Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31CEF18600C711F0800BF973762E951A.roa
File: 31CEF18600C711F0800BF973762E951A.roa (raw, json)
Hash identifier: BsybIO8vBuyn2l2pBIN2IpFM07R3DqwbUHLpppiMiv8=
Subject key identifier: DE:36:C1:67:9F:3E:F4:1B:37:B2:7B:79:83:7F:AD:13:3B:18:2C:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01460E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31CEF18600C711F0800BF973762E951A.roa
Signing time: Fri 14 Mar 2025 11:26:38 +0000
ROA not before: Fri 14 Mar 2025 11:26:34 +0000
ROA not after: Fri 25 Apr 2025 11:26:34 +0000
asID: 401615
IP address blocks: 156.231.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83470 (0x1460e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 14 11:26:34 2025 GMT
Not After : Apr 25 11:26:34 2025 GMT
Subject: CN=67d4126e-f729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:40:6e:9f:71:6e:09:1f:4b:7f:1c:35:67:
13:13:94:c2:24:5a:e7:9d:d8:ce:86:a6:bd:45:bb:
67:3d:2d:10:48:76:c9:2a:07:72:9b:2e:93:53:6a:
bc:23:4e:41:a1:31:24:c9:4c:81:80:f2:92:e5:5d:
34:37:fd:aa:7d:ad:f5:c2:72:09:c2:de:6e:7f:81:
bb:c8:8c:9c:01:fc:6e:cd:a9:12:13:16:33:b6:d7:
ca:5a:4d:98:19:ec:85:68:c7:29:70:d5:44:b1:9f:
d1:22:0c:db:91:77:56:9b:25:78:56:8d:56:93:6f:
66:d1:dc:a6:79:3c:09:92:16:dc:99:24:f4:7c:41:
ac:09:3d:26:d7:a5:08:f1:bb:48:da:b2:c9:6b:12:
95:c5:6e:a5:41:d4:19:ce:11:57:43:ef:d2:93:27:
c8:ce:01:71:fa:2f:1b:c5:cb:61:91:11:d6:c7:07:
d9:a7:6b:97:d0:18:20:f4:1a:3a:0e:22:3f:f2:64:
52:46:27:64:2d:0c:e2:ab:74:cc:ad:27:01:f3:54:
e9:c8:60:8c:2b:68:0b:d6:da:36:df:43:16:63:13:
70:c0:cc:49:35:3b:db:b0:46:c7:a1:8a:bb:9e:77:
3e:04:67:a1:26:3c:52:e1:ab:f9:95:d6:1b:f2:66:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:36:C1:67:9F:3E:F4:1B:37:B2:7B:79:83:7F:AD:13:3B:18:2C:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31CEF18600C711F0800BF973762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.140.0/23
Signature Algorithm: sha256WithRSAEncryption
18:9f:f5:3b:fc:e6:ad:27:8a:98:38:14:ef:6c:35:ea:0e:4b:
f0:97:8f:c2:d5:cf:25:99:9a:75:3b:3e:32:62:e2:44:50:c3:
d0:fe:86:07:4e:4f:9c:b7:5d:72:b0:85:c4:d2:42:69:88:f3:
54:39:d2:ea:8a:f9:33:06:a4:9b:d7:91:67:30:6e:84:73:bd:
b3:04:71:c4:46:60:c7:09:bc:e4:98:eb:a5:5e:c2:81:ae:65:
5f:25:c2:37:ff:4f:dc:f8:a0:64:53:9e:cf:3c:4c:26:dc:d5:
73:96:16:25:63:85:61:ac:d3:5e:a0:3e:9c:bc:50:9b:7f:a3:
73:09:41:d8:2a:dc:df:2f:e4:c2:2a:5b:79:f7:da:d9:0b:4c:
89:e2:6b:6c:92:14:fd:5a:e4:7c:5a:6a:42:82:96:72:27:0a:
34:3c:14:e7:38:75:0c:b4:91:d7:a1:d1:55:f4:ea:1d:0e:8c:
83:51:35:a8:fc:1e:1a:ab:cc:d0:ba:26:f3:39:72:86:af:cd:
c5:d2:35:c2:37:69:0d:36:c1:03:3b:a1:ce:53:b8:e8:5c:a4:
52:39:bd:de:8a:27:4a:60:20:d0:7a:9a:60:ea:f4:97:e1:35:
9e:cc:57:d9:f7:d1:89:2b:7d:56:ff:a9:ae:ea:f1:29:1c:b0:
92:0f:69:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:41 2025 by rpki-client