Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AEAE6B4FFEA11EF8FEB9F66762E951A.roa
File: 2AEAE6B4FFEA11EF8FEB9F66762E951A.roa (raw, json)
Hash identifier: ujAJ8Y3FR31tqBLPrWov5MPWjegeW3p9WGvhxw9Xy78=
Subject key identifier: 27:FE:67:23:CA:D6:7E:A8:57:89:6D:B2:D8:9E:78:E8:C0:07:5F:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AEAE6B4FFEA11EF8FEB9F66762E951A.roa
Signing time: Thu 13 Mar 2025 09:04:28 +0000
ROA not before: Thu 13 Mar 2025 09:04:24 +0000
ROA not after: Thu 12 Jun 2025 09:04:24 +0000
asID: 398993
IP address blocks: 156.236.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83372 (0x145ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 13 09:04:24 2025 GMT
Not After : Jun 12 09:04:24 2025 GMT
Subject: CN=67d29f9c-42e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d8:88:e5:93:55:a3:5d:a0:81:84:be:1f:a4:
c6:65:62:34:d9:90:18:dc:2e:68:f6:9a:33:19:a7:
c4:18:be:26:5f:4c:23:1b:9d:31:7b:dd:57:be:92:
02:d6:7d:5e:ab:4c:27:e7:1c:e8:25:08:67:54:40:
47:12:32:ea:5b:1f:ee:72:04:4e:ad:64:38:b1:78:
c9:38:e6:c8:b6:07:b4:30:8d:13:de:db:74:3d:6e:
35:62:1f:1f:ff:9c:c8:cb:91:d3:52:24:87:24:e2:
35:86:5d:d5:c5:12:79:2c:0a:20:c2:c8:50:84:3d:
fa:a7:14:56:30:e3:2d:3c:bb:eb:f6:ce:d6:ef:4a:
19:30:c2:cc:ad:2f:76:fd:2d:55:5d:99:28:a1:51:
2e:c5:e2:1a:4e:f1:71:53:74:05:5e:5a:73:36:29:
47:16:2b:cc:7a:44:86:80:47:10:72:0d:2d:8b:d8:
0d:cc:b0:23:fd:38:33:b8:1c:c8:f4:d9:a4:5a:a6:
6a:86:e7:c9:67:80:33:59:20:df:fd:ea:1e:00:ce:
5f:e9:42:17:0d:b0:c2:71:ee:87:84:82:0b:af:50:
68:54:52:50:97:e5:b5:7f:04:c6:c3:03:46:da:23:
9a:f1:b2:0a:a4:53:93:fc:63:1d:fc:47:f8:22:3c:
c9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FE:67:23:CA:D6:7E:A8:57:89:6D:B2:D8:9E:78:E8:C0:07:5F:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AEAE6B4FFEA11EF8FEB9F66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.192.0/18
Signature Algorithm: sha256WithRSAEncryption
19:07:b6:f1:7d:d9:5a:9a:10:4a:b0:54:78:31:66:70:0b:0a:
3c:fa:eb:59:9c:d8:b4:3a:bc:b5:93:5b:f7:03:68:8e:36:6e:
be:97:db:61:52:2e:f8:9c:87:b4:36:73:a4:dd:92:e3:e1:f5:
36:cb:a0:b6:5d:81:6d:2e:f2:1a:90:2a:48:86:02:f4:4c:b4:
49:62:76:3b:26:cc:ce:ce:19:58:e3:c5:7e:95:81:0c:40:1c:
94:7d:3b:93:ff:a3:85:15:0b:87:d7:6d:ad:55:61:14:7e:a9:
eb:78:68:4b:b4:38:1f:70:f9:e1:1e:8c:f9:ff:47:10:66:af:
0e:e0:bd:89:c4:ee:20:f8:5e:3f:89:17:a6:67:22:ff:23:42:
e1:24:7d:83:a8:90:f1:fb:40:30:62:8f:fc:ca:d0:3d:90:24:
d4:8c:bb:16:6a:8e:fd:e0:94:b6:79:26:da:31:04:4f:12:7e:
46:dd:8f:af:1f:cf:fd:bf:cf:3c:46:0a:e4:38:a4:9c:f1:06:
0f:f3:64:86:e7:dc:ba:98:0a:ac:8d:1d:b1:d5:1a:40:eb:e0:
b5:68:8e:9d:ed:c6:c2:4c:b1:c7:c8:46:e8:1f:1c:bd:6d:e6:
73:a9:c6:97:99:57:ac:6f:2c:52:a1:ea:35:83:bc:32:98:d1:
ac:b3:a3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:45:19 2025 by rpki-client