Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDC211D0DCB711EF93EC3390762E951A.roa
File: FDC211D0DCB711EF93EC3390762E951A.roa (raw, json)
Hash identifier: VF7UgqY4vLKmQGr3c9qno2fge/nXTMUtQ3MZCskmqp8=
Subject key identifier: 64:88:67:6B:52:02:45:45:22:1D:82:77:31:0F:8F:59:92:57:5C:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011533
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDC211D0DCB711EF93EC3390762E951A.roa
Signing time: Mon 27 Jan 2025 14:07:07 +0000
ROA not before: Mon 27 Jan 2025 14:07:03 +0000
ROA not after: Sat 08 Feb 2025 14:07:03 +0000
asID: 7018
IP address blocks: 156.248.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70963 (0x11533)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 14:07:03 2025 GMT
Not After : Feb 8 14:07:03 2025 GMT
Subject: CN=6797930b-dd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e9:ab:ec:fb:84:85:ae:a7:ed:99:de:0b:2d:
6f:07:b3:9d:83:a6:7b:37:12:3e:f8:b7:b0:62:c7:
f3:28:7f:91:59:fd:e3:9b:b7:72:61:67:da:f8:23:
93:68:c5:3e:02:ec:13:b1:26:5b:3a:34:a9:06:4f:
93:94:81:45:78:5c:65:42:b0:ca:15:96:0d:8d:7a:
44:1a:c4:0b:53:20:30:b0:0b:09:04:76:90:91:02:
e8:79:4e:68:77:80:33:42:39:46:33:11:70:48:17:
f8:ab:31:fa:43:75:c9:8d:e7:a9:9c:bd:ed:68:b3:
25:c7:3f:e6:ff:af:60:b7:84:7e:87:bb:97:ee:9e:
16:77:8a:5b:49:fc:de:20:f3:ce:7d:81:4f:66:8b:
ba:4d:2a:e5:03:82:f7:5b:36:2d:9b:9d:d3:7a:da:
ee:24:19:32:c8:e7:d0:d9:73:76:96:5b:b3:77:6d:
55:6c:68:be:41:7c:03:f5:f5:ec:cf:41:0e:9f:aa:
e5:68:77:79:46:59:e2:db:53:04:80:b8:d6:18:8d:
4f:72:8f:ab:13:1a:b7:48:a7:f5:3b:fe:9d:f9:64:
89:b4:21:12:34:56:3d:b6:82:c0:80:1e:25:e9:39:
9c:29:46:3d:7b:1a:50:1b:32:cb:af:f8:a9:38:8b:
b4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:88:67:6B:52:02:45:45:22:1D:82:77:31:0F:8F:59:92:57:5C:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDC211D0DCB711EF93EC3390762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.108.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:da:4d:b2:ac:94:46:b4:15:fe:d9:5d:f9:18:1a:4c:ac:25:
28:df:b0:87:06:be:49:38:c6:76:7b:28:e6:12:ee:88:20:d8:
b4:c0:d8:d7:9c:bc:02:c8:41:64:86:7d:d8:d3:57:db:2d:e7:
f8:40:91:b9:cb:02:91:d1:d6:0d:cd:bf:00:a4:95:34:39:07:
b6:c4:d3:4f:96:a0:64:fa:ac:97:e6:b9:87:5e:4a:09:93:54:
0a:ef:57:e9:3b:3a:64:50:41:ee:aa:7b:1e:84:1b:1a:e5:3d:
fe:fd:40:7e:4f:12:96:ce:bb:34:65:5a:39:43:56:9c:b7:05:
9e:45:9b:c8:c4:de:b4:65:eb:b5:4a:92:9c:ea:68:7e:c1:4c:
ee:cd:c3:af:4a:40:48:40:bc:04:20:fd:e8:b3:c7:b2:b7:6f:
e0:9d:e1:fc:14:53:a5:69:a5:89:7f:ab:f2:d2:49:df:0c:9e:
5c:af:7d:2e:05:f1:bd:da:88:ba:15:7b:b3:cc:43:26:c2:93:
9f:99:4c:2a:49:78:d5:84:f7:54:24:12:01:8f:6d:69:e1:be:
56:33:e2:37:7f:e7:be:89:02:45:44:66:cc:70:d1:c3:51:1f:
19:ea:83:9c:68:24:83:27:b4:ff:57:d7:20:d7:4f:3c:3a:01:
79:6b:9c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:36:23 2025 by rpki-client