Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22A8BE00EC8E11EF8D1592A9762E951A.roa
File: 22A8BE00EC8E11EF8D1592A9762E951A.roa (raw, json)
Hash identifier: xcah5/40SzYrsqd0EuKiDKK5ORFvc67Axi2CzWoyoFc=
Subject key identifier: D9:6C:17:C7:27:6A:B8:A4:65:75:C5:07:53:A5:DE:02:2A:15:D1:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01245A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22A8BE00EC8E11EF8D1592A9762E951A.roa
Signing time: Sun 16 Feb 2025 17:47:48 +0000
ROA not before: Sun 16 Feb 2025 17:47:44 +0000
ROA not after: Mon 13 Dec 2027 17:47:44 +0000
asID: 17561
IP address blocks: 156.230.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74842 (0x1245a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 16 17:47:44 2025 GMT
Not After : Dec 13 17:47:44 2027 GMT
Subject: CN=67b224c4-b23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:2b:df:c4:16:b7:7e:5e:0d:7a:38:12:59:
d3:75:c6:6d:67:b7:30:34:27:e0:ee:c1:86:ef:df:
a6:60:50:19:5a:6f:0c:21:5c:ca:67:2f:1e:1f:75:
7f:2e:3b:b5:a6:f5:ee:5a:a6:02:b5:a4:db:46:1b:
50:e9:a7:f2:60:c9:89:22:f0:24:49:a8:16:f4:21:
a4:eb:79:b0:4a:1e:11:c8:bd:df:91:24:cd:86:92:
c6:84:15:d3:44:2e:73:e8:22:d3:93:4e:6c:07:a5:
4f:32:dd:c2:2e:c0:0c:ae:5d:1f:06:66:d4:d5:54:
b8:84:67:b2:6e:cf:11:a4:dc:3f:14:c7:df:cf:b8:
87:2d:89:19:f3:66:41:5e:58:c5:ee:0e:31:1f:dd:
30:18:4d:90:19:cd:9e:69:c8:6a:b5:a1:67:a1:5b:
a3:0d:ac:86:b5:d6:7b:a8:15:20:32:30:98:3a:15:
e9:3c:9f:c2:27:74:2d:b3:02:5a:a0:0c:cd:83:43:
17:32:4a:a2:70:3f:b5:de:d5:4b:a9:db:53:e9:30:
49:f2:97:0a:70:a5:66:cc:8a:f1:b9:56:d3:50:c9:
ff:e8:4f:aa:91:82:3c:e1:1b:42:2e:88:79:98:93:
c6:95:d3:d7:49:f8:8a:02:01:41:13:8f:0e:36:8e:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6C:17:C7:27:6A:B8:A4:65:75:C5:07:53:A5:DE:02:2A:15:D1:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22A8BE00EC8E11EF8D1592A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.150.0/24
Signature Algorithm: sha256WithRSAEncryption
05:49:3c:68:33:5e:84:d7:33:a1:97:8d:71:84:ab:e2:a9:db:
f5:df:46:4e:a5:ef:0b:ef:d5:6d:10:97:3d:58:bd:c9:75:fa:
ff:b2:b8:ed:64:37:29:9b:88:d8:27:b3:01:85:30:a3:14:be:
c6:f8:8b:37:f6:9f:4c:a8:f7:40:f5:8a:58:95:8f:52:e4:2e:
5d:c0:ca:5d:fe:d6:eb:2a:89:d7:28:f5:0b:21:a5:e1:c4:a2:
5d:14:2e:2c:b2:26:c2:c9:a8:49:2b:ff:68:0b:31:49:34:61:
96:ef:72:b4:86:cb:a0:d6:60:df:e0:66:89:31:64:14:7c:86:
cf:aa:4b:8e:3f:ec:0a:c0:b9:39:53:7e:31:06:a8:8e:dd:04:
c5:31:cf:e2:67:7a:11:ae:fe:4c:a3:d5:cd:61:77:bf:e0:fb:
d3:fe:3a:00:93:dd:59:fe:54:a3:25:85:77:4b:4e:56:e0:cb:
8a:42:79:01:b9:bc:eb:7f:3e:f4:92:e5:dc:bc:95:86:00:7a:
15:4a:ed:55:97:53:e9:a8:b0:6a:52:71:f5:d8:61:38:f1:2f:
3e:47:c7:b8:13:31:df:9c:ce:25:e4:87:25:d3:d4:d9:45:ea:
45:92:32:79:83:83:45:1a:12:25:2c:40:5e:6e:fb:f1:7f:b2:
8c:ab:a4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:25 2025 by rpki-client