Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24E8AE74F4BC11EF9EA130B2762E951A.roa
File: 24E8AE74F4BC11EF9EA130B2762E951A.roa (raw, json)
Hash identifier: X8PVTDqD9cdZHyUDvB/ORSxGbWdo0JxWGye7Nh3HOYA=
Subject key identifier: EC:79:E1:F2:43:77:D8:1B:66:1C:AB:47:F3:5A:4A:3A:2A:F9:47:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0138CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24E8AE74F4BC11EF9EA130B2762E951A.roa
Signing time: Thu 27 Feb 2025 03:37:18 +0000
ROA not before: Thu 27 Feb 2025 03:37:14 +0000
ROA not after: Sat 19 Feb 2028 03:37:14 +0000
asID: 17561
IP address blocks: 156.229.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80079 (0x138cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 03:37:14 2025 GMT
Not After : Feb 19 03:37:14 2028 GMT
Subject: CN=67bfddee-b07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:85:b9:06:9a:23:44:5b:11:d4:63:3e:5e:
c2:b0:fe:85:36:6e:7e:ae:65:91:8e:75:0c:c5:ed:
90:fe:3b:a0:da:d2:3c:22:c0:16:b6:15:76:50:36:
b1:24:5f:ea:04:48:f1:6f:a3:34:25:32:09:98:0e:
7c:a5:27:c0:af:0f:a1:50:96:e9:86:20:88:d1:71:
ac:b9:2f:20:35:08:ed:2d:11:bd:2f:a8:65:3a:85:
8a:98:6c:6b:a1:4f:43:1c:2a:4c:7b:4c:81:04:22:
51:2c:7b:b1:86:7c:2d:04:87:b0:8b:32:e5:84:f3:
1e:6f:45:ec:bf:9c:af:d8:d8:8e:b0:84:15:86:0d:
a8:ef:39:ba:98:53:80:0a:b5:a9:4c:62:02:16:4b:
61:24:e7:4b:22:22:3a:c8:cc:04:2b:69:f7:9d:ab:
fe:8e:dd:b2:c8:46:ad:e8:0d:af:c6:1a:80:c3:fe:
38:b3:4f:f6:f7:13:a1:72:74:36:c6:99:3a:eb:b6:
19:2a:39:f8:62:bd:87:c5:e4:7e:9f:f4:f2:a3:bc:
3a:a0:91:54:74:e3:76:a0:3e:b1:ea:6b:41:89:e6:
03:2e:79:4c:29:6f:99:de:9c:02:3c:9b:08:4b:4c:
97:88:23:63:5e:da:8f:07:f9:a9:bf:3e:0f:52:91:
fd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:79:E1:F2:43:77:D8:1B:66:1C:AB:47:F3:5A:4A:3A:2A:F9:47:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24E8AE74F4BC11EF9EA130B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.241.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:19:c3:4e:32:ca:10:e6:4a:e4:f3:80:e2:ea:95:68:2b:21:
9a:55:62:53:fd:1d:83:58:c1:83:e6:62:43:5e:fd:9e:86:ef:
4a:d0:eb:43:e2:51:9f:36:d1:90:4d:5c:8d:ae:3d:bc:d9:3a:
8b:8e:30:9a:4e:f7:5d:68:49:ca:95:68:a8:8e:c1:04:f0:e2:
1e:b1:16:9d:46:3a:50:9f:e9:40:43:fe:fa:8e:e6:c1:b3:eb:
bc:35:c9:6b:18:6c:28:aa:9a:5e:41:da:c6:38:d0:20:c7:b2:
58:5e:a4:34:b0:51:72:4a:0a:a3:65:ec:45:70:d8:b7:93:f3:
77:d1:23:96:26:88:89:51:4d:e2:d9:77:03:b8:1d:a2:43:81:
77:9b:c3:86:0f:0c:e6:4e:43:29:c5:84:f9:76:d1:9e:38:88:
01:f9:7e:7c:53:b6:c6:3d:be:e2:c5:95:b2:f3:23:1d:64:2e:
32:81:92:3f:df:d5:99:a3:45:b9:42:4f:01:d3:aa:f1:86:df:
52:2b:06:21:10:2b:b1:ec:4c:fc:5b:cb:be:97:02:54:1c:65:
a6:00:96:d7:41:d4:53:84:df:f3:1d:8d:34:2e:dd:e2:35:f6:
5a:f3:be:aa:24:0c:97:ea:a3:ca:55:62:a2:0b:de:c7:8c:33:
5f:54:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:37 2025 by rpki-client