Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5845BA3AE9B511EFB7F238A8762E951A.roa
File: 5845BA3AE9B511EFB7F238A8762E951A.roa (raw, json)
Hash identifier: rqPo1gGHoq4DQTBYisYF+tXRbIde6CF0txdHqegSrEg=
Subject key identifier: 29:04:05:A0:E2:C2:AF:08:B6:2B:2D:B4:15:11:74:5D:E2:35:E3:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0121A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5845BA3AE9B511EFB7F238A8762E951A.roa
Signing time: Thu 13 Feb 2025 02:50:55 +0000
ROA not before: Thu 13 Feb 2025 02:50:51 +0000
ROA not after: Wed 31 Dec 2025 02:50:51 +0000
asID: 17561
IP address blocks: 156.236.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74148 (0x121a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 13 02:50:51 2025 GMT
Not After : Dec 31 02:50:51 2025 GMT
Subject: CN=67ad5e0f-5371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:e5:63:a8:47:48:0c:0d:c4:47:c8:e5:f8:
c7:54:e8:38:f6:a4:be:bf:ef:bd:68:80:86:95:d0:
0b:7d:59:eb:50:b6:d7:dc:9b:d6:1f:1f:48:a7:65:
a3:72:3b:03:30:ad:d9:e9:f3:95:54:ba:e3:20:47:
e9:29:27:1f:7d:52:21:30:0b:33:65:e4:d0:1c:b9:
d6:f4:cd:eb:79:dd:b6:33:0e:85:35:e4:0a:96:ef:
fe:d6:2a:47:f2:2b:15:6b:28:ab:41:3e:11:a9:b4:
ab:de:da:47:a5:f0:15:a1:ad:f8:8a:0e:7f:be:77:
9a:8e:02:12:e8:2e:1c:86:6e:ef:36:3d:a8:1f:6a:
8c:c1:76:c2:51:05:67:46:5c:6a:5c:b3:6a:a7:14:
f7:c1:4e:a0:a1:b7:9b:ab:84:5c:59:5a:cb:6d:c9:
04:f2:85:0f:1a:ed:51:5f:d0:8b:47:06:29:87:dc:
13:22:37:79:6a:36:01:04:9c:6e:c4:65:ec:a8:8e:
1a:b8:fc:45:c1:60:fb:76:e8:10:0a:46:da:0f:57:
f6:ae:57:31:38:b4:53:25:88:ab:41:7d:0f:29:bd:
c6:85:56:20:98:d5:1d:16:ad:58:7a:c8:e3:18:e7:
7b:fc:a3:78:ae:d5:e9:7f:4b:56:16:ee:25:f1:b9:
d2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:04:05:A0:E2:C2:AF:08:B6:2B:2D:B4:15:11:74:5D:E2:35:E3:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5845BA3AE9B511EFB7F238A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.32.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4c:ff:9c:0a:9e:dc:98:d6:26:18:77:37:bc:e3:f2:2e:ae:
0f:ac:b0:00:50:37:c5:99:6d:ed:c2:b4:a9:8e:9d:f8:4e:1d:
d1:ed:c2:ac:64:ba:81:78:48:c4:fa:fb:08:e8:93:b2:f8:68:
db:67:a0:df:53:2f:49:99:53:87:64:b3:0d:98:d8:b8:a1:77:
e9:67:e7:58:4e:55:f3:6a:ef:6b:bf:aa:39:12:28:eb:3e:91:
2c:0d:bb:11:83:b3:11:d7:a7:d6:a0:f4:fc:bc:0c:96:f9:d8:
9b:a0:44:91:ff:1e:5a:43:5f:9d:37:fd:be:28:0d:b2:60:bb:
fa:44:7f:1d:04:95:cc:14:ef:e1:fb:3a:cc:2a:4b:cd:e0:dc:
7a:80:6e:17:b4:ca:f4:5b:ee:a3:8d:b3:00:8f:32:6c:fe:43:
54:0a:05:32:23:5d:ec:0f:07:dd:6f:ad:4a:fa:8a:05:d3:d9:
05:11:00:81:9e:34:ae:af:26:d7:78:46:24:9d:c0:fd:dc:ab:
48:22:eb:d0:62:3b:41:b5:33:d6:85:48:41:93:66:da:20:2a:
42:3c:bd:b0:02:b3:01:59:75:25:cc:61:8e:43:6b:c2:70:d5:
cb:35:f3:55:39:d6:00:03:3c:d9:34:82:d6:b8:ac:24:55:d8:
be:c2:f4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:33 2025 by rpki-client