Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFF2357ADAF511EFAA6819B9762E951A.roa
File: FFF2357ADAF511EFAA6819B9762E951A.roa (raw, json)
Hash identifier: A+4XAK6PuuV72IS2DhMTG3mA1CcYOionOIx/4OfFd8U=
Subject key identifier: AE:C9:10:20:CA:6A:86:30:A6:0E:7D:30:DB:86:91:FE:07:22:CF:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01117B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFF2357ADAF511EFAA6819B9762E951A.roa
Signing time: Sat 25 Jan 2025 08:25:57 +0000
ROA not before: Sat 25 Jan 2025 08:25:53 +0000
ROA not after: Sun 23 Feb 2025 08:25:53 +0000
asID: 44559
IP address blocks: 156.246.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70011 (0x1117b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 25 08:25:53 2025 GMT
Not After : Feb 23 08:25:53 2025 GMT
Subject: CN=6794a015-12fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:12:30:a5:a4:c8:08:a0:75:60:be:bd:12:
0f:1a:4c:2f:2b:10:6e:58:b8:72:ff:ef:b8:da:44:
b7:2e:0c:3a:aa:dc:64:e7:4e:3c:25:9e:45:42:42:
2d:ad:46:5f:96:86:c7:72:9d:5d:ce:83:44:c6:9e:
74:6a:14:ad:0c:e7:6e:57:9a:b5:3d:32:37:6c:51:
56:cd:43:1b:bc:7b:50:70:04:dd:cd:1a:64:ab:88:
e5:c1:2d:b1:d9:a0:e7:74:0a:4f:0f:08:52:9f:26:
c7:dd:3a:b7:de:0f:c7:6f:7f:d8:82:6e:36:d7:da:
a4:bd:69:ee:f8:a5:23:71:a4:c3:bf:df:af:be:c0:
b3:a4:da:ad:17:b2:f8:ca:c0:a0:12:55:66:e6:0e:
48:39:da:aa:b2:73:7f:0f:28:e2:1c:3a:47:7c:1d:
eb:8c:1b:38:27:b2:df:1e:29:38:68:51:b0:6b:8c:
0e:03:f2:9b:05:cd:3a:8e:83:44:b5:39:13:dd:45:
1f:3e:e9:f8:2b:0c:b8:33:da:9b:e2:29:5f:8c:c0:
5e:bf:34:ef:9f:01:d5:f1:47:45:19:81:53:82:5b:
ea:86:56:0e:8c:0c:6a:8f:2c:55:58:64:1a:61:a7:
bb:6c:2a:07:92:f9:8b:ae:6e:da:b7:c4:ab:38:e7:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C9:10:20:CA:6A:86:30:A6:0E:7D:30:DB:86:91:FE:07:22:CF:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFF2357ADAF511EFAA6819B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.240.0/24
Signature Algorithm: sha256WithRSAEncryption
86:26:0a:25:85:fb:0f:76:26:ed:ec:89:54:85:6e:50:f9:64:
d9:46:b1:eb:06:98:41:5c:1e:f0:10:65:d9:c7:02:56:5b:eb:
ad:24:a8:ef:de:66:5e:87:92:f4:4f:ca:c9:74:54:f2:5c:e4:
ab:fb:c5:1c:ad:20:69:c6:3b:98:38:70:0f:7e:78:87:12:66:
ca:ee:13:40:61:2e:c6:ef:78:a8:50:24:c6:61:13:8a:0f:2b:
59:14:d3:4a:74:b0:de:5b:c9:ec:c8:6d:5a:70:c1:e7:5c:97:
a8:4e:d4:86:5b:6d:c2:c6:0e:cf:36:cc:fa:83:ce:b5:8f:98:
4d:7d:6d:f3:ab:45:32:1c:b4:4b:b1:46:f8:74:ae:d1:bb:9c:
d0:ff:97:32:15:07:25:6e:59:d0:72:8a:42:94:ca:bd:49:78:
9c:4c:84:d9:fb:c9:17:6c:be:be:5b:4f:29:13:32:83:be:f6:
e1:f0:08:da:6e:40:e9:3c:11:06:a7:59:eb:96:19:24:f7:8b:
29:4f:88:35:e7:bc:f1:96:ea:03:c2:f0:88:9c:59:d8:30:5b:
c8:54:0b:3a:45:22:aa:b3:cd:b9:40:1b:aa:28:72:00:b5:56:
6d:60:ba:84:b2:37:7c:13:fd:c1:c9:b9:fb:e2:87:f4:fc:3a:
4b:ec:94:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:05:42 2025 by rpki-client