Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDACBD0CDB0111EF9690268B762E951A.roa
File: EDACBD0CDB0111EF9690268B762E951A.roa (raw, json)
Hash identifier: Vl1+RLyBQAoUKlv9IH+D7NlzRUy7Hzl+9LnqqmtqPK4=
Subject key identifier: AF:D8:DC:92:89:68:B1:9B:EE:4E:2E:FF:16:4F:10:39:76:69:83:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0111CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDACBD0CDB0111EF9690268B762E951A.roa
Signing time: Sat 25 Jan 2025 09:51:20 +0000
ROA not before: Sat 25 Jan 2025 09:51:16 +0000
ROA not after: Sun 23 Feb 2025 09:51:16 +0000
asID: 48031
IP address blocks: 156.246.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70091 (0x111cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 09:51:16 2025 GMT
Not After : Feb 23 09:51:16 2025 GMT
Subject: CN=6794b418-41fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:37:a9:9f:fd:83:e7:65:bd:d9:c9:8a:bf:7d:
da:7f:ab:8a:43:11:f1:20:51:a3:cb:75:d0:7d:4b:
ec:a4:86:fb:46:a5:99:5d:99:37:08:b4:49:66:c2:
d5:0d:27:16:42:95:17:f0:f2:0c:90:19:aa:ea:64:
15:4e:78:2d:79:d5:d8:7a:dd:78:2d:72:9b:eb:df:
5d:c6:ca:92:e8:ed:60:51:a7:1e:a9:61:df:56:07:
f9:bf:80:b2:4b:a7:91:00:02:bf:d5:28:f6:1f:2a:
cd:8b:5a:ee:24:a6:a3:2b:b8:30:33:52:e3:ef:4e:
6d:72:6d:4d:64:32:c4:27:7e:78:a0:1f:e5:ed:79:
b2:e6:a0:97:b4:8e:06:05:6f:2e:90:48:d2:d5:bb:
2e:db:23:ec:1d:1b:0c:18:f1:c2:af:f2:37:64:fa:
71:6a:80:76:ec:1a:11:95:eb:f6:c9:9a:ee:51:dd:
f2:78:3e:ee:f2:c8:48:09:54:15:f7:1d:71:d8:ab:
20:89:45:b8:15:ae:88:34:ee:8e:b9:bf:9a:7e:2c:
92:87:e1:32:12:2c:1c:27:1b:17:8b:7e:26:d1:92:
cc:55:6a:93:d9:70:e0:8a:7e:4d:77:2a:0a:cc:91:
8c:8d:ed:1f:d7:e1:c9:c7:64:ae:7b:b2:e9:88:fb:
e9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D8:DC:92:89:68:B1:9B:EE:4E:2E:FF:16:4F:10:39:76:69:83:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDACBD0CDB0111EF9690268B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.144.0/24
Signature Algorithm: sha256WithRSAEncryption
12:df:63:eb:8a:1c:62:bc:08:56:5c:b8:1d:97:3b:3f:4a:50:
bf:db:e5:eb:e1:aa:93:9b:3a:a7:db:3d:9b:2a:83:56:a5:2e:
44:f6:68:ec:93:37:d0:da:4e:fe:4c:c1:96:36:5f:c4:d1:75:
09:24:a4:1e:7c:4e:d3:47:c0:c7:92:b2:67:27:62:7c:91:fb:
e4:f8:de:01:6b:d1:88:4f:0e:86:bf:68:bd:25:8c:a2:0a:6c:
6b:86:1d:ba:37:d1:02:04:15:30:c7:38:95:56:78:96:b2:95:
d7:dd:dd:de:e3:e2:2c:67:4f:2f:8f:9a:62:d7:94:2f:11:40:
9e:87:1e:46:ab:e7:f8:2d:78:e7:93:ac:22:6e:f8:78:59:dd:
ec:e1:b8:ec:8d:46:1d:89:65:d6:a9:d8:83:28:f6:2a:ab:c1:
f9:ab:ab:43:50:3a:24:e5:ae:f2:ef:4c:61:fb:35:62:83:4e:
0a:ae:24:60:cc:bb:01:ab:4f:06:af:85:5b:74:c9:40:5e:d6:
6a:93:c5:c0:18:3f:82:5c:74:1b:68:94:8c:94:71:15:c4:b7:
ce:de:b1:ef:7f:7e:e0:d9:89:ab:2a:8e:c7:0a:d6:57:e4:85:
32:8f:1b:19:88:4e:79:0c:31:6b:4f:f3:a4:d6:10:1d:fd:95:
74:51:d0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:33:52 2025 by rpki-client