Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1B5306CD7E811EF903C7642762E951A.roa
File: F1B5306CD7E811EF903C7642762E951A.roa (raw, json)
Hash identifier: Z82KwwPdtM/xj4LejxLDENHipTVEiMQXVj+WWrcK2zE=
Subject key identifier: 0F:68:86:23:0A:99:7E:A7:70:0C:89:B5:7A:6D:23:51:E8:ED:EA:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D5E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1B5306CD7E811EF903C7642762E951A.roa
Signing time: Tue 21 Jan 2025 11:14:56 +0000
ROA not before: Tue 21 Jan 2025 11:14:52 +0000
ROA not after: Sat 01 Feb 2025 11:14:52 +0000
asID: 44559
IP address blocks: 156.246.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68958 (0x10d5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 11:14:52 2025 GMT
Not After : Feb 1 11:14:52 2025 GMT
Subject: CN=678f81b0-9694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:90:f7:5b:ab:f3:21:a9:24:69:c3:21:3f:
04:18:95:5a:40:0b:18:d6:ea:83:66:94:58:43:31:
bb:9b:ec:18:ce:83:97:45:6b:d2:a6:3d:ad:4f:9a:
9d:0a:47:eb:37:9d:11:8c:32:00:02:ff:a4:f1:f2:
cc:93:55:4c:b0:ea:a2:7d:cf:bf:a7:b5:56:48:7a:
41:3c:75:45:90:52:8c:0b:20:4a:45:78:6b:1f:fd:
d5:ae:2b:cb:20:ca:c6:ea:1f:06:bd:13:13:79:a8:
5b:e4:18:44:02:fa:ef:a8:fd:0b:f4:14:33:5e:bf:
cd:ad:3e:17:a9:20:36:68:c6:58:02:57:a1:d7:60:
5f:81:e9:e4:8e:b2:fe:cb:8c:ab:09:4a:b1:a6:31:
97:f4:5b:6c:54:54:a5:9d:f8:77:04:a1:ec:2c:9c:
e9:ba:97:fe:dd:13:22:e9:8c:32:c4:85:d0:89:e1:
e2:87:38:63:c0:76:b4:48:d8:74:73:84:e0:6e:b0:
57:fd:cf:d1:90:5f:35:78:98:16:4a:b9:2e:aa:83:
40:02:6a:73:3c:f4:26:40:d4:c6:ab:4a:43:12:e1:
34:17:39:e9:fc:3b:2e:2b:44:a4:82:fd:36:18:0c:
93:41:0a:2b:33:dd:93:bc:f5:8e:a5:e2:04:a1:7f:
c9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:68:86:23:0A:99:7E:A7:70:0C:89:B5:7A:6D:23:51:E8:ED:EA:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1B5306CD7E811EF903C7642762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.208.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c7:2f:6e:eb:15:a3:fd:f9:f5:cc:ac:a0:1f:ea:94:1f:c3:
20:bf:43:7f:b0:cb:04:ae:67:f1:f9:47:3d:b3:03:96:3d:65:
61:dc:d1:1e:51:f6:3e:53:fa:7f:35:39:33:15:c7:60:58:98:
ea:e8:8a:56:82:16:47:63:f0:7c:ea:41:cd:b1:b1:54:e5:09:
32:39:24:a3:e5:8b:fb:31:5a:82:4a:f0:32:a4:b4:2f:6f:55:
18:d2:f1:67:8e:03:37:6e:21:8e:85:2e:5b:91:2e:12:a8:bf:
40:c2:b5:cb:e2:09:34:72:22:f6:ed:aa:c5:98:40:3d:8d:b4:
bd:ea:ca:fa:7d:6a:8d:83:e1:48:74:47:6e:b7:08:2c:72:2f:
00:a4:f5:d0:4a:df:58:1a:d0:e5:7b:b5:28:20:c1:da:a1:b8:
ea:1a:9c:e8:42:77:a2:30:bd:db:14:84:50:9b:51:45:f3:ee:
1c:d8:68:ad:de:a5:24:96:b1:52:58:2d:0b:d9:09:05:73:63:
4b:18:32:13:9b:ec:1f:46:dc:f3:ef:f5:9e:40:7e:44:08:f0:
a1:3a:47:6c:73:2b:e0:de:46:ac:f2:c8:30:2f:09:40:2a:4b:
98:f5:16:72:51:75:33:2e:d2:78:5d:2b:19:9f:09:30:70:da:
21:e5:e7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:57:03 2025 by rpki-client