Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40E9D444F80A11EF822B36B8762E951A.roa
File: 40E9D444F80A11EF822B36B8762E951A.roa (raw, json)
Hash identifier: H6miBdqs98e/Fc9Q0cjylLuGv6DLHtY+p54u7B1VyYw=
Subject key identifier: B9:14:D6:8E:21:67:31:B2:59:53:C6:86:74:A6:61:1E:39:42:4E:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0140CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40E9D444F80A11EF822B36B8762E951A.roa
Signing time: Mon 03 Mar 2025 08:33:59 +0000
ROA not before: Mon 03 Mar 2025 08:33:55 +0000
ROA not after: Mon 21 Apr 2025 08:33:55 +0000
asID: 63139
IP address blocks: 156.229.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82123 (0x140cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 08:33:55 2025 GMT
Not After : Apr 21 08:33:55 2025 GMT
Subject: CN=67c56977-12ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:48:5b:2f:c5:96:fe:dd:af:88:5b:d3:21:28:
2e:2a:95:77:93:23:69:ad:a1:2a:75:50:ce:f6:71:
60:24:bb:c2:4f:37:e1:15:cd:d9:a0:d7:fa:9a:d6:
90:be:c6:f8:a7:ee:40:26:71:ed:79:57:b4:0c:14:
b7:88:59:e1:1f:29:9e:c8:bb:00:c0:87:4e:b8:50:
b3:ee:86:f5:e9:ee:5a:ab:66:91:21:13:cc:c9:c2:
55:b3:2b:f6:ed:7d:44:94:b1:23:fc:78:5a:90:05:
76:d5:65:26:42:a0:30:d7:37:a4:c0:74:74:0e:82:
38:7e:0f:45:a7:e6:c6:b0:a8:c3:ff:8b:a7:5d:cb:
c9:bd:ba:88:13:ca:5b:eb:64:d4:b3:ec:b0:26:3b:
cd:ca:ef:cb:93:4b:06:8a:ff:dc:ea:cb:28:e6:e0:
24:e4:82:f9:a8:cb:12:b7:b1:ee:b5:18:97:68:92:
ca:3c:9e:20:52:db:c4:35:1e:c2:a0:69:2a:77:6a:
46:51:d1:e6:2a:88:19:3f:fe:f9:40:9d:69:7b:76:
27:c4:0a:57:0d:c6:be:3f:78:34:ba:94:f1:6b:dd:
0b:91:fe:de:16:a4:2a:7d:54:e1:b7:ac:9e:e6:43:
62:25:fa:00:a3:c5:4c:e6:be:da:aa:f9:76:7a:51:
f4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:14:D6:8E:21:67:31:B2:59:53:C6:86:74:A6:61:1E:39:42:4E:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40E9D444F80A11EF822B36B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.65.0/24
Signature Algorithm: sha256WithRSAEncryption
43:f0:54:a8:d3:52:03:be:97:ce:73:7a:26:1f:d8:0a:c4:09:
26:96:da:2b:61:cc:bf:92:bf:61:7a:5c:1d:5f:9d:f2:ba:9c:
28:6e:1d:be:e0:70:cb:b0:11:6a:74:36:da:ba:0e:a5:de:c1:
a5:51:fa:07:33:07:7a:31:ef:8b:44:4e:e5:5d:59:54:54:c7:
9c:ba:06:4c:cd:ce:f1:a1:82:1c:2d:f8:d9:3e:f0:3a:37:6f:
66:40:c0:45:a4:0e:23:5f:93:17:e3:31:07:e1:9e:ec:3b:04:
1e:55:77:63:c5:d4:35:60:5e:70:57:60:af:06:dc:24:a6:11:
54:0a:79:f2:bb:17:4a:70:15:1f:ef:57:b6:40:72:6a:0a:88:
64:b3:ee:5c:94:c7:49:f1:65:ba:2e:9a:ea:90:c9:9a:32:0e:
52:bd:ae:ac:f7:88:8b:e8:a2:ba:be:48:8a:5c:dd:97:87:1b:
75:bf:93:c7:67:40:bc:90:5d:33:ed:32:07:de:c0:93:0b:60:
aa:da:9c:83:f8:7d:c3:57:50:20:bf:5f:64:87:80:8a:0f:85:
bc:21:a9:f1:dc:02:9a:af:5b:cb:a2:01:28:eb:12:b7:00:71:
27:e9:ce:0f:b2:79:b8:58:7b:6b:62:cf:ab:6a:6e:fa:e3:c8:
32:f3:ce:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:25 2025 by rpki-client