Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42A7290CF2CF11EFA17A4669762E951A.roa
File: 42A7290CF2CF11EFA17A4669762E951A.roa (raw, json)
Hash identifier: RggjHv+FY6AJFXczvW8+CbjaIOQ+1bjST5AJ6TpiqHg=
Subject key identifier: BB:FE:B5:67:A5:83:52:06:E0:BF:B7:3A:BA:71:77:30:B4:B5:DD:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012C91
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42A7290CF2CF11EFA17A4669762E951A.roa
Signing time: Mon 24 Feb 2025 16:49:06 +0000
ROA not before: Mon 24 Feb 2025 16:49:03 +0000
ROA not after: Fri 04 Apr 2025 16:49:03 +0000
asID: 21859
IP address blocks: 156.225.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76945 (0x12c91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 16:49:03 2025 GMT
Not After : Apr 4 16:49:03 2025 GMT
Subject: CN=67bca302-c434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:55:e7:a4:12:8c:63:52:7a:f9:2e:8b:8f:
43:84:3e:ad:2d:b9:ac:5a:59:f3:10:50:01:2a:e0:
be:0e:bb:77:f8:29:b6:2b:1f:e9:b2:ae:6e:e4:fc:
de:55:ab:49:bf:f3:ba:b5:38:00:a5:56:5b:98:85:
a8:16:d8:f4:43:e7:b3:0f:0e:64:08:46:25:91:51:
07:02:20:ba:46:37:f9:30:83:53:c2:7d:17:07:6e:
1d:3a:36:c6:73:d7:94:02:35:bc:06:53:52:d7:4e:
a5:33:0e:19:17:6b:c6:c0:b7:d0:87:65:17:6f:85:
4c:38:86:49:7c:a4:a7:45:36:7e:7d:7b:6c:c0:ac:
78:b8:01:26:1d:f1:22:24:64:71:81:66:67:97:f3:
1c:a9:a1:1a:a8:eb:9e:38:a3:a3:bd:d7:6d:87:f4:
01:00:98:ef:e6:e8:75:42:35:3c:50:6b:c0:4d:9f:
15:f1:e4:78:26:51:c9:70:6e:eb:ad:08:c5:1a:29:
00:f7:5d:e1:9c:fa:61:b7:4c:1e:51:a7:7a:c6:11:
57:e5:52:a2:37:5a:39:af:a2:bd:d1:76:95:14:99:
fb:6e:75:fe:6b:83:04:34:41:d8:59:8e:85:26:a3:
9f:d0:59:40:fa:c3:81:e8:60:52:f1:4d:ad:db:23:
90:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FE:B5:67:A5:83:52:06:E0:BF:B7:3A:BA:71:77:30:B4:B5:DD:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42A7290CF2CF11EFA17A4669762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.10.0/24
Signature Algorithm: sha256WithRSAEncryption
69:54:49:66:ff:f0:42:7f:49:29:f1:8d:a3:0f:69:3e:4f:12:
77:a2:3e:c7:79:7d:0c:0c:a5:64:5e:c7:38:f3:b1:a3:74:ca:
ba:44:7d:b9:8b:32:cb:05:25:7a:cd:ab:4b:75:d5:9e:68:08:
52:66:f3:8d:9b:53:4a:55:fe:4a:e5:de:51:5d:3b:65:2d:09:
55:7f:88:80:a5:93:10:ed:bd:e7:cc:0f:a6:45:c4:73:11:91:
a4:3e:fa:a7:7b:96:65:1d:4f:53:8c:4b:29:42:79:83:b4:b8:
1d:65:c7:62:11:55:eb:07:de:a4:ac:01:08:e8:ad:d4:92:4b:
a5:be:01:c4:53:ff:92:a1:b5:d4:e9:ea:12:38:0a:25:fa:13:
d2:0f:7b:c2:f8:22:bc:19:ec:a0:28:7f:5a:f4:d9:b7:39:56:
81:75:2c:8d:c7:59:a3:eb:c4:d4:4e:99:5c:f4:b9:e3:28:9b:
11:46:2a:29:2b:13:f3:da:19:56:15:d6:e6:d1:3e:3c:bc:a5:
76:0c:7d:ce:d3:8b:e9:0c:04:ce:23:ee:c8:cc:6b:10:b3:07:
64:08:a3:6c:64:d6:ac:1b:73:bb:2f:5b:0c:fa:f6:62:58:66:
81:38:4a:58:bd:7c:80:aa:8a:1f:44:05:12:b8:4b:16:03:83:
ef:a0:a4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:20 2025 by rpki-client