Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0090069AF5D311EFA00030A3762E951A.roa
File: 0090069AF5D311EFA00030A3762E951A.roa (raw, json)
Hash identifier: 7XKFhUVR620Pkursp1dZT208rEoOEC0hA42yW4tRGaA=
Subject key identifier: 64:BA:65:01:2A:08:F6:C1:FE:D3:6E:D0:C3:97:5A:27:2F:99:E5:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013DBB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0090069AF5D311EFA00030A3762E951A.roa
Signing time: Fri 28 Feb 2025 12:53:27 +0000
ROA not before: Fri 28 Feb 2025 12:53:23 +0000
ROA not after: Sun 13 Apr 2025 12:53:23 +0000
asID: 138915
IP address blocks: 156.244.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81339 (0x13dbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 12:53:23 2025 GMT
Not After : Apr 13 12:53:23 2025 GMT
Subject: CN=67c1b1c7-220c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:97:01:5c:2d:ca:00:36:8f:1c:c7:ca:32:8a:
f3:fc:72:d6:91:1a:c0:57:2c:bc:fd:ed:4d:db:8b:
95:00:50:4b:cb:78:67:4a:3e:48:2c:ac:1f:ac:2d:
57:21:ff:bc:44:c1:6c:8d:37:52:d4:10:a1:22:96:
fb:1e:87:c6:3e:54:f0:4c:dd:c6:08:0c:41:23:22:
47:cd:78:de:40:c3:af:31:06:75:a9:69:6e:f8:3a:
41:45:4f:7b:9f:1e:4f:37:37:47:c3:b8:33:34:10:
19:6d:91:3b:ef:16:7b:ce:39:f4:04:e1:f9:4d:e7:
e8:b7:aa:e1:b8:3f:8e:76:4f:25:58:e5:5d:aa:57:
2f:cc:dc:a0:78:3a:cc:f6:d6:16:75:0b:93:8e:64:
3b:4a:7d:46:0d:5c:c8:92:71:31:52:e6:84:7d:05:
96:eb:16:fc:95:01:58:75:33:69:b5:3f:34:11:38:
2f:5b:59:2e:b0:b5:eb:f5:6c:72:82:e9:fc:86:3b:
4f:d1:7a:83:f6:73:19:46:f4:e0:0a:45:c1:57:41:
76:cb:b8:24:be:53:e3:e6:ac:86:a2:6e:bc:17:10:
77:24:0a:02:1d:53:29:34:0d:ca:95:82:8c:fb:5f:
24:a6:b3:fa:83:7f:96:a8:66:40:8c:26:f8:e8:8a:
c4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BA:65:01:2A:08:F6:C1:FE:D3:6E:D0:C3:97:5A:27:2F:99:E5:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0090069AF5D311EFA00030A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.43.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:4b:f4:fa:c7:a6:73:dd:8d:c6:1a:d6:74:7f:a1:d7:7d:8f:
1a:f5:c6:31:b3:73:3c:10:4e:da:95:25:63:0b:76:eb:6a:f4:
38:2b:43:f1:7d:6a:a0:97:ac:31:31:1b:86:37:93:c1:2c:16:
60:5f:32:90:01:c8:96:95:0c:4a:b9:59:0c:b2:b3:30:76:3d:
23:ff:05:fb:bd:93:f4:44:91:01:6f:6c:95:07:78:9d:eb:21:
56:40:0a:94:be:f4:7d:51:3a:66:f4:09:a2:9c:3a:f9:46:5c:
c5:4c:42:a2:fe:0d:22:c4:c7:68:7a:da:6b:e5:f8:20:ee:51:
03:c6:f1:d1:79:32:81:f2:ae:51:72:a6:60:25:58:cc:c5:ab:
ee:9a:dc:7e:bf:7c:36:4b:84:3d:e9:4a:85:8b:bc:9b:71:07:
df:ea:5a:89:ef:32:e0:7e:f3:1c:9a:82:df:53:dc:14:33:53:
90:2b:b0:fd:11:11:22:e3:4f:08:27:ac:6a:a9:19:3d:7f:25:
be:e4:89:85:cf:e4:e8:15:5f:25:df:3a:d0:fe:3f:7d:20:a9:
60:10:34:ac:2d:09:42:75:65:49:9a:6b:cf:9d:31:6c:ed:72:
7d:f1:1b:c6:5a:6c:17:0a:52:91:76:94:c6:20:80:c6:d0:f7:
d4:00:54:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:30 2025 by rpki-client