Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68EAC7FEFCD411EF99A9209A762E951A.roa
File: 68EAC7FEFCD411EF99A9209A762E951A.roa (raw, json)
Hash identifier: PK5n+xAF77tM4LGj3B+y32q1s3ywZSnkbir7XQxjF1s=
Subject key identifier: 17:FD:A2:54:14:80:21:AA:20:44:27:35:B1:71:AA:17:2D:4E:61:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01445D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68EAC7FEFCD411EF99A9209A762E951A.roa
Signing time: Sun 09 Mar 2025 10:51:09 +0000
ROA not before: Sun 09 Mar 2025 10:51:06 +0000
ROA not after: Sun 27 Apr 2025 10:51:06 +0000
asID: 20326
IP address blocks: 156.229.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83037 (0x1445d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 9 10:51:06 2025 GMT
Not After : Apr 27 10:51:06 2025 GMT
Subject: CN=67cd729d-c63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:c7:e0:50:da:45:9c:e8:41:62:34:4b:72:
35:8f:fa:df:13:0d:58:62:30:ff:4a:61:a7:0d:71:
80:c7:3a:5a:ca:01:b0:54:a3:55:c0:12:ed:7d:79:
d6:9e:d9:09:b7:82:bd:cc:97:e6:d8:90:34:19:c5:
4d:77:42:3b:5f:27:3f:dd:f3:eb:28:73:7a:20:06:
45:a1:6c:5e:94:3b:58:b1:9e:8a:d3:26:64:cf:78:
c8:b4:05:06:74:2a:9d:17:a4:ed:65:66:22:bf:4b:
15:39:91:7c:d3:eb:b9:1c:99:d2:5e:7e:75:fa:47:
0d:29:da:65:63:e6:be:7c:79:f8:6e:25:13:b8:67:
56:a4:bf:93:a3:e7:41:6c:b5:16:d5:ea:4f:47:fb:
ae:f4:99:db:e8:b7:dc:7f:2e:20:95:fb:22:66:4b:
50:7d:03:d4:ec:1d:ca:59:53:78:13:80:6b:20:9d:
e2:14:29:35:7d:af:62:a6:cf:9c:f4:9d:3c:f7:6b:
3d:60:77:0f:5b:a8:9d:86:31:f0:f4:7b:03:4c:a7:
46:2e:b1:18:9a:cc:9c:c1:d7:f5:04:f6:6a:64:e7:
69:45:3d:f5:0d:b6:25:96:35:f5:f9:87:b1:88:c9:
04:e2:86:66:d3:97:ea:bc:86:20:73:78:cf:a1:f6:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FD:A2:54:14:80:21:AA:20:44:27:35:B1:71:AA:17:2D:4E:61:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68EAC7FEFCD411EF99A9209A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.26.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c4:b0:ca:02:c7:c2:7f:57:69:0f:4d:48:69:63:07:9d:50:
6a:c0:30:aa:cc:30:65:70:1c:f6:ec:64:31:3a:e0:8e:c8:0f:
00:2a:60:ab:89:f0:2c:34:eb:97:35:13:63:22:72:ae:5c:d9:
8b:d9:35:5c:39:a5:73:85:cc:ad:97:47:91:e4:07:b1:57:70:
2f:36:dc:dc:79:fe:a2:30:21:e4:27:49:0b:fb:ff:1b:f9:91:
ad:ae:7c:ac:2d:55:78:ee:fe:4c:bb:ca:f0:6d:89:3f:2e:84:
6b:b8:af:50:44:dd:4d:00:d0:ca:08:cd:25:47:cc:98:da:14:
53:bc:55:2b:c8:c5:bb:22:04:ce:38:ce:b4:9e:99:d3:ed:39:
3c:c5:1e:37:70:3a:4c:76:42:a1:80:83:80:54:0a:89:94:f0:
09:75:7e:81:4a:24:8d:ba:09:d7:18:8f:24:0e:dc:09:83:70:
26:4b:b8:96:54:ea:f1:ef:db:bd:21:78:63:5f:e8:04:10:e5:
d2:7d:a3:d3:15:dc:4f:9e:38:53:50:62:45:73:26:ce:ed:80:
42:4c:f6:78:99:f5:ef:0a:49:d1:28:3e:fe:2d:6c:b0:02:5a:
63:53:8b:86:fe:87:da:e5:f3:db:47:b8:6d:6e:d5:f7:a9:c1:
b3:57:bf:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:51 2025 by rpki-client