Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F565864088311F098768ABF762E951A.roa
File: 6F565864088311F098768ABF762E951A.roa (raw, json)
Hash identifier: MN8Kf6nWLuKXvLcBfiUUjkooKkOfot6IhxoF0in0ick=
Subject key identifier: B8:E3:48:A4:ED:28:BA:4C:C0:F6:98:62:EB:F8:61:C8:5C:66:94:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147CE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F565864088311F098768ABF762E951A.roa
Signing time: Mon 24 Mar 2025 07:41:45 +0000
ROA not before: Mon 24 Mar 2025 07:41:41 +0000
ROA not after: Wed 30 Apr 2025 07:41:41 +0000
asID: 153371
IP address blocks: 156.231.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83918 (0x147ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 24 07:41:41 2025 GMT
Not After : Apr 30 07:41:41 2025 GMT
Subject: CN=67e10cb9-d45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:a0:ee:da:fa:8c:7c:75:92:6c:21:37:55:
26:f4:97:bb:cd:f7:86:1f:5d:bd:49:63:36:91:ba:
8f:a5:cf:5f:b3:b6:e3:91:a0:77:09:6c:1d:bc:a3:
52:df:e5:02:d3:3c:49:aa:23:45:b2:cc:7b:ed:eb:
7a:ee:f9:98:74:a9:24:c2:77:ef:01:9c:bf:dd:17:
6e:85:55:39:4a:7d:6f:46:3c:8c:28:ea:a9:10:db:
41:e9:11:9e:3d:d4:61:52:10:81:af:b2:aa:a9:66:
97:13:ba:7c:d2:b7:18:84:22:7c:72:52:2a:a0:a8:
a9:9c:8a:89:84:64:90:7c:f4:10:39:5e:f0:af:61:
68:1d:73:3a:c2:c0:ad:e4:5c:36:16:32:9e:11:a5:
d4:37:e2:01:f9:92:2e:ad:a7:8a:01:3d:8d:7d:31:
0c:bf:c6:f3:32:7f:83:78:b9:25:cd:60:ef:e9:5a:
1c:d6:4d:92:71:74:1a:6f:e5:3b:c2:51:35:03:6d:
5b:ba:e0:68:32:89:d9:76:0e:e2:b3:f9:1f:79:fc:
bc:be:ed:f1:42:ca:01:0f:c3:59:c6:22:40:ea:b6:
52:91:c1:a1:af:0d:7e:71:ea:4d:27:17:d6:1e:a1:
c2:d3:cd:8e:56:48:57:94:87:72:b0:8b:b0:74:a5:
c9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E3:48:A4:ED:28:BA:4C:C0:F6:98:62:EB:F8:61:C8:5C:66:94:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F565864088311F098768ABF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.102.0/23
Signature Algorithm: sha256WithRSAEncryption
44:06:85:56:4d:79:a5:17:36:9a:61:ef:d7:da:23:4e:87:3a:
d8:6f:65:68:0d:17:91:d6:9c:4e:ff:11:05:d3:4a:9d:af:71:
ee:84:25:6f:3b:b8:8d:39:21:1d:23:4c:77:d8:11:b3:57:ab:
4e:ce:a7:fa:89:5f:d3:a2:0f:06:3b:4a:e3:7a:99:6d:4c:02:
ff:e0:ae:3f:61:a0:c4:d6:df:4a:70:9d:6a:b4:2d:4b:16:f8:
9c:e5:ca:e3:09:7c:e5:04:34:8b:94:25:1f:24:4f:62:b2:93:
98:83:fb:9d:c0:21:cc:58:02:3c:e7:ca:02:e0:27:12:6b:78:
3b:f0:1f:2f:11:ff:6b:b7:99:b5:30:8a:8a:20:be:10:a2:6c:
9c:0e:0d:78:49:c7:56:cf:a4:01:ff:19:f1:15:b1:8a:6e:f4:
2c:df:36:33:d6:3e:68:aa:da:4c:7e:bc:e0:0f:c4:80:13:5f:
43:77:47:1f:32:fe:c4:7a:d3:f3:82:38:a6:51:1f:db:2f:9c:
bc:1f:2d:db:3f:18:92:f3:f1:12:15:80:35:60:89:87:05:cc:
04:c0:02:80:6f:b1:b1:b4:8b:08:fd:64:09:24:3d:50:7d:dd:
51:83:4a:91:c4:a2:4f:db:3a:72:aa:2e:8a:9f:53:ce:25:4a:
f6:4c:8a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:43 2025 by rpki-client