Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5FFC7B2DA6A11EFB61E158A762E951A.roa
File: E5FFC7B2DA6A11EFB61E158A762E951A.roa (raw, json)
Hash identifier: JXE9xLNXq6qc9IH+NWGz+zaFx8Vl5l7tK0UQMTnwDbI=
Subject key identifier: E9:84:81:BB:8F:12:26:6C:91:21:F3:90:5B:37:FF:65:3C:EB:C6:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F98
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5FFC7B2DA6A11EFB61E158A762E951A.roa
Signing time: Fri 24 Jan 2025 15:50:13 +0000
ROA not before: Fri 24 Jan 2025 15:50:10 +0000
ROA not after: Mon 03 Mar 2025 15:50:10 +0000
asID: 203020
IP address blocks: 156.232.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69528 (0x10f98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 15:50:10 2025 GMT
Not After : Mar 3 15:50:10 2025 GMT
Subject: CN=6793b6b5-12af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:c1:06:36:fa:d1:f0:3b:29:8a:51:16:f3:
df:d5:f3:f8:c5:2f:a6:d4:ef:39:e9:3c:9f:bc:78:
4d:2a:3b:c8:53:d3:85:80:f6:97:4c:7f:0d:4d:7a:
ed:03:b2:0e:bc:4b:54:42:3c:a9:6a:16:b3:ad:a0:
df:31:81:9b:3e:22:aa:bc:45:11:50:a7:81:c7:25:
34:94:1c:35:c4:bf:46:1a:98:67:d9:49:a1:95:72:
c9:ce:f6:b1:b6:4e:de:16:4b:66:93:c8:d1:65:0f:
1b:0d:d1:f2:7a:d0:1f:ba:c2:f3:04:9f:a2:9c:64:
c2:07:f8:1c:7f:6f:7b:f3:cc:fc:a8:65:e9:b9:0f:
9b:84:94:12:0f:b5:57:de:ce:e9:29:bf:0e:65:90:
29:6d:93:c3:36:57:a8:6d:0f:ff:85:06:83:4f:b5:
63:54:87:26:fa:83:a2:c9:00:f0:18:cf:b5:52:4e:
77:09:ef:ae:61:4a:30:02:1f:68:63:55:81:6f:98:
da:39:3d:93:6c:1e:22:58:8c:58:78:30:01:34:0f:
b0:98:09:82:74:74:29:1d:7d:18:c2:c9:8b:2f:ee:
d2:c3:ea:7f:d4:bd:54:e1:0a:c7:56:32:4a:b5:df:
15:07:a0:e4:9f:57:20:5c:f3:14:84:71:20:8f:6f:
24:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:84:81:BB:8F:12:26:6C:91:21:F3:90:5B:37:FF:65:3C:EB:C6:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5FFC7B2DA6A11EFB61E158A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.4.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ad:5d:f1:7b:b8:73:7c:40:a3:ad:b3:ed:5f:7b:3f:74:fb:
c7:6a:1a:44:fb:67:94:85:8e:70:9c:60:44:d2:17:a6:47:a8:
13:6d:3f:da:29:6e:b4:16:b5:5b:6c:2a:df:e2:c6:19:47:b0:
f6:7f:c3:8a:32:5f:a1:b9:db:df:ba:8f:7f:ad:e9:99:60:61:
e2:62:6e:b9:4f:d0:98:54:41:65:63:7e:16:cf:62:2b:25:82:
c4:c9:20:b5:bb:79:14:cf:15:e2:5c:63:ce:b4:d3:a2:7e:41:
79:c9:a5:12:1a:71:ff:61:36:3b:1a:b9:a2:25:ba:8d:b2:97:
39:85:88:07:c4:c9:8f:8d:f5:d1:e1:f8:bd:66:b0:45:c5:71:
6d:03:18:c7:22:41:fc:b4:5c:e4:40:b7:86:8d:85:4d:32:d4:
fc:d5:66:97:e8:78:59:df:13:90:98:f7:39:be:5a:b8:33:27:
f5:2c:ff:79:cc:7e:79:55:82:d3:be:33:33:31:66:94:b0:f4:
cb:89:8f:c4:b6:5e:7a:39:22:98:9e:1e:17:a9:66:25:be:59:
62:54:b2:24:51:a4:81:a2:32:13:e5:0e:47:e8:26:f1:bd:63:
d4:bf:95:12:6f:96:37:12:cf:1a:49:e2:52:2a:17:5b:fe:76:
93:f2:69:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:51 2025 by rpki-client