Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED042B0AD94F11EF997F2C95762E951A.roa
File: ED042B0AD94F11EF997F2C95762E951A.roa (raw, json)
Hash identifier: 4776LQLjGWqBwXOye7QjkklUwng9tG5zLECTSNEHrzY=
Subject key identifier: 2A:E5:8F:3F:B4:DB:C8:40:89:10:28:E9:3F:F1:F3:81:64:B7:DD:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010E87
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED042B0AD94F11EF997F2C95762E951A.roa
Signing time: Thu 23 Jan 2025 06:04:37 +0000
ROA not before: Thu 23 Jan 2025 06:04:33 +0000
ROA not after: Sat 15 Mar 2025 06:04:33 +0000
asID: 138915
IP address blocks: 156.244.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69255 (0x10e87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 06:04:33 2025 GMT
Not After : Mar 15 06:04:33 2025 GMT
Subject: CN=6791dbf5-aaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:6f:e7:bc:37:69:43:18:90:7c:21:30:a1:
21:6a:99:3c:d6:89:60:78:c0:f4:ee:64:e5:29:29:
08:b3:03:67:49:85:33:d3:33:c3:12:db:9e:ac:ec:
71:6a:f0:45:a3:f7:3d:27:50:3d:ae:01:42:48:97:
fe:b0:0d:b6:69:52:82:89:01:fd:77:e2:1c:59:3e:
b3:27:1a:0f:d4:a3:7a:41:e5:ec:cc:e2:be:5a:37:
d8:4e:9d:bd:e2:da:72:36:22:ae:cd:a0:8d:ee:70:
4e:18:97:f3:1f:ad:5b:42:e2:2f:f7:29:c9:24:e3:
8e:6b:f3:7f:64:78:01:5e:4d:4c:0d:43:65:26:dc:
60:f4:fc:f9:85:db:42:d8:fd:11:15:1f:a2:39:4c:
32:27:77:48:33:39:1b:6b:59:b0:ff:3d:36:4a:3a:
cf:71:df:51:53:6e:37:ef:95:5a:86:16:e6:0e:34:
90:3b:2a:24:49:5c:67:b3:ee:a2:b6:cd:b5:20:0a:
4e:c9:da:ee:63:b4:21:9f:8c:66:74:79:ef:e6:41:
a9:35:da:05:c3:8b:32:b3:10:c4:20:29:cd:df:2c:
26:48:26:a6:df:0b:f1:b4:49:b7:a3:8f:f3:40:11:
1e:47:00:d9:f1:1b:97:be:29:64:49:cd:f3:3e:33:
a6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E5:8F:3F:B4:DB:C8:40:89:10:28:E9:3F:F1:F3:81:64:B7:DD:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED042B0AD94F11EF997F2C95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.47.0/24
Signature Algorithm: sha256WithRSAEncryption
51:24:e0:8b:12:15:87:93:44:94:64:78:c6:1d:c2:af:fc:36:
11:ce:a8:6c:49:9f:62:62:e3:fc:8e:60:32:57:0c:5c:c4:f7:
e5:5e:ac:8c:7a:8a:68:86:1e:72:64:63:bc:09:c9:61:0d:88:
83:a5:ee:ce:51:6b:46:de:b1:3c:10:24:8f:e7:d1:9d:f4:d0:
c6:e0:e4:ff:59:e4:0a:34:f2:91:30:50:69:a7:dd:17:f3:42:
34:89:56:58:e3:da:ac:a6:29:8e:80:24:a9:b4:fd:4a:3a:27:
ce:8c:6c:81:60:95:b6:56:33:e6:ec:87:a3:85:cc:d5:f0:c2:
4c:ac:b7:cf:81:ff:f0:66:f6:53:09:fa:ea:2d:12:98:b5:ce:
39:a8:e2:1c:17:2d:b6:04:e9:d3:05:80:03:2b:61:08:c6:e5:
ca:cb:da:ef:33:55:47:3b:72:d0:2d:d5:1c:2f:6c:41:70:16:
af:df:93:8d:8e:d6:13:fa:90:52:32:8a:c1:46:f1:8d:e8:c5:
41:54:aa:4e:fd:52:4d:7d:bb:50:c5:9c:cf:87:dc:17:69:c9:
23:77:ac:d8:a5:57:ae:a7:1f:56:51:6c:91:ff:40:dd:c5:1d:
af:bd:50:05:13:3c:57:a4:0a:82:5f:3f:03:2e:f0:2b:94:aa:
84:3f:7a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:08:58 2025 by rpki-client