Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46506B580A0E11F083CABBAA762E951A.roa
File: 46506B580A0E11F083CABBAA762E951A.roa (raw, json)
Hash identifier: 5H8y+nZamJa0DRoizUYYFBcin+owp52oLrg3PeUR1Xo=
Subject key identifier: DF:8A:3F:90:13:E4:F0:85:11:D6:C2:FE:BE:E2:80:1A:1E:CA:A5:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01481A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46506B580A0E11F083CABBAA762E951A.roa
Signing time: Wed 26 Mar 2025 06:48:07 +0000
ROA not before: Wed 26 Mar 2025 06:48:03 +0000
ROA not after: Fri 26 Sep 2025 06:48:03 +0000
asID: 37512
IP address blocks: 156.229.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83994 (0x1481a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 26 06:48:03 2025 GMT
Not After : Sep 26 06:48:03 2025 GMT
Subject: CN=67e3a327-8568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:de:d7:5e:8d:4a:c2:93:32:c6:5e:99:4a:
cb:19:51:3a:55:1d:56:6d:2f:10:51:6f:f7:c4:f7:
f8:d2:94:30:7e:c6:2c:c3:47:5e:59:0b:cb:50:75:
3b:49:e2:3b:ba:20:34:29:15:73:10:3c:45:e0:46:
50:16:9e:7c:f4:1a:4a:5e:52:4f:23:20:dc:18:90:
02:99:8b:d9:34:f4:e3:cd:2a:29:dc:68:82:f6:86:
74:d5:00:05:39:87:e9:da:ff:17:07:05:25:53:82:
2d:cd:e3:cb:36:7f:17:4b:3c:a4:09:9f:a1:7f:1b:
84:2e:2b:46:62:43:91:19:e6:74:c4:83:ee:46:7d:
89:f3:88:fa:a1:ee:aa:17:a0:4d:a9:67:fe:ca:33:
65:6e:bc:51:74:40:25:32:fd:39:10:0d:62:49:60:
7d:9c:36:fa:a8:b2:8d:9a:5f:12:03:12:0e:2b:61:
71:b1:86:8d:ec:de:3d:c3:87:94:45:81:3a:12:68:
85:47:17:4a:9a:10:a2:e4:05:cd:df:16:2d:aa:b4:
0c:6c:02:cc:27:60:5c:c5:64:83:0a:6c:08:9f:c4:
57:f0:d9:bf:c5:7d:aa:84:ae:44:df:90:1d:ad:ac:
2e:ae:da:2b:98:3c:71:9e:74:9f:ac:10:89:59:65:
c3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8A:3F:90:13:E4:F0:85:11:D6:C2:FE:BE:E2:80:1A:1E:CA:A5:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46506B580A0E11F083CABBAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.78.0/24
Signature Algorithm: sha256WithRSAEncryption
01:94:a1:da:ed:30:b9:35:2f:59:63:4e:6a:ab:b1:11:0f:96:
a3:7c:c8:5a:93:f8:0e:f4:f8:fa:26:0d:32:6e:6a:6b:83:9e:
a9:b1:02:16:4c:9c:b0:98:78:08:17:f3:90:8b:a3:4f:85:2c:
4f:d1:95:a6:ce:0c:d2:79:c0:82:ce:04:c8:ab:51:c5:cb:e4:
99:48:3b:f2:ec:45:87:78:05:0c:ef:05:c5:df:d1:a7:f3:8c:
ee:91:58:a7:58:b7:0a:ae:36:4e:43:4a:62:32:12:5b:81:02:
9e:1d:bf:49:d6:63:cb:a5:ce:44:00:ee:5a:e6:8c:96:96:bf:
65:bd:43:00:e0:57:b3:97:e5:a6:be:34:35:b8:76:95:40:de:
88:cb:89:b3:94:d3:2c:61:76:6f:d8:a3:a4:bc:06:90:33:f8:
59:1d:f6:cf:26:6d:e6:ac:17:ca:64:de:92:61:3d:fe:3c:5b:
b2:13:e9:f7:60:76:66:9e:85:56:d3:b7:79:68:1a:a3:8f:11:
07:75:24:d5:f6:83:82:ee:b5:4a:c3:dc:0a:7b:7d:62:7f:00:
2d:28:b9:f3:28:2b:02:f9:b2:3e:ef:be:d4:29:fc:f4:bb:9a:
71:b0:55:84:5d:a7:9b:35:00:f2:6e:1e:ed:26:a7:12:e6:cc:
4b:b8:79:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:57 2025 by rpki-client