Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/188E9B52F80911EF9ECE90AF762E951A.roa
File: 188E9B52F80911EF9ECE90AF762E951A.roa (raw, json)
Hash identifier: ECJzGYNbCqQo+C2RUI/pYWiNSG9GfPBF7rjf08PayRE=
Subject key identifier: 46:DC:D4:17:B0:0B:5F:7A:48:A9:84:87:FE:0C:63:88:2F:CA:79:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0140C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/188E9B52F80911EF9ECE90AF762E951A.roa
Signing time: Mon 03 Mar 2025 08:25:42 +0000
ROA not before: Mon 03 Mar 2025 08:25:38 +0000
ROA not after: Mon 21 Apr 2025 08:25:38 +0000
asID: 63139
IP address blocks: 156.229.30.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82117 (0x140c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 08:25:38 2025 GMT
Not After : Apr 21 08:25:38 2025 GMT
Subject: CN=67c56786-d15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:2a:a4:fc:8f:5d:29:72:d2:68:37:31:a4:
d2:27:04:8c:3b:6f:02:5b:1d:db:7f:3b:85:9c:ef:
4c:67:f9:b1:93:ca:e2:5d:53:d3:17:f4:03:d5:ff:
f8:25:d1:01:31:03:47:0a:a4:85:86:8c:c1:23:f3:
93:69:50:7e:d1:ae:a9:f4:7b:bc:63:51:30:63:f8:
ce:d7:15:0f:57:47:98:54:ec:f5:bc:2b:2f:5a:25:
42:25:df:14:4c:25:cb:44:e2:28:f5:03:50:85:12:
8d:27:d5:2f:56:47:a1:06:15:8a:d0:78:7e:54:3f:
ca:54:31:21:b9:a9:b4:06:ea:d5:24:b3:de:91:c1:
a8:25:e0:08:e7:de:0e:40:be:9c:90:22:e3:35:65:
11:53:f4:5d:a7:05:93:1e:01:74:45:16:26:83:85:
f6:3b:fe:63:3c:94:e7:ed:01:7e:ac:6a:4b:36:fa:
40:f8:64:d9:a7:da:d0:c2:18:52:45:fa:16:3a:b4:
40:43:4a:d8:ec:da:78:56:86:90:d5:96:ab:12:b0:
8f:43:65:87:0a:73:18:e5:93:90:5b:4d:46:0d:25:
d8:c8:6f:11:fa:b0:7d:bf:0a:12:e6:d0:3b:f0:4a:
59:62:6a:81:fc:04:8f:87:e9:f4:81:ba:4d:3d:93:
54:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DC:D4:17:B0:0B:5F:7A:48:A9:84:87:FE:0C:63:88:2F:CA:79:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/188E9B52F80911EF9ECE90AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.30.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:86:f5:01:23:d9:46:a1:cc:ef:aa:a1:58:63:7c:55:d2:f2:
86:bb:4d:f3:f2:31:b1:73:58:81:58:d7:36:d1:f6:f7:bc:b8:
3b:6a:32:20:cf:5e:09:4c:a1:2f:0c:59:54:95:6b:72:d9:f6:
d8:97:50:32:a1:0e:da:6f:1d:e2:61:c7:db:ec:a6:5f:a1:1d:
f7:97:40:c7:31:64:46:78:f0:cb:a9:ec:4b:3b:da:20:0a:56:
2d:97:f6:9a:e2:d5:6e:81:60:2d:9d:8a:b9:db:e4:a6:80:91:
37:e9:ee:ea:13:6f:cc:62:ce:0d:aa:55:7d:10:00:dd:2c:a1:
89:cd:28:8f:be:ed:b5:80:d8:f0:2a:1a:98:f6:08:45:77:22:
fd:e9:7d:58:e3:af:a5:63:b9:1d:68:05:43:51:b9:49:86:36:
0b:40:25:be:f9:85:e9:1d:d3:43:35:d1:29:06:a2:1c:58:a7:
10:7a:7f:3b:57:43:b9:e4:94:55:ea:ff:35:c7:67:f7:48:f7:
de:28:d6:5d:06:2f:87:e9:b6:08:dc:3e:ce:3f:ea:46:1f:94:
5a:0d:f7:f3:f2:fc:00:f5:06:a7:7a:95:1e:51:3e:79:e6:08:
1f:dc:34:13:7c:08:29:61:4c:77:20:45:26:09:aa:87:be:f4:
fd:7c:2e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:08 2025 by rpki-client