Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2036C926E54211EFA205F9AF762E951A.roa
File: 2036C926E54211EFA205F9AF762E951A.roa (raw, json)
Hash identifier: alhiuzn+i2+DIca7/0DNKBX9l5qaDht5dJlQSBjEVcU=
Subject key identifier: F0:AC:C8:EC:10:2D:6A:BD:03:15:70:11:64:14:40:B2:C4:CD:8D:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2036C926E54211EFA205F9AF762E951A.roa
Signing time: Fri 07 Feb 2025 10:56:04 +0000
ROA not before: Fri 07 Feb 2025 10:56:01 +0000
ROA not after: Mon 13 Dec 2027 10:56:01 +0000
asID: 17561
IP address blocks: 156.230.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72995 (0x11d23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 10:56:01 2025 GMT
Not After : Dec 13 10:56:01 2027 GMT
Subject: CN=67a5e6c4-c880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f9:61:1c:f7:74:8a:31:3c:19:1b:aa:ae:f7:
12:64:b7:aa:fb:b6:82:b7:fe:15:6c:d8:7c:8b:d2:
2d:73:40:98:ba:b2:cb:a1:4d:b4:b3:36:c7:b5:f0:
5a:fa:41:9e:64:9d:78:19:ef:1f:5e:26:27:cb:cf:
9a:a9:05:e4:a6:cb:8d:ac:57:26:c2:a3:de:36:9a:
2e:3c:c1:71:ae:24:e9:08:0c:0b:dd:c8:0f:d3:34:
31:cc:fd:83:30:df:e9:4b:af:21:00:ab:c8:08:33:
06:5f:a7:1d:fd:12:6a:8a:17:38:3b:27:1e:1b:1c:
b6:77:35:56:37:6f:82:a8:e8:41:46:8a:d1:68:8a:
72:c3:fa:f6:ce:0a:1a:a8:f6:54:fe:93:c6:02:92:
4b:38:48:3e:28:0a:52:2e:c1:5b:62:6a:31:9a:b8:
81:21:38:9c:b1:bf:79:72:0d:fe:f0:45:7c:d4:fa:
0d:7c:4a:44:b3:3b:17:fe:11:66:3c:2c:3e:85:5a:
dc:4a:8f:90:c4:c2:60:51:1e:c5:61:fa:54:99:ab:
54:88:b8:0f:92:42:6d:e3:36:78:fd:27:6f:31:0a:
52:1f:d0:42:90:8f:b1:6a:fb:5e:e0:45:b8:5b:71:
64:d7:0e:25:5c:bc:ef:65:64:13:d6:fc:db:4b:e9:
1f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AC:C8:EC:10:2D:6A:BD:03:15:70:11:64:14:40:B2:C4:CD:8D:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2036C926E54211EFA205F9AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.169.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:b9:3d:34:62:7b:ac:13:7e:8a:6d:49:3d:6f:5a:8a:2a:32:
51:1b:20:21:0f:19:e6:9d:d4:f2:7e:38:82:b0:96:d9:2e:88:
86:a9:49:99:3f:70:73:a6:cc:f4:6f:5b:81:7d:44:fb:fc:ea:
96:f7:6c:58:af:d6:04:12:00:30:ec:2a:64:67:fd:f0:ed:18:
98:82:63:71:98:54:d5:95:52:b5:d1:c3:87:db:51:94:a8:4b:
a3:73:c9:4f:c5:13:41:c6:53:a2:4d:95:ff:5d:33:8e:98:22:
1c:9b:92:cf:88:48:f5:0f:e2:f0:79:01:60:ce:ee:3a:ea:e3:
ce:34:52:91:40:21:ba:38:27:d3:df:c4:36:19:24:27:50:74:
63:19:1c:0b:85:ef:cc:74:ca:1f:64:1e:71:80:77:71:72:e1:
07:c2:f5:b5:71:2d:03:b9:0f:5f:0f:7e:00:af:5b:a0:68:86:
22:6d:50:f2:39:17:3e:06:19:46:a1:d6:11:3e:b4:1b:fd:3f:
2e:0c:f6:3a:14:96:19:ad:ec:4e:25:e4:75:70:2e:df:7c:e9:
73:cc:93:df:cf:06:8f:a9:a5:0b:e0:54:cf:a4:c6:02:19:c5:
2b:33:a3:2a:b3:cc:8d:09:64:2e:c7:87:63:7a:6b:92:93:8b:
58:c8:99:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:51 2025 by rpki-client