Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70D5B820F46411EF84880445762E951A.roa
File: 70D5B820F46411EF84880445762E951A.roa (raw, json)
Hash identifier: 019WSOmoaKV+EgU815tFbko3hVTFzUsuvzj1ymIlSes=
Subject key identifier: EF:9F:E0:7C:75:1B:47:B8:BE:FD:82:F8:48:F6:05:F2:37:F1:9B:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013563
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70D5B820F46411EF84880445762E951A.roa
Signing time: Wed 26 Feb 2025 17:09:30 +0000
ROA not before: Wed 26 Feb 2025 17:09:26 +0000
ROA not after: Sat 19 Feb 2028 17:09:26 +0000
asID: 17561
IP address blocks: 156.233.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79203 (0x13563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:09:26 2025 GMT
Not After : Feb 19 17:09:26 2028 GMT
Subject: CN=67bf4aca-26df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a3:df:be:e5:0d:80:0b:73:71:ee:91:0e:60:
3a:e6:bc:dd:f3:14:7e:ed:45:cc:be:b1:3f:8e:da:
ba:10:10:68:4b:84:2d:48:9b:96:91:b3:28:88:9c:
6c:8d:f3:f2:7c:4a:4b:cd:85:95:bf:57:dc:04:c2:
da:fb:30:46:8c:6d:76:ab:d1:b3:aa:60:88:e4:4a:
9a:be:dc:63:94:96:45:ea:e5:dc:25:4a:1a:3c:95:
0f:c5:9e:d3:9c:10:ea:a6:4b:f1:15:38:cf:64:22:
23:34:32:b6:89:97:a4:b1:65:86:12:d2:c2:ee:42:
80:94:a6:f0:fc:b5:44:86:73:81:43:be:56:50:00:
fa:6b:b1:db:2e:91:80:01:ec:47:a5:02:76:c9:1f:
2f:87:1b:49:21:62:1d:d0:07:c6:5f:c7:f3:4e:0a:
9c:2b:39:08:90:80:c8:db:a3:c5:8f:e2:f3:5b:08:
56:02:c0:6a:44:1f:5c:72:b0:21:95:b2:c6:ae:5e:
a8:f7:d8:06:1e:f9:8f:8b:f3:c0:bc:3c:53:a7:7f:
45:41:72:ad:b6:ef:3d:cd:84:2e:b4:fe:c5:43:14:
55:7a:ac:23:9d:b4:11:9a:57:29:ad:f7:1f:cc:ed:
53:f2:92:40:4e:f9:4f:9c:56:7e:2d:08:b5:d6:ef:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9F:E0:7C:75:1B:47:B8:BE:FD:82:F8:48:F6:05:F2:37:F1:9B:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70D5B820F46411EF84880445762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.55.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b4:05:dc:9d:22:12:40:1c:b8:37:a2:87:a5:d0:41:30:f4:
ac:6e:30:55:99:12:e8:df:51:5a:6b:26:ee:05:8f:73:f0:36:
e8:f8:85:fb:47:b1:9a:d1:7b:97:08:1a:25:17:47:d6:7a:bf:
30:ff:1c:16:8c:30:ba:47:bc:a2:c9:60:87:f1:0f:56:35:5b:
c1:e7:06:f9:d4:b9:66:24:9d:00:55:96:51:f6:48:50:f9:85:
b0:ed:95:10:c0:c0:71:92:72:7c:88:68:58:e2:d4:37:a3:2f:
87:fd:bb:71:63:04:97:d5:b1:2e:c8:f2:e1:fc:3c:b2:61:e8:
87:78:49:6e:0f:f3:02:bf:ce:5f:01:f3:9f:7e:d4:d1:15:62:
fb:ec:09:04:e3:3b:18:35:84:20:d4:2a:ce:37:6a:b0:6d:1a:
36:66:e7:29:46:0f:13:67:8c:09:d4:d7:7d:a1:f8:7c:a1:83:
4c:f0:6d:9a:ef:82:5f:3b:88:31:1c:f5:37:4a:eb:15:f2:4e:
15:1a:a4:10:6d:10:02:27:8d:91:e6:79:d9:9a:51:1b:b5:1e:
6f:14:0a:3b:ed:c5:55:c7:27:09:c9:88:7a:fe:33:fa:a8:51:
2f:27:a0:56:7d:ed:7c:c4:c4:e2:25:8c:84:4d:0d:b3:bb:34:
ba:a3:58:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:30 2025 by rpki-client