Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC0BA1ACD7EB11EFB6790255762E951A.roa
File: EC0BA1ACD7EB11EFB6790255762E951A.roa (raw, json)
Hash identifier: SnnYtTOohoaDNodKb0cK4HgeB3QBSpfQs5iqnnjDI0I=
Subject key identifier: A5:99:3B:8E:3E:70:6D:01:51:AD:54:59:CF:28:95:A0:24:C2:24:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D72
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC0BA1ACD7EB11EFB6790255762E951A.roa
Signing time: Tue 21 Jan 2025 11:36:15 +0000
ROA not before: Tue 21 Jan 2025 11:36:10 +0000
ROA not after: Sat 01 Feb 2025 11:36:10 +0000
asID: 44559
IP address blocks: 156.246.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68978 (0x10d72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 11:36:10 2025 GMT
Not After : Feb 1 11:36:10 2025 GMT
Subject: CN=678f86af-4e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:9e:a2:a4:62:75:88:ee:81:e2:e7:83:de:
78:15:17:50:d4:1e:9b:ff:31:8d:be:4b:03:b6:19:
a5:bf:75:64:f2:1f:21:cc:78:7e:79:b1:c5:1a:70:
93:4a:9e:e9:7c:4a:2b:bf:2c:46:b5:f9:8e:95:38:
1e:e2:6e:9a:26:96:05:dc:db:14:ef:fd:f7:45:6a:
c4:3d:43:e5:b4:d1:e5:8b:c3:80:45:c1:a7:cb:95:
a3:29:1f:a8:1b:0f:51:92:ad:16:5e:0b:d0:53:af:
e5:b7:7d:e6:e4:8a:f3:20:4a:96:4c:50:05:74:05:
16:b9:68:63:70:cd:d7:87:60:ab:4f:04:9b:9e:28:
30:38:d9:f8:db:a4:ec:26:26:ac:87:2a:ac:3d:98:
9e:b3:7c:47:8e:92:f1:88:e4:de:61:fe:c1:01:c3:
ff:e0:cf:88:bb:21:7a:2a:12:11:31:b3:09:72:13:
64:c9:dc:9d:27:59:cd:41:1a:08:29:41:1f:ef:f6:
c1:59:c3:70:dc:cc:0e:e9:2f:93:97:84:02:f1:fa:
ab:18:b6:32:4b:41:42:cf:72:12:43:f0:04:c5:b4:
44:0a:ac:f8:84:ac:eb:34:08:d2:85:44:ff:6e:16:
31:34:45:d4:7e:01:2f:8e:f2:35:c1:fe:d4:d0:ad:
e2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:99:3B:8E:3E:70:6D:01:51:AD:54:59:CF:28:95:A0:24:C2:24:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC0BA1ACD7EB11EFB6790255762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.218.0/24
Signature Algorithm: sha256WithRSAEncryption
94:bb:e6:d7:f6:f9:b8:ce:c7:e1:fe:36:a9:01:b5:6b:1d:cd:
36:e3:76:c3:af:ac:90:8f:b8:4d:6d:85:f6:f2:e6:4c:70:2f:
18:5b:64:77:30:1c:e1:a9:c0:41:15:7d:fc:c6:91:58:19:9d:
ed:55:1d:6e:10:f9:af:64:26:da:6b:00:3e:e8:cf:5e:62:32:
9a:7c:0c:75:3c:53:e1:e0:94:83:8e:6a:3a:b0:ed:ed:4a:b4:
72:cd:97:e5:53:89:2a:07:a0:e5:2f:5b:9f:bd:58:08:01:78:
cc:5f:ba:7a:ba:c5:bb:06:24:ee:6a:b4:91:0e:6b:97:22:70:
c1:85:91:64:91:4e:50:b7:1f:0e:66:8e:0d:95:a1:43:64:fb:
bb:c7:2d:ed:e3:35:fb:6a:c3:b6:a7:d0:92:67:f1:31:90:fa:
40:47:d5:e9:c0:d5:36:18:01:b9:f0:e5:e9:db:59:e1:06:89:
33:19:37:09:5b:5c:2b:77:a1:4e:f1:03:ce:f4:79:c1:f5:b0:
18:f1:92:f8:59:32:19:95:29:99:d7:f4:99:eb:b8:e6:78:6a:
77:12:5c:7c:06:23:c3:bf:75:47:2a:da:90:72:6f:f8:1c:f9:
4f:7b:1e:3a:db:81:e4:3b:c3:67:ac:e9:d1:bb:b7:c0:c8:12:
75:27:8b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:23 2025 by rpki-client