Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C21BB50FF3011EFBDFA80B8762E951A.roa
File: 5C21BB50FF3011EFBDFA80B8762E951A.roa (raw, json)
Hash identifier: RfAPnooDKRxjKqipYZz1tYkiQ6pgkhfXaOzyfWEUcMc=
Subject key identifier: 3B:0A:66:35:E6:1F:0B:5F:92:B4:D9:2A:6A:7E:A8:13:5D:1A:75:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01454C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C21BB50FF3011EFBDFA80B8762E951A.roa
Signing time: Wed 12 Mar 2025 10:54:24 +0000
ROA not before: Wed 12 Mar 2025 10:54:20 +0000
ROA not after: Thu 24 Apr 2025 10:54:20 +0000
asID: 395886
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
156.239.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83276 (0x1454c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 10:54:20 2025 GMT
Not After : Apr 24 10:54:20 2025 GMT
Subject: CN=67d167e0-cdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:5f:4a:f9:4c:05:bb:04:e5:2b:94:d8:38:
ab:b5:d1:23:6e:99:73:32:19:4a:3f:2c:f9:42:0a:
13:c4:85:1a:46:10:37:1b:ca:c4:ca:1c:3a:28:c1:
28:4b:72:8d:ae:0c:4a:e5:d2:dc:a3:1d:bf:94:0f:
f2:05:d4:0d:58:ad:7b:10:2a:1f:e4:09:d6:4e:7d:
bd:1a:5a:d6:08:fe:d8:c2:1f:af:e1:af:36:ba:e7:
10:2a:71:79:16:d3:2d:50:57:e8:35:fd:c9:33:6e:
d3:81:a9:cd:09:86:02:3d:3f:0b:f9:95:a1:78:90:
62:35:8f:12:47:ab:fc:e6:5e:a4:07:eb:50:3d:cd:
b0:21:fa:c1:4d:45:75:1a:83:a3:06:d3:73:51:9b:
48:2e:00:a6:a6:06:f4:4a:e8:69:c0:e8:d8:38:d2:
7b:c1:5b:01:bb:78:1a:1b:55:38:77:f4:f7:22:82:
6d:72:2e:84:c8:1f:00:bb:3f:0f:db:7c:d1:88:05:
e4:db:97:6e:e1:0e:5f:03:17:e3:9f:e7:80:89:ba:
06:df:d4:4e:42:80:4b:3b:a6:e3:ae:97:fd:99:05:
c4:ba:c6:88:cc:c0:7f:62:13:b9:09:87:8f:19:6b:
a8:5c:be:09:41:8a:8a:96:5f:4d:94:34:9f:27:36:
c1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0A:66:35:E6:1F:0B:5F:92:B4:D9:2A:6A:7E:A8:13:5D:1A:75:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C21BB50FF3011EFBDFA80B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.53.255
Signature Algorithm: sha256WithRSAEncryption
63:1a:e6:5b:0a:d5:bb:39:68:35:43:b9:16:10:3b:3d:10:b7:
b6:6b:ce:e5:ed:45:4f:13:f2:9d:c3:cb:24:bf:79:44:2e:58:
fc:63:2f:8c:7e:89:42:74:18:71:cc:6b:ae:2d:dc:eb:ea:dc:
eb:db:96:32:84:22:5d:84:73:49:8f:74:8a:f0:0a:e2:fb:bd:
10:35:cd:03:20:92:20:a0:f3:e7:06:9d:75:52:57:5a:cc:f1:
30:c0:89:98:a0:66:eb:3a:ea:20:22:0b:c0:55:59:c9:82:ea:
c2:85:3e:20:cb:37:b9:a2:64:d7:8d:46:79:b6:ea:20:f8:d3:
61:0d:9f:68:cb:40:e3:e1:9a:97:21:39:4d:83:14:29:52:2b:
69:31:b0:16:20:fc:d0:31:ed:58:89:ee:dd:60:c5:54:5d:6a:
3a:fc:e6:ac:3f:b1:8f:1b:39:9e:5e:d7:21:02:3f:c6:8a:12:
0e:5d:17:44:f4:54:d7:27:cc:60:07:de:4d:2a:33:51:97:b1:
ee:47:f6:a5:78:9c:b1:79:f3:34:ab:11:4b:18:22:aa:ed:2c:
2e:a5:b1:dd:89:55:67:56:5e:2d:cf:7a:bc:b4:f4:97:b8:ce:
c4:10:b7:c2:06:23:96:98:31:a8:c3:ea:f8:fd:95:5d:67:19:
b7:da:08:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:05 2025 by rpki-client