Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F46E7516D7F711EFA50070A3762E951A.roa
File: F46E7516D7F711EFA50070A3762E951A.roa (raw, json)
Hash identifier: 0S+lkRDhng6BVI8Ouc7VUHOcqI9d1xAKMO+E0jd9iGs=
Subject key identifier: 73:97:9E:85:C5:48:DD:F8:B6:16:03:F5:D3:64:83:59:EA:D9:FF:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010DC0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F46E7516D7F711EFA50070A3762E951A.roa
Signing time: Tue 21 Jan 2025 13:02:23 +0000
ROA not before: Tue 21 Jan 2025 13:02:19 +0000
ROA not after: Sat 01 Feb 2025 13:02:19 +0000
asID: 48031
IP address blocks: 156.246.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69056 (0x10dc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 13:02:19 2025 GMT
Not After : Feb 1 13:02:19 2025 GMT
Subject: CN=678f9adf-5afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:e5:dd:c1:55:d0:e5:e9:e6:b1:76:07:f8:
bb:1e:60:68:7c:0a:e6:6a:5b:ab:64:2c:e3:1e:9c:
39:c0:be:72:ed:8e:dc:fd:80:c4:8d:a6:46:29:d8:
37:d3:4b:a5:9d:bb:7d:68:4c:b2:d2:34:84:fb:46:
39:64:da:b5:d0:f0:5e:1b:93:bd:35:ac:54:5f:d8:
c3:2f:c6:ff:e0:4e:aa:a4:7e:b5:d9:b2:1d:1f:2b:
40:b8:5f:cf:6e:7a:98:f4:79:07:60:ae:0e:19:a3:
80:cf:fb:56:2c:3e:ea:ec:ad:b7:dc:dd:60:ce:d6:
cd:c6:f9:95:54:d3:f3:dd:0c:8c:6c:6c:3d:2b:6d:
d5:67:61:1a:71:6f:8b:53:63:b8:f4:b0:92:b7:f1:
db:65:8d:dc:32:79:dc:84:41:b2:de:b0:a1:8c:da:
53:2e:ae:b1:a8:fe:5c:5a:64:00:77:7e:b9:22:8f:
06:5d:65:96:9d:21:33:de:9f:ba:eb:81:35:00:1d:
99:ce:bf:1d:0e:3d:f5:55:24:63:27:92:b1:e2:72:
bb:c2:58:25:78:57:93:51:d7:c9:b2:bb:72:fd:5f:
94:45:24:f9:25:b5:3f:8f:c2:de:37:52:c9:58:67:
ee:dc:8b:8c:1e:23:62:d5:12:10:1d:3f:cd:35:34:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:97:9E:85:C5:48:DD:F8:B6:16:03:F5:D3:64:83:59:EA:D9:FF:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F46E7516D7F711EFA50070A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:2c:bc:f4:fe:6c:bc:a2:e9:45:a1:c6:66:f7:4e:52:49:8c:
23:af:a0:1b:3d:9e:26:2a:1d:10:99:18:3f:a2:49:93:29:14:
b8:52:79:ff:e9:1b:bb:dc:e0:5d:48:00:95:9e:90:97:b7:06:
68:f3:98:c7:15:fd:a0:84:74:f5:78:76:55:54:19:84:31:e6:
f4:87:aa:94:9e:c8:ee:bd:2f:a4:dd:58:d0:25:79:e6:a1:9d:
94:8b:0b:f3:24:11:f0:a7:5c:b8:f1:f8:78:07:ab:ed:d1:f7:
09:bb:1c:1e:9b:33:9e:a4:f7:0d:64:35:c4:29:28:f6:1c:ce:
67:86:e9:39:d0:14:c9:b0:73:51:41:59:14:b6:55:0d:36:84:
9d:a8:eb:c8:05:1c:94:81:e1:28:b8:4b:8a:bd:6f:85:c8:d1:
62:17:67:b4:af:07:f9:37:8b:cb:c1:4d:62:69:2b:24:1e:b8:
44:1a:d2:09:ca:4f:38:f2:24:1e:d3:9f:2b:0e:91:82:89:78:
27:5f:9a:9d:e2:ab:05:1f:e3:cd:3d:5b:23:7f:13:c6:66:f6:
00:62:cb:de:71:90:79:6b:2a:19:72:45:02:d5:7d:e4:d8:4d:
9d:c3:5b:0c:3c:64:cc:55:9b:b4:29:b7:ed:ff:3a:f9:b3:75:
0b:3c:42:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:48:50 2025 by rpki-client