Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/617AED18F67711EFBF46408B762E951A.roa
File: 617AED18F67711EFBF46408B762E951A.roa (raw, json)
Hash identifier: NZEoUk0/klMpvicSfkPohdMu8k07q26UPY/fiksr4Pg=
Subject key identifier: CA:05:18:23:D8:18:C4:05:F9:34:D6:00:7A:08:04:08:C7:87:2E:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013FB1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/617AED18F67711EFBF46408B762E951A.roa
Signing time: Sat 01 Mar 2025 08:30:07 +0000
ROA not before: Sat 01 Mar 2025 08:30:03 +0000
ROA not after: Sun 30 Mar 2025 08:30:03 +0000
asID: 203020
IP address blocks: 156.252.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81841 (0x13fb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 1 08:30:03 2025 GMT
Not After : Mar 30 08:30:03 2025 GMT
Subject: CN=67c2c58f-213d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:9b:28:1d:b2:e5:56:5c:d9:07:0c:5d:de:
e2:cc:fc:7f:da:45:f9:1d:bf:5d:bb:62:e2:a9:4c:
62:4a:00:5f:3d:c3:06:86:9a:9c:5b:f4:9c:5f:e9:
01:a0:02:6e:bb:15:56:fd:95:f3:44:39:0a:7f:35:
bf:57:50:bb:62:9d:56:ca:90:b8:c2:61:5b:86:12:
86:d6:39:8c:e8:82:f8:6e:15:b1:98:d1:7a:55:3c:
47:a6:46:01:49:37:f6:23:b1:56:98:40:70:3a:1c:
9e:fc:be:dc:2d:e8:d0:2a:db:d4:47:fd:54:2f:e1:
07:14:3e:b5:ba:2d:ac:6b:48:f2:7f:fc:d9:ac:7b:
7d:e6:53:08:bd:75:31:40:85:2c:5e:c7:95:db:26:
52:45:e1:df:ec:e9:9d:8e:ea:9f:ae:34:44:0d:94:
c8:f3:f5:21:3c:d3:8a:2e:e1:06:ef:19:de:dd:12:
86:48:07:93:dd:2e:09:f8:d2:ae:78:e0:b9:07:2a:
1e:99:02:64:c6:b7:0e:31:fd:eb:a0:6a:8e:e6:77:
f0:48:c6:7c:fe:af:0f:93:61:67:ba:61:a9:3c:64:
c0:ea:fd:02:f8:76:00:79:15:b8:02:38:39:bf:69:
f9:35:4f:e8:65:22:09:de:2e:32:7e:31:e5:f3:26:
85:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:05:18:23:D8:18:C4:05:F9:34:D6:00:7A:08:04:08:C7:87:2E:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/617AED18F67711EFBF46408B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.232.0/21
Signature Algorithm: sha256WithRSAEncryption
39:f8:ab:b9:2f:bc:ee:3b:40:1f:c3:1a:39:09:8d:b3:3f:9f:
b2:55:14:f4:a6:a6:68:21:5f:58:7f:f8:83:5a:14:68:4a:43:
72:b4:a6:36:09:b2:37:1a:ac:ed:80:8e:6c:4e:52:d0:49:78:
c6:0f:59:af:70:84:0e:35:76:6c:62:1a:85:f8:9e:7b:8e:8c:
76:99:2f:92:23:39:47:f8:b0:02:ea:29:28:9d:5c:24:a6:8c:
c3:68:57:6a:46:cf:08:72:46:48:ee:08:db:19:40:52:c6:d8:
a3:0e:72:7e:81:ec:29:56:15:06:09:77:8f:ec:56:59:a1:dd:
d7:b3:a7:35:69:f5:29:59:31:c6:9e:f3:8e:ee:0a:f0:03:5c:
1a:d3:9e:d1:79:44:30:a2:96:b5:f6:22:b6:50:03:2b:ee:eb:
7c:c4:ba:8e:4a:fe:fa:88:d5:8d:46:27:e7:95:0e:26:bf:5b:
5d:19:c4:54:f1:cc:72:b8:37:b9:6e:47:ed:29:ec:68:e9:73:
97:a5:73:cc:52:dd:55:c6:68:b6:41:1f:8c:67:2f:cc:25:3f:
f5:2b:a4:e9:f9:ca:1f:a4:d5:60:64:9c:7e:79:83:92:78:4e:
38:9d:50:00:09:f8:7d:2a:b5:09:d9:63:eb:ec:48:2d:2c:41:
3c:79:a0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:10:14 2025 by rpki-client