Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B02C07CF4BA11EF96774DA1762E951A.roa
File: 6B02C07CF4BA11EF96774DA1762E951A.roa (raw, json)
Hash identifier: nmbXBwCQXW4rsDuNilTCir6waFXCwRSlai9r4ekhvIM=
Subject key identifier: 3C:A2:5A:98:90:44:F7:BF:7A:73:0D:37:B6:A4:7E:35:39:03:B5:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0138C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B02C07CF4BA11EF96774DA1762E951A.roa
Signing time: Thu 27 Feb 2025 03:24:57 +0000
ROA not before: Thu 27 Feb 2025 03:24:53 +0000
ROA not after: Sat 19 Feb 2028 03:24:53 +0000
asID: 17561
IP address blocks: 156.229.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80071 (0x138c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 03:24:53 2025 GMT
Not After : Feb 19 03:24:53 2028 GMT
Subject: CN=67bfdb09-9ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:a4:7f:aa:e1:c6:d7:cd:46:5f:93:33:74:
fe:44:62:06:ff:83:20:34:41:c5:cf:95:d4:3b:a7:
f7:f5:8d:49:15:fe:a6:e5:d3:3d:e8:e1:14:e8:13:
e2:c1:88:d8:4b:74:43:86:d6:4f:6e:6a:fb:82:23:
4a:1d:8f:6e:d5:ca:f8:69:f1:36:28:86:7c:2f:b6:
a5:fd:e6:d0:07:e0:6b:52:c7:91:6f:73:ad:c3:30:
2e:f8:b9:ab:75:e5:b3:02:4d:5a:84:0f:0e:8c:64:
ac:f4:d2:0f:c1:89:55:a3:53:71:1b:48:c1:00:76:
f2:10:76:31:b4:5a:a7:e1:79:4d:dc:2d:ff:c7:20:
80:7e:97:a3:94:21:c1:21:10:2c:88:6d:d6:f4:88:
74:4b:3e:36:e7:7a:9f:83:e6:65:02:b5:8f:c0:ff:
a1:d4:b5:c9:3c:ad:64:a3:98:6d:b8:d6:da:e9:0c:
17:8a:f8:c5:52:eb:38:8f:34:fa:dd:28:5a:a4:73:
a4:27:d4:96:35:b0:b7:a6:84:da:30:cc:5f:04:0f:
e4:a9:33:5a:54:85:27:e5:57:d3:08:89:93:bc:09:
4e:a4:28:24:43:6b:5f:bb:e1:44:c8:07:5b:9a:64:
05:ec:f7:f1:90:33:ac:b1:bc:93:6a:d0:d9:bf:5b:
af:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A2:5A:98:90:44:F7:BF:7A:73:0D:37:B6:A4:7E:35:39:03:B5:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B02C07CF4BA11EF96774DA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.237.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:da:b3:d2:92:0b:21:a4:88:2e:09:89:b1:dc:86:91:a8:59:
a6:98:0f:9e:b7:e3:a1:d8:21:77:2f:0d:8e:83:bd:19:6c:0b:
ef:19:c3:28:04:1e:b0:94:8c:41:dc:7f:6f:57:c1:e1:a4:7a:
19:ce:8c:9b:9d:bc:48:83:82:e5:01:a6:e2:31:0a:4d:a5:91:
94:6c:a8:b9:f0:2e:1c:bb:8f:7d:09:55:fe:75:c0:08:7b:13:
92:a1:d3:26:91:4e:99:77:99:e1:71:69:f4:e5:3b:be:28:5c:
ca:5f:e5:6b:5b:76:12:10:ac:d6:a8:7a:59:19:52:ee:8f:d6:
8c:40:49:62:19:52:72:1a:f0:f2:07:a5:8e:92:3a:18:e2:58:
c0:00:15:75:41:56:92:d5:f4:82:ca:d2:87:23:dc:68:fa:59:
08:fa:a5:84:c0:7b:0f:6a:9e:fd:10:58:ae:5f:d4:b0:d5:04:
5b:fb:0e:10:8b:f0:9b:5f:4e:4c:eb:fb:64:13:e2:4f:6a:d4:
f8:b2:c9:e4:03:89:2b:16:c0:37:d3:60:ea:49:a8:02:d2:c1:
a7:00:bf:e5:fa:b5:fd:15:c2:9c:9e:3d:5b:02:09:b5:02:26:
91:3a:31:e6:c3:f6:ac:9a:6f:47:9c:65:85:a1:6d:bf:ac:5f:
16:8d:a8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:24 2025 by rpki-client