Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D33E9152767511EFAB10B5AA762E951A.roa
File: D33E9152767511EFAB10B5AA762E951A.roa (raw, json)
Hash identifier: /yzoL8K2GbaQjvmne/F0xDxNnwMfCdARjoASnKnpc9w=
Subject key identifier: AB:59:88:01:8D:60:BD:E5:76:90:AC:AD:0E:3B:C7:6D:44:CF:15:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B82D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D33E9152767511EFAB10B5AA762E951A.roa
Signing time: Thu 19 Sep 2024 10:56:30 +0000
ROA not before: Thu 19 Sep 2024 10:56:26 +0000
ROA not after: Fri 08 Aug 2025 10:56:26 +0000
asID: 133861
IP address blocks: 156.245.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47149 (0xb82d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Sep 19 10:56:26 2024 GMT
Not After : Aug 8 10:56:26 2025 GMT
Subject: CN=66ec035e-04bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0f:96:72:01:71:67:54:c4:d1:aa:a6:a9:b5:
66:19:51:70:ec:89:51:14:b6:9f:79:52:69:f2:fc:
03:62:39:b5:f0:ab:ca:22:4e:93:db:58:9f:c3:a0:
1b:7b:8a:97:3e:bd:a4:88:04:28:be:bd:a7:4c:fa:
d7:e8:53:c1:93:6a:82:80:e4:20:6f:71:44:25:66:
e4:24:5e:b7:10:9d:1c:f6:82:e5:42:8d:35:fe:37:
2b:b0:3f:58:45:57:74:85:f7:22:58:1c:bd:8d:0d:
6c:8a:c9:67:7b:ef:f6:58:d7:58:ed:57:c3:47:26:
06:1d:90:6b:96:73:47:ad:cf:e5:04:47:72:e8:06:
63:8d:bd:4a:ca:11:20:52:e3:68:c9:e5:82:83:4a:
b6:4e:c8:66:d1:e7:a2:54:0a:c6:fe:15:d1:02:f4:
9d:aa:cb:b5:41:1c:ee:43:ca:d9:62:95:81:e9:7d:
10:8d:e6:94:fe:2a:b7:71:d4:25:1e:fa:00:5c:2f:
1c:ed:ea:e2:75:43:df:c5:26:55:38:35:d2:43:47:
8f:61:97:bd:60:66:61:b5:80:27:07:ab:13:1a:02:
6b:b5:56:86:b0:a3:ee:9e:36:60:f9:d2:f2:1c:22:
b1:61:cd:bb:f7:ad:38:cc:1c:29:c6:1b:15:25:43:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:59:88:01:8D:60:BD:E5:76:90:AC:AD:0E:3B:C7:6D:44:CF:15:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D33E9152767511EFAB10B5AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.12.0/23
Signature Algorithm: sha256WithRSAEncryption
04:75:d2:57:08:05:27:b7:c8:bf:b4:79:25:f9:d4:f0:9f:77:
1c:11:22:9f:bb:71:39:7d:82:2d:9c:72:fb:3f:dd:2c:a7:b9:
56:31:6c:0b:6c:16:95:7a:52:64:87:45:f5:80:a1:f5:e1:b8:
ed:66:2f:66:b3:e2:bb:7b:7e:10:b9:7d:a1:db:3b:25:3f:ff:
cc:4d:52:11:67:d1:89:e6:ad:36:21:de:bf:de:6b:19:7f:71:
8f:4a:d7:69:a5:19:5b:22:42:82:4b:18:60:48:22:18:40:59:
e9:33:38:9a:44:2c:d7:c1:18:5c:07:c7:c0:5d:ad:1d:42:5a:
3f:1f:7e:1a:34:f8:16:78:5c:5c:50:cb:af:c9:ca:a2:61:86:
0e:4f:0e:43:b9:68:8b:8b:8a:23:48:66:95:35:7d:f0:50:be:
ba:d2:0f:3f:d4:5f:83:90:f3:59:cc:79:a4:60:66:a4:c5:0d:
dd:ed:0b:72:8b:e9:65:82:1c:eb:a1:89:37:f8:2d:7d:9d:9c:
83:81:87:23:59:e5:a3:b9:26:c9:19:42:20:87:cf:00:94:56:
1d:04:9b:da:56:70:18:61:36:90:2d:f4:d7:e7:bc:0d:59:9d:
e3:0c:69:ea:70:b0:f0:1f:dd:94:43:93:80:32:1e:50:f0:05:
c2:a3:5b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:01 2025 by rpki-client