Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEF1D670D7EA11EFA5941B50762E951A.roa
File: FEF1D670D7EA11EFA5941B50762E951A.roa (raw, json)
Hash identifier: PL//Gf59MlLqDrXsUWttCip98sJVeVStAvQV8v/kSb0=
Subject key identifier: 86:3A:ED:E3:B1:3B:43:C4:46:A8:6B:F8:7F:B4:6F:22:31:FE:4D:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010D6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEF1D670D7EA11EFA5941B50762E951A.roa
Signing time: Tue 21 Jan 2025 11:29:37 +0000
ROA not before: Tue 21 Jan 2025 11:29:33 +0000
ROA not after: Sat 01 Feb 2025 11:29:33 +0000
asID: 44559
IP address blocks: 156.246.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68972 (0x10d6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 11:29:33 2025 GMT
Not After : Feb 1 11:29:33 2025 GMT
Subject: CN=678f8521-9cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:57:a8:02:41:d5:8e:8c:50:bb:70:da:cb:
c4:43:2c:91:47:e5:ef:c8:04:d6:f0:93:e1:80:4e:
d4:a4:3e:35:0f:9b:6a:6f:3f:fb:1d:82:32:0e:06:
ac:d4:60:2f:e5:ed:94:d5:6e:0d:e8:71:1c:c4:7a:
4d:0a:3a:49:fd:46:29:43:dd:32:11:e2:b4:d7:49:
31:0a:28:9a:60:bf:90:6c:32:63:df:84:a5:74:98:
7a:c7:8f:2f:ef:d2:58:92:ed:57:db:02:40:62:04:
c3:0f:82:2c:c9:6b:2d:c7:39:fd:4e:ef:66:11:98:
c8:af:ee:ff:58:e5:51:39:fa:94:be:3b:75:e8:93:
41:7b:72:e5:12:43:01:3e:4f:08:00:f7:34:32:8a:
02:81:40:68:44:8e:93:26:2f:0c:68:21:79:48:da:
da:9f:3d:87:54:6a:9f:e5:fd:af:ea:2a:59:48:43:
ec:e2:e8:96:55:a4:5d:b5:02:d8:8e:53:fe:ae:61:
a3:8c:f5:9d:f3:f4:30:0e:08:fa:3a:0c:2a:e4:84:
62:1b:4f:c1:d5:b6:dd:c3:f7:4f:ad:f3:69:ec:67:
99:ab:eb:c2:67:04:cf:4e:ef:b4:5e:e8:5f:1f:d8:
36:78:0e:eb:fb:f0:cc:ba:d0:45:57:96:68:5f:67:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3A:ED:E3:B1:3B:43:C4:46:A8:6B:F8:7F:B4:6F:22:31:FE:4D:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEF1D670D7EA11EFA5941B50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.215.0/24
Signature Algorithm: sha256WithRSAEncryption
91:5b:56:94:0a:4b:a0:73:65:97:73:0c:b8:a0:44:b7:b5:50:
b8:cd:21:95:c5:73:0b:0c:a4:e1:90:fa:8c:58:49:f6:a8:a7:
ee:7e:e4:3c:d8:3c:ac:83:ba:0b:69:2e:79:53:00:7e:12:6c:
31:98:d7:8b:a8:1c:3d:e9:43:69:e3:80:0a:d6:58:39:74:93:
59:1d:c6:bf:26:d9:3e:69:bd:bf:6c:5e:23:b3:3a:c5:23:ba:
4c:f0:11:22:22:5c:8b:cd:25:e3:c5:c0:3e:4e:8c:2f:13:ba:
79:fb:ad:16:62:41:91:de:b8:b0:c2:ca:06:0a:8e:52:1b:bc:
30:7b:cd:e0:40:86:5f:54:e0:4d:8d:87:e2:a9:0a:1d:08:15:
c1:e4:e5:68:80:05:87:87:bd:73:92:c6:18:4c:8f:db:d7:64:
3a:a3:f2:c7:c7:c7:dd:a9:d2:c7:c4:d2:2a:93:5d:43:8d:18:
c0:37:4a:36:18:1b:c0:db:dc:21:8f:ed:3f:4f:23:da:68:fd:
12:b0:54:01:4b:59:59:59:da:45:ab:af:e9:d6:d6:32:5e:28:
9c:06:59:30:94:de:6f:32:88:0e:5a:11:5f:b0:8e:f2:04:c8:
22:42:75:d7:d7:6a:8d:cd:1b:16:a8:4c:da:43:a4:16:93:8a:
bd:3a:0e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:21:44 2025 by rpki-client