Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49CAA544F4AD11EFA823C1BA762E951A.roa
File: 49CAA544F4AD11EFA823C1BA762E951A.roa (raw, json)
Hash identifier: 5ZLe98M3Vdt5QCQPU+zss4BymdO95npV4eLQMTvZLQI=
Subject key identifier: 59:97:4F:A9:37:8A:C0:85:36:C1:68:03:67:C4:8C:53:7E:28:FB:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0138A0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49CAA544F4AD11EFA823C1BA762E951A.roa
Signing time: Thu 27 Feb 2025 01:50:58 +0000
ROA not before: Thu 27 Feb 2025 01:50:54 +0000
ROA not after: Sat 19 Feb 2028 01:50:54 +0000
asID: 17561
IP address blocks: 156.229.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80032 (0x138a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 01:50:54 2025 GMT
Not After : Feb 19 01:50:54 2028 GMT
Subject: CN=67bfc502-4cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8c:81:7c:9c:c6:4e:70:c1:5a:bf:3d:27:bc:
7f:c7:1b:36:5a:76:e9:54:4e:82:9b:37:a2:b1:96:
40:f2:de:d6:21:c7:06:af:7a:db:64:bc:c2:01:79:
8f:6b:5e:a4:10:00:f7:15:8a:ea:0d:1d:12:c6:97:
56:ad:0b:e1:10:7d:88:b5:2f:a7:d3:ab:5a:7d:64:
28:e1:64:99:77:39:3e:0f:e0:f5:6f:26:21:6c:e2:
60:24:1d:5a:0f:dd:be:5a:37:3b:95:d8:11:4f:2e:
43:9d:1d:d7:c9:53:3a:c6:0a:9b:47:1c:aa:7c:04:
4e:67:f7:58:3e:9c:ea:d3:ef:b7:fe:a4:a0:c7:a2:
40:3a:08:47:6e:6d:e8:82:8b:f4:1f:fd:68:c0:31:
d6:92:51:28:43:20:62:90:77:05:98:12:43:ec:82:
91:c6:84:ec:ae:07:af:bc:32:4e:93:29:6c:19:16:
b2:05:e5:5a:cb:bf:4c:92:64:e3:a7:f4:36:83:df:
81:35:e0:39:29:4c:61:ea:94:50:be:03:a0:e9:e3:
42:b3:a0:65:d7:6f:e6:51:13:56:fb:b0:5a:da:aa:
b1:75:04:79:ee:56:4f:46:93:8c:31:a3:c1:8d:3f:
33:01:80:6c:e9:da:76:46:36:4a:6b:d9:8c:d1:93:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:97:4F:A9:37:8A:C0:85:36:C1:68:03:67:C4:8C:53:7E:28:FB:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49CAA544F4AD11EFA823C1BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.125.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:2c:20:98:71:50:b7:45:4e:7b:37:c7:a7:00:fb:87:f6:79:
e4:57:02:e2:22:36:be:80:c9:72:9a:c0:08:cb:75:40:17:a7:
d6:fc:d4:f8:26:43:18:99:d3:56:35:6e:47:ba:d9:50:55:ac:
fd:96:13:52:49:d9:23:f1:20:e6:e6:3c:41:43:f5:2c:ee:19:
64:6b:77:7d:a7:12:68:23:87:ac:39:bc:df:c7:9a:fd:23:d7:
18:fe:43:8c:3d:0f:3d:cc:89:0c:56:33:3e:c4:7f:13:d8:42:
85:ec:39:d0:50:6e:94:32:6c:c2:89:0a:2f:58:e3:70:e4:dc:
55:b1:85:80:84:8e:f0:bc:d0:7a:d1:90:87:33:15:76:b7:92:
6b:31:7d:fe:f2:18:6b:7e:74:39:0b:36:56:b0:18:6b:d1:a8:
d4:cc:21:0a:af:5e:85:90:dc:8b:83:01:b6:b6:cd:cb:29:b1:
cc:db:dc:13:43:00:8b:bb:a0:d3:c2:14:60:d7:9b:3b:35:5f:
a7:32:aa:4d:bd:d9:45:15:fc:48:b9:a2:7c:d2:d4:5e:7b:ee:
71:54:a7:60:32:44:56:29:cd:3c:80:c5:29:54:16:00:73:0e:
f8:68:9d:b9:d3:96:97:e1:ac:48:6d:f2:97:9c:35:0d:3f:f5:
bb:ef:6e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:20 2025 by rpki-client