Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25BAAAE8F60E11EF9A8696B3762E951A.roa
File: 25BAAAE8F60E11EF9A8696B3762E951A.roa (raw, json)
Hash identifier: 3lqtv46lY9Msq9BwMhiLaCsAkCPV/Y2aTIxU1ttTUMw=
Subject key identifier: 26:2F:56:98:74:26:40:C7:94:C2:C9:A0:93:D6:EC:38:02:EB:C1:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F1B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25BAAAE8F60E11EF9A8696B3762E951A.roa
Signing time: Fri 28 Feb 2025 19:56:49 +0000
ROA not before: Fri 28 Feb 2025 19:56:46 +0000
ROA not after: Sun 13 Apr 2025 19:56:46 +0000
asID: 138915
IP address blocks: 156.244.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81691 (0x13f1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 19:56:46 2025 GMT
Not After : Apr 13 19:56:46 2025 GMT
Subject: CN=67c21501-5dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:bf:15:2f:0f:fb:c7:24:ac:27:31:52:58:
5b:72:26:4d:17:21:78:10:0e:c0:63:13:8b:d0:47:
2e:36:5f:3c:9e:af:85:27:88:2e:1d:7e:36:7a:6f:
98:a0:9f:c7:0e:e0:fd:3e:1e:eb:20:b8:46:10:82:
0e:78:fa:73:39:86:8a:a0:6c:38:b9:f3:14:52:6e:
0d:30:06:f9:b4:82:6f:68:af:61:d9:71:46:f0:3d:
3d:c3:01:5d:73:c4:b7:16:4e:cd:c1:e0:93:a5:24:
1a:76:1c:bb:ce:59:37:74:6b:06:b9:d7:f5:aa:2c:
bb:54:91:c1:29:55:c4:82:db:4f:3e:6f:4d:e9:02:
78:98:2d:cc:94:72:05:00:ff:f3:a7:af:70:62:33:
7b:c8:27:73:39:bc:32:74:9f:3d:4c:55:05:d8:b5:
5a:b8:64:3f:f5:38:34:68:37:74:42:42:7e:4d:e1:
ac:ef:db:2f:40:8a:68:aa:4c:f0:3b:43:53:3e:e3:
6a:fd:7f:9b:d8:33:81:ba:d1:ff:19:48:98:08:f1:
a9:9a:d9:29:e6:11:bc:25:a1:16:29:18:e9:94:a3:
52:5f:27:54:47:5c:85:ba:b0:8e:d4:3a:22:40:b3:
b8:54:59:da:16:a5:90:a0:f6:c1:5c:e7:8d:6e:9f:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2F:56:98:74:26:40:C7:94:C2:C9:A0:93:D6:EC:38:02:EB:C1:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25BAAAE8F60E11EF9A8696B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.52.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:21:30:d5:71:bb:07:06:fb:79:1b:07:d9:cc:ae:70:5a:c8:
ff:22:7a:02:1c:fe:1d:63:7b:e4:43:e5:cf:44:f8:dc:c3:69:
f8:c6:25:1a:b1:83:a2:98:44:e2:a6:7c:7a:7b:88:4b:4f:d6:
74:79:e4:5b:d1:f1:4d:57:f7:e4:74:0c:7b:a8:52:c3:89:56:
8a:80:4f:82:b4:68:5d:7f:7c:ac:c3:9f:31:b9:e8:53:ac:12:
8b:5c:29:77:4e:b4:ba:a1:df:35:be:61:36:82:13:2a:b4:a3:
b6:b7:28:b8:5e:a6:9f:52:5c:9c:a1:b2:e1:68:9a:e9:4c:a3:
28:72:66:6b:22:61:44:2c:8d:60:c2:08:3e:5d:1b:c0:2a:ea:
71:6d:8a:ac:57:6e:5e:6f:f1:90:df:1a:52:14:ce:f3:a7:45:
b8:0d:bd:7d:d2:9a:69:da:4f:a5:5a:19:49:aa:2e:53:12:54:
cb:0f:dd:bd:55:71:34:e0:cb:1c:a7:b1:a6:14:3c:93:1c:b8:
f2:0a:6e:37:61:54:66:bd:85:c8:12:cf:46:2a:97:e2:ec:e5:
2f:17:55:ad:26:f3:d5:04:15:5c:61:e0:89:f5:4b:32:0e:e6:
46:a6:d8:11:7c:d3:39:95:4f:3f:e1:34:68:95:91:66:2b:53:
cf:4b:7f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:10 2025 by rpki-client