Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/664287EEEAE611EF80191C69762E951A.roa
File: 664287EEEAE611EF80191C69762E951A.roa (raw, json)
Hash identifier: 3GHRDD2wzTaDbvW72CDgppPtLwbzyDkx3k/arR2Q818=
Subject key identifier: 26:01:FF:E3:28:4D:D9:5F:2F:47:C3:90:57:44:6B:7F:5C:33:77:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012353
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/664287EEEAE611EF80191C69762E951A.roa
Signing time: Fri 14 Feb 2025 15:14:35 +0000
ROA not before: Fri 14 Feb 2025 15:14:31 +0000
ROA not after: Sun 04 May 2025 15:14:31 +0000
asID: 149440
IP address blocks: 156.227.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74579 (0x12353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 14 15:14:31 2025 GMT
Not After : May 4 15:14:31 2025 GMT
Subject: CN=67af5ddb-cf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:74:bb:94:73:79:9a:b9:98:e4:27:67:e9:5c:
4e:51:b2:69:22:d5:d5:f3:ca:58:31:be:b7:27:16:
2b:3a:e4:4c:7e:ad:65:ac:e9:e5:3c:8e:d4:be:9f:
9f:19:31:fc:48:a5:79:1e:52:0a:14:c2:5c:1e:6b:
bb:50:2d:60:f7:fd:a2:49:56:c8:11:e2:d8:e8:00:
a3:93:28:33:1f:98:b6:e5:4b:a8:4d:3f:9d:fc:31:
b2:56:65:38:bf:ac:e2:4b:f8:ac:86:2a:a6:57:4b:
d4:f6:d7:e4:12:fb:67:bf:4b:f3:ac:d1:a0:e6:c8:
09:a0:42:a4:b8:ac:48:0d:98:94:cc:03:52:cb:f9:
a6:ba:c8:b4:0d:ca:32:71:4f:1b:e8:e2:6d:09:92:
78:48:57:a7:b8:95:d4:82:e8:6d:a1:6d:8a:b3:6c:
c1:1c:62:3a:a5:8a:9a:97:d9:a9:3c:10:a2:36:40:
a2:66:63:90:31:69:26:33:f0:cd:44:fc:29:f4:23:
94:e0:71:97:ae:08:b6:c0:50:2d:62:b1:27:c4:d3:
2b:97:7c:e8:95:e1:7b:b3:4d:cd:80:7e:04:15:36:
76:af:2f:7e:b9:38:75:6e:aa:c0:29:a5:7b:3d:6f:
57:e1:6c:27:ed:70:09:ad:03:67:bf:59:44:b1:2d:
51:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:01:FF:E3:28:4D:D9:5F:2F:47:C3:90:57:44:6B:7F:5C:33:77:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/664287EEEAE611EF80191C69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:68:84:f6:82:8c:37:c9:5c:5f:cb:26:6a:21:1d:d8:f0:f2:
f2:5a:0d:0c:0a:58:b4:17:f6:f9:36:a6:0c:69:9d:2c:60:a3:
f4:eb:fa:ea:41:99:03:c7:71:b9:29:72:e0:cb:a8:69:5a:59:
bc:b2:50:cc:89:d2:8a:cc:74:16:fc:28:c8:1d:49:90:d2:77:
f0:c1:d7:4f:71:8e:7c:d8:00:f6:c3:13:ce:14:e1:a3:44:45:
08:be:41:75:d7:d1:77:0b:45:f7:f2:d3:6e:4f:5e:55:7b:eb:
dd:c7:10:0e:ee:a2:98:3b:74:fc:e3:e9:df:4c:d5:79:7a:75:
c2:53:5f:dc:f0:59:7b:ed:ea:ec:98:47:07:97:dd:b9:49:b1:
f5:f2:da:2c:62:81:6b:8b:82:64:a0:34:7c:a9:76:6b:08:a4:
56:ea:3e:cf:33:ca:b9:6c:ff:32:75:97:f8:da:5e:50:eb:74:
78:4d:ac:e1:b8:69:0e:aa:80:38:00:16:0b:10:08:dd:87:c3:
08:26:c5:c5:26:18:c1:7d:ce:a8:22:78:1f:08:29:78:99:2e:
49:ec:b0:4f:82:28:fa:0b:88:96:fc:db:ae:d8:11:84:8b:75:
bb:2b:39:b0:dd:29:24:36:39:b3:c0:c9:87:6c:f3:9f:e9:94:
02:bd:eb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:55 2025 by rpki-client