Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42036D62F46411EFA613D844762E951A.roa
File: 42036D62F46411EFA613D844762E951A.roa (raw, json)
Hash identifier: tkE/uOxJak1QDG827GCykJJW0ASeEuozTat4Otag1dQ=
Subject key identifier: 8F:12:77:3F:4C:45:69:A5:7E:E8:19:1E:DE:0E:3D:16:E2:0F:AB:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01355F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42036D62F46411EFA613D844762E951A.roa
Signing time: Wed 26 Feb 2025 17:08:11 +0000
ROA not before: Wed 26 Feb 2025 17:08:07 +0000
ROA not after: Sat 19 Feb 2028 17:08:07 +0000
asID: 17561
IP address blocks: 156.250.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79199 (0x1355f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:08:07 2025 GMT
Not After : Feb 19 17:08:07 2028 GMT
Subject: CN=67bf4a7b-9095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b6:05:50:6f:c7:c8:61:ae:93:5e:a8:b6:3d:
97:24:17:45:41:af:37:2c:21:16:ae:e0:2b:33:2e:
62:69:18:dd:02:52:b7:39:42:60:d1:88:67:1e:58:
d2:9d:f2:f1:d2:5c:b9:86:e6:a1:96:9a:de:8d:e0:
3e:ca:c3:00:89:e8:97:1c:b1:c7:3a:76:01:f3:c2:
f3:7c:ac:c4:54:9c:b2:34:37:f1:8c:39:72:ac:8e:
e2:4c:68:90:2d:0d:e4:59:95:c4:59:6c:b8:f1:ed:
7b:f7:b9:1d:e0:e4:44:f7:35:42:41:9e:3f:27:c1:
5e:60:15:bc:50:83:ae:f6:7f:86:46:2a:ab:bc:ea:
1a:49:34:40:cc:a0:dc:38:40:3c:b0:8a:93:dc:1e:
af:5c:fd:7f:b0:0b:e9:a9:2e:8c:db:a6:e3:a9:e9:
85:91:4c:5b:da:e3:08:37:a1:49:e8:1a:2c:cf:8f:
69:5a:e5:89:f2:9e:5f:3e:3f:cb:4a:e0:96:22:2c:
3f:30:de:5d:67:78:3c:ef:54:c6:10:24:9c:0c:9b:
cf:45:25:2c:d5:ba:60:f3:2f:bd:87:36:b7:48:2a:
47:90:b7:17:dc:d9:c0:62:8a:19:53:17:e5:9e:e2:
89:9e:ed:93:0c:a6:4a:33:0d:1e:23:77:71:92:a5:
da:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:12:77:3F:4C:45:69:A5:7E:E8:19:1E:DE:0E:3D:16:E2:0F:AB:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42036D62F46411EFA613D844762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.52.0/24
Signature Algorithm: sha256WithRSAEncryption
15:63:35:e8:c1:53:e1:3e:f1:1d:b3:25:55:e9:80:ab:d3:72:
d1:66:85:28:c1:7a:bb:ff:7e:ab:3d:15:28:7d:7f:0f:93:f8:
d1:c7:42:d9:1e:36:05:f7:ae:13:f3:be:6b:d7:39:15:1e:80:
04:64:ec:5b:1e:5c:e6:37:05:8b:78:59:0c:ad:9f:ed:b9:00:
0d:85:11:ca:4d:14:fa:01:ec:db:85:d2:9c:62:4d:57:e0:e4:
c3:74:ff:c7:ea:b1:6b:e6:a3:c0:d9:c9:49:af:c0:e6:6e:d4:
29:2e:16:35:84:0d:a4:ac:4c:d6:52:f3:6b:5b:79:c7:ca:0f:
69:1c:bf:dd:2a:cf:97:bb:77:e6:7d:d7:f6:07:db:08:09:fd:
c0:bd:df:05:e0:58:0b:b1:87:77:ff:5f:fa:7a:af:79:d6:9d:
50:59:cb:ef:95:c1:4d:13:b8:87:2e:6f:cb:23:25:89:67:7a:
40:e6:a7:0a:ef:55:0c:61:14:7e:b5:c6:60:2c:02:f1:06:a0:
f4:5b:f8:bc:1d:67:27:30:ae:48:fb:f1:95:4d:ab:78:41:d4:
44:6e:94:77:5a:df:d5:60:3a:83:17:ca:28:57:80:5a:e5:65:
1e:6a:fb:80:0c:00:82:b0:62:09:78:dd:1a:e0:3c:cb:43:e4:
bb:e0:27:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:15 2025 by rpki-client