Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F49F374F81311EF91F96F77762E951A.roa
File: 6F49F374F81311EF91F96F77762E951A.roa (raw, json)
Hash identifier: 6GJyFPUMHgnKmWqlE42nlaI/uGw9SQAWpQEANfVJtTs=
Subject key identifier: 50:68:66:EA:93:89:5A:A3:04:FB:1E:58:D1:39:53:4A:C2:3C:BA:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014107
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F49F374F81311EF91F96F77762E951A.roa
Signing time: Mon 03 Mar 2025 09:39:43 +0000
ROA not before: Mon 03 Mar 2025 09:39:39 +0000
ROA not after: Sat 05 Apr 2025 09:39:39 +0000
asID: 269070
IP address blocks: 156.249.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82183 (0x14107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 09:39:39 2025 GMT
Not After : Apr 5 09:39:39 2025 GMT
Subject: CN=67c578df-0eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:fa:bd:bf:9b:8a:36:0c:fd:39:83:ac:06:
82:3a:d0:b8:96:0f:42:a2:da:ae:c1:84:5e:51:0f:
86:c1:2c:bd:2f:0a:6a:9a:c4:54:cc:60:c8:60:9d:
7f:8a:f5:98:74:2d:d5:ea:4b:e7:6a:aa:9a:72:da:
e5:fe:e8:6b:9b:21:5e:e8:fa:00:66:f5:6c:f6:1f:
92:23:9f:93:15:14:42:1d:37:c1:cf:f8:4e:6d:98:
f0:ea:3a:d4:33:ed:19:51:2a:6f:d7:d7:a1:fd:52:
49:00:3b:9b:c4:1c:12:77:cb:7a:b5:d7:19:57:52:
b5:27:dd:b9:bd:1a:55:b8:86:31:98:dc:7d:f4:9d:
e3:59:2a:c0:9b:0b:ea:0e:e8:79:bc:57:7b:3b:bf:
32:d6:1b:14:8e:7d:a6:07:86:6d:9f:ed:a1:a2:07:
4d:b3:bd:26:be:7c:04:70:b9:06:0e:59:18:b2:bb:
55:5b:b1:14:bd:3d:6a:33:cc:4f:af:52:6b:6a:e1:
37:e1:c5:2b:8e:22:17:d8:05:c9:bb:df:6d:7f:69:
a9:6b:0d:1c:68:2f:ce:41:16:b3:30:3d:aa:95:49:
f3:0c:ed:a8:9d:07:ee:0b:ba:b7:ca:73:2d:f2:d4:
91:b5:d3:58:50:26:3e:08:ca:70:1b:35:d4:db:6b:
b7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:68:66:EA:93:89:5A:A3:04:FB:1E:58:D1:39:53:4A:C2:3C:BA:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F49F374F81311EF91F96F77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.64.0/24
Signature Algorithm: sha256WithRSAEncryption
69:47:5f:39:9e:61:66:99:3e:77:6f:0a:24:63:77:3d:e5:03:
8c:e5:de:60:4f:74:a3:54:cc:60:a7:c5:a4:f4:cb:8f:c2:20:
5d:4f:d4:2d:9a:e6:71:b5:a3:91:36:cc:64:6f:79:22:40:68:
76:77:01:45:1b:8c:d9:c4:c6:61:8c:12:92:09:1e:ee:a0:2c:
91:f1:ef:f2:48:35:15:30:76:5a:1b:ac:14:38:30:ff:29:2d:
d9:a2:8c:91:5b:05:e3:34:cf:8f:1d:0f:45:ca:8c:e0:cc:60:
1f:e9:58:95:86:a3:70:b1:5a:ef:6b:4b:d3:18:d5:11:22:80:
a4:76:2b:8e:4a:d1:89:2e:1f:44:f9:6b:3a:e6:7b:35:4a:81:
e8:a2:bc:40:ec:4a:a9:94:1f:1a:75:a1:cf:c2:ad:c8:8b:7f:
38:65:ce:cc:e4:c4:01:5e:34:a8:51:f2:b1:fd:f2:a8:68:e5:
b2:b1:b6:38:18:0d:54:9c:71:65:b2:27:c6:e4:50:86:26:d1:
a2:a9:17:ee:3b:e8:06:2d:1d:51:b1:fe:e7:eb:c9:7e:99:77:
1d:f2:63:2e:80:70:8b:80:a1:65:dc:a0:02:d1:74:16:d6:b7:
36:27:a9:69:c9:ea:bb:33:df:ed:5f:63:6b:a9:fb:ef:8b:fa:
ec:88:77:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:43 2025 by rpki-client