Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62288B4CE53511EF942A2E5D762E951A.roa
File: 62288B4CE53511EF942A2E5D762E951A.roa (raw, json)
Hash identifier: b/AOcaIicupm+jV0igNrXISu2XBsE1AdFflQLl4C39U=
Subject key identifier: 32:AA:49:04:97:38:25:AD:9F:CA:B4:67:D2:49:1C:6A:75:85:BE:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011CA6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62288B4CE53511EF942A2E5D762E951A.roa
Signing time: Fri 07 Feb 2025 09:24:51 +0000
ROA not before: Fri 07 Feb 2025 09:24:48 +0000
ROA not after: Mon 13 Dec 2027 09:24:48 +0000
asID: 17561
IP address blocks: 156.230.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72870 (0x11ca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 09:24:48 2025 GMT
Not After : Dec 13 09:24:48 2027 GMT
Subject: CN=67a5d163-93c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:42:a2:7f:58:2d:9f:34:9a:c8:47:32:29:
33:b4:81:e4:4d:15:9d:d3:9e:67:8c:bb:1c:e9:9f:
23:f6:12:ee:82:39:c8:a9:2c:61:e8:2e:f1:70:85:
b5:c1:3d:03:25:c6:5d:54:e3:ce:bf:3d:75:3e:da:
89:d6:c9:fd:bb:9d:5e:75:d0:5c:e9:c9:b9:8d:b0:
7d:29:13:df:71:1b:f4:82:c7:09:6f:7c:6d:3c:e1:
e1:f3:01:48:29:27:cd:57:3d:34:bf:cc:a9:7b:16:
05:03:c9:5e:da:cd:df:08:ce:0e:e1:e1:47:0e:61:
1e:d3:ca:b0:ea:80:24:6f:47:b0:f6:bc:3b:79:60:
3e:12:53:90:b0:5f:e0:eb:5b:8b:3b:6e:7a:79:21:
0f:12:79:85:91:71:9f:7f:3a:31:5d:11:47:f2:82:
08:f9:09:e2:98:41:1d:3d:b2:9b:d3:cd:22:63:ab:
a5:16:ea:d8:d9:de:45:cd:32:d3:39:1b:48:44:ab:
45:33:3a:f3:e0:a2:4e:fd:fb:dd:bb:d9:dc:e7:91:
86:d9:b3:13:a1:18:ee:8a:94:62:7b:1b:37:30:a8:
0c:27:d3:42:a0:6c:b9:37:d3:c5:78:d6:bd:4c:73:
a4:0a:55:c8:16:49:ea:b8:56:bd:b5:eb:79:11:51:
91:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AA:49:04:97:38:25:AD:9F:CA:B4:67:D2:49:1C:6A:75:85:BE:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62288B4CE53511EF942A2E5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.128.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:5d:8c:07:ab:eb:74:e4:c8:4a:47:1c:a2:c6:93:8f:10:c8:
45:68:55:e0:54:d7:7c:d2:83:7c:c7:47:8f:60:8a:ed:e3:37:
61:2f:44:26:9d:1e:10:dd:9a:4e:da:b8:89:9a:89:3e:c6:8a:
9a:a0:7f:d6:04:ed:1e:1e:42:ce:88:30:f0:d2:c5:ed:1c:59:
6a:cf:e2:10:32:8f:e0:aa:83:de:49:02:78:ed:e6:aa:ae:38:
f8:e3:6d:aa:7c:2c:36:df:7f:4a:9c:57:86:5b:b4:05:f2:ba:
2b:2b:f1:c1:8c:a7:d2:c1:d4:bf:c2:d7:37:69:ce:57:90:b9:
e0:7c:a2:d2:ae:b3:01:de:12:1d:2e:ea:64:69:00:1a:d1:9b:
fd:74:a7:8b:36:d3:14:f2:30:a4:67:1b:92:37:d8:e2:ea:43:
25:cb:e4:76:e6:96:a2:94:06:4d:e4:8f:e0:6f:56:18:69:70:
71:a2:b7:99:f9:d8:35:f8:cd:b9:76:97:cf:62:d4:93:d4:4a:
c9:43:3e:3c:96:22:d9:7f:86:aa:f3:4a:a0:d5:7a:ad:67:da:
5d:3c:e9:f6:9d:15:91:28:3d:26:4d:b4:2e:8c:9f:68:a9:23:
16:bf:36:ee:86:42:99:8b:e5:ce:60:21:e1:c5:a9:07:6f:2b:
4a:7a:46:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:07 2025 by rpki-client