Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46C361DCE54011EF858464A6762E951A.roa
File: 46C361DCE54011EF858464A6762E951A.roa (raw, json)
Hash identifier: DnsCrC2zxrc2BUhQc5oxcu8aNgmOGTUvIwMc/QliS0w=
Subject key identifier: F7:BC:DD:0B:07:03:54:5B:83:F9:8D:07:AC:62:FE:37:3E:3A:D7:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46C361DCE54011EF858464A6762E951A.roa
Signing time: Fri 07 Feb 2025 10:42:50 +0000
ROA not before: Fri 07 Feb 2025 10:42:46 +0000
ROA not after: Mon 13 Dec 2027 10:42:46 +0000
asID: 17561
IP address blocks: 156.230.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72981 (0x11d15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 10:42:46 2025 GMT
Not After : Dec 13 10:42:46 2027 GMT
Subject: CN=67a5e3aa-ea14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c6:1a:39:f2:44:bc:42:87:8a:90:6a:1b:0e:
20:0d:33:b9:19:21:19:dd:80:bc:01:53:9e:a6:e7:
c6:f5:42:79:b7:75:26:95:6d:75:6a:aa:80:10:79:
43:44:eb:0a:2f:c4:68:7c:ce:58:44:d0:b8:91:e7:
80:7a:e5:2c:4e:f3:a0:34:fc:58:4b:0a:3c:be:e5:
32:4c:1c:79:2b:ef:57:cc:5a:1e:9b:75:b1:c0:79:
e6:4c:31:27:09:e0:b3:a6:a6:e0:d6:df:2e:ec:78:
f0:90:54:aa:87:88:f3:9a:68:37:f8:09:39:4e:c0:
5b:a0:9d:85:cc:4d:87:a4:97:23:c4:75:0d:ba:3a:
b6:a4:35:ac:62:f5:99:0c:e7:21:1b:8d:a5:86:e8:
7e:7c:51:24:ad:ab:a6:2d:15:d6:1d:a8:97:15:45:
18:3a:7f:75:d0:51:37:aa:5e:02:59:eb:38:7e:22:
c0:5f:15:39:55:f8:8a:1c:4c:46:59:67:ca:92:c7:
de:d0:34:50:09:c1:ac:ce:84:0b:f9:9a:75:42:4a:
1a:cd:62:2c:a4:8e:b3:0f:a4:67:1b:2b:6e:22:28:
26:f8:7b:b0:7e:38:db:00:52:c0:89:6c:2a:39:64:
c7:c0:c0:e3:1e:fc:25:d4:a2:42:6a:79:6f:be:3e:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BC:DD:0B:07:03:54:5B:83:F9:8D:07:AC:62:FE:37:3E:3A:D7:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46C361DCE54011EF858464A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.163.0/24
Signature Algorithm: sha256WithRSAEncryption
44:fd:35:5d:f8:2f:ce:1d:20:47:e6:37:67:14:8f:b8:23:7b:
25:d1:13:28:13:00:01:23:25:7c:e3:7a:90:0d:a6:ac:69:2a:
42:58:19:15:d4:75:92:40:5a:86:b3:6a:3c:2a:3a:79:af:03:
ef:2a:64:a6:a9:1a:b3:a7:b5:bc:a6:2d:21:54:76:08:74:17:
a0:0c:8a:fb:8a:95:02:b5:ac:0b:6c:2d:40:7e:23:d1:08:34:
91:27:dd:06:3c:76:8e:84:c7:eb:f1:41:7f:43:05:a4:ec:1e:
17:26:f2:64:96:d6:59:e6:70:5a:74:88:9d:94:d8:89:d8:a5:
eb:04:67:e5:0d:aa:c6:88:14:92:c4:31:77:a1:e0:c0:03:2e:
47:2d:03:b6:4e:47:7e:fd:7e:ed:50:58:ba:e9:a1:cc:b6:54:
15:85:f7:96:c3:40:61:8a:e1:6b:27:81:f6:22:cd:72:6f:9d:
d0:44:41:07:3c:66:94:cb:ac:0b:00:11:95:0f:e5:3c:3b:a7:
e1:ce:04:b6:c4:30:c7:ee:d4:b1:63:cf:b2:80:90:77:24:d1:
54:2b:ab:28:71:0f:72:fb:22:30:0d:82:e3:b1:00:0a:87:56:
c6:1e:7e:99:a3:02:ec:56:7a:93:61:2a:b3:ed:cf:d7:49:98:
bc:61:3d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:54 2025 by rpki-client