:e7:fd:1b:ff:aa:0a:9f:35:35:
b7:70:9d:28:ff:8c:80:ef:fa:f2:42:0b:2d:4d:3b:
b8:7e:48:50:f4:4b:0c:42:02:c5:8c:db:c5:93:fb:
eb:4a:65:44:b4:63:a0:e1:f6:ba:3f:5e:6d:2c:61:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1E:93:90:69:86:F4:11:8C:DA:1B:02:93:0D:F4:4D:D5:9B:84:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2A8CC36DFF511EFA501F56D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
Signature Algorithm: sha256WithRSAEncryption
97:b5:24:6d:7a:40:09:11:82:3d:23:21:37:17:b8:0d:fe:ea:
0c:9f:5e:19:63:39:f3:92:45:72:0d:7a:c6:7b:9b:cf:62:b4:
05:0b:41:52:0e:fd:a7:a8:78:78:3a:36:1f:38:a5:ba:4c:f2:
39:28:91:f2:15:8d:f1:1d:80:53:46:d4:99:6f:3f:59:2d:e2:
32:91:01:b7:ce:31:1b:b0:e0:5a:3f:e8:d8:7d:3e:1b:17:3d:
15:27:35:c0:76:82:59:47:60:5e:e1:ec:3b:c5:27:9a:48:3d:
91:f6:f8:24:38:ac:0b:41:99:e8:0f:48:7c:74:78:aa:11:f7:
6b:86:d4:65:f7:03:59:6d:91:96:fd:b2:b2:66:77:95:1d:d4:
b2:b0:a1:50:63:42:77:34:29:6a:0b:92:9a:fe:29:e7:da:c2:
79:5d:d2:e6:dc:c0:a5:38:c1:7d:9b:82:55:92:cd:db:e8:c7:
87:b9:e8:a3:43:7b:59:92:e6:c7:90:ac:c2:03:78:90:0e:09:
10:1d:9f:ce:ef:16:57:d1:b0:8a:6f:1b:f5:4d:14:28:73:3f:
ca:03:3f:38:24:05:90:e8:c8:ca:a1:b2:75:3e:30:64:a2:06:
f1:8f:f4:d6:8d:bb:59:4b:c6:c5:44:12:45:06:76:25:b7:bc:
92:eb:5b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:08:42 2025 by rpki-client