Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAC703D4D7F111EF9211877D762E951A.roa
File: FAC703D4D7F111EF9211877D762E951A.roa (raw, json)
Hash identifier: m5z/zgSPRcl9JxKrplNIup94mWowQMCBDVgVqOxqmJc=
Subject key identifier: DB:8A:86:99:D5:D5:2E:C9:E1:2E:04:C2:D4:46:39:9B:81:E7:C1:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D98
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAC703D4D7F111EF9211877D762E951A.roa
Signing time: Tue 21 Jan 2025 12:19:37 +0000
ROA not before: Tue 21 Jan 2025 12:19:33 +0000
ROA not after: Sat 01 Feb 2025 12:19:33 +0000
asID: 44559
IP address blocks: 156.246.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69016 (0x10d98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 12:19:33 2025 GMT
Not After : Feb 1 12:19:33 2025 GMT
Subject: CN=678f90d8-7dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:70:44:ef:df:b1:d5:f0:9f:32:66:ba:2b:05:
2e:30:83:d0:da:a4:ed:d7:d2:03:4f:7b:50:5e:12:
df:42:0c:b3:da:41:40:b3:e0:01:7f:08:94:c4:33:
be:57:28:58:b5:a3:ee:b9:66:55:7d:4a:8d:09:64:
30:08:e0:2e:c6:13:87:5a:45:38:fc:63:91:f3:b4:
a0:54:48:37:4c:bb:1b:f0:54:c4:08:76:30:fa:95:
c6:05:66:11:14:21:b3:67:17:29:63:68:b0:66:ca:
57:da:b4:66:11:02:43:a2:84:ec:ae:50:7c:84:a1:
d4:0d:d9:3d:fe:21:76:cc:0d:22:36:da:28:cc:47:
d7:0c:23:a7:88:90:f4:b7:10:73:a0:99:b1:3a:0e:
5c:41:85:58:88:ef:6a:a8:2d:1d:a9:56:a1:cd:0e:
5a:6b:8a:02:e7:e1:51:4c:64:c8:31:5b:62:e4:43:
1a:b8:60:36:b7:64:5b:4b:09:21:80:ef:07:97:f9:
a0:19:2c:81:0d:45:93:40:89:ac:94:33:bd:94:2d:
c0:a3:7e:1e:ae:ca:80:2b:4b:ef:1c:7c:81:42:12:
36:59:94:0b:02:9c:ee:12:94:70:f1:55:bd:6b:f8:
bc:12:50:12:21:72:35:46:f1:f0:93:6e:ba:d6:b0:
f8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8A:86:99:D5:D5:2E:C9:E1:2E:04:C2:D4:46:39:9B:81:E7:C1:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAC703D4D7F111EF9211877D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.237.0/24
Signature Algorithm: sha256WithRSAEncryption
82:df:52:09:06:f8:57:51:f2:d2:b3:2e:bb:b6:40:af:1a:ee:
7e:1b:33:41:bf:33:c7:1b:23:a3:8a:56:d8:5a:aa:e6:1b:6e:
c7:79:aa:f4:51:e7:ed:d2:66:7a:5a:96:49:8c:02:cf:34:81:
e3:c6:b8:60:98:1b:e0:0f:07:11:a6:37:48:a4:d8:08:9b:d8:
7c:cb:f2:c7:b9:e0:f3:cb:dc:17:85:07:8d:2c:0c:3f:85:03:
04:db:11:1e:be:5d:5d:e3:d2:52:8b:c8:35:ea:4f:43:02:63:
5e:8e:b6:fe:60:51:36:8c:47:76:63:ec:02:c8:15:63:d3:33:
6a:16:45:ef:db:97:48:ca:b7:ac:14:26:24:b5:68:92:32:7e:
e8:c2:29:b7:c0:e3:7d:e9:ea:d4:96:dd:2f:c3:77:8f:63:20:
f2:f2:d2:e0:d7:61:ad:71:1f:49:08:af:51:27:99:6f:f6:ef:
1f:01:13:ef:3a:5e:ca:1d:2b:9b:4a:59:3e:fd:2e:72:93:6d:
d2:39:c2:fd:21:25:ce:02:71:9c:b9:cb:49:9e:bc:df:9e:dd:
63:cf:f7:cf:a2:51:03:d6:e8:dd:8e:81:87:5d:83:c9:64:d6:
62:8b:6e:1f:73:8d:c2:c4:03:97:00:62:a9:ba:53:cd:d5:69:
40:43:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:07:14 2025 by rpki-client