Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78F74512D3DC11EF95A2B442762E951A.roa
File: 78F74512D3DC11EF95A2B442762E951A.roa (raw, json)
Hash identifier: Ng5FTlQzdxsmhCFE/zQ0Ky6WhHp8+QQMw6kB3jNv2po=
Subject key identifier: 6C:5A:FB:BE:09:B7:1A:24:49:78:9A:F0:8F:71:E7:3F:80:5F:52:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78F74512D3DC11EF95A2B442762E951A.roa
Signing time: Thu 16 Jan 2025 07:35:35 +0000
ROA not before: Thu 16 Jan 2025 07:35:31 +0000
ROA not after: Thu 20 Feb 2025 07:35:31 +0000
asID: 395886
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67792 (0x108d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 16 07:35:31 2025 GMT
Not After : Feb 20 07:35:31 2025 GMT
Subject: CN=6788b6c7-fd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:89:57:01:1d:04:bb:5c:fe:28:cc:0f:af:
7c:37:72:11:33:cd:a2:f7:31:a7:63:34:b1:ab:10:
16:83:5d:b1:2c:7c:fb:0e:0a:a0:24:fc:dd:aa:fe:
dd:ba:3a:9e:57:72:f8:ac:b2:b3:dd:77:d7:12:36:
cb:5e:93:fe:8f:56:21:39:2e:21:fe:fa:03:e0:b9:
f6:9b:00:f3:16:fe:fa:41:b8:8a:fd:8e:80:87:c2:
70:98:b9:3d:9b:72:25:67:ea:61:cd:ad:43:0e:46:
f8:69:db:33:e2:03:e5:75:50:63:51:57:a7:04:28:
1e:0b:27:58:29:1f:87:6e:4e:3a:3a:b8:1a:83:e0:
45:cb:16:91:cd:37:07:60:fc:07:cf:5f:e4:cd:93:
8b:05:81:b5:ed:e9:b6:a5:28:98:4b:54:51:a6:0a:
c5:04:37:08:60:87:cf:68:5b:cf:af:f1:79:f6:81:
dc:5f:f4:22:b6:3e:b3:97:3b:bd:42:11:d9:0e:3c:
99:03:e9:1f:4e:a5:4f:2b:81:f5:15:ca:fb:16:c8:
07:e1:3f:69:9b:7c:9c:b8:de:0d:fd:1f:ee:b1:28:
03:c1:38:89:f1:01:fe:f3:8d:76:54:fd:ae:9a:90:
84:e6:c9:dd:d5:c5:32:93:72:a5:b5:92:76:0c:d8:
86:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5A:FB:BE:09:B7:1A:24:49:78:9A:F0:8F:71:E7:3F:80:5F:52:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78F74512D3DC11EF95A2B442762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
42:b5:58:b3:34:2d:8a:52:be:1e:60:2d:e4:71:3b:62:49:66:
df:55:44:2a:e2:85:fa:df:9d:21:d6:71:83:ad:80:fc:ab:d0:
88:52:fc:88:92:fc:87:9e:0a:c1:80:0d:95:40:21:8d:4c:1c:
1e:31:83:93:22:96:5d:4f:66:51:d8:6d:46:0d:32:11:cf:c8:
e3:2a:5d:c7:bb:fd:42:85:23:3d:00:db:69:1d:38:d9:5c:28:
05:53:0f:da:6c:71:da:aa:52:fa:f3:ec:92:ba:86:27:13:56:
54:d5:a4:20:f8:6d:17:c4:83:75:dd:68:ed:b8:84:74:1c:97:
00:1c:82:43:be:ad:50:d4:80:fb:fc:c8:27:cb:4d:d1:54:66:
05:ab:77:36:b1:a8:79:d0:a2:ca:44:29:bd:2e:8d:ca:ce:53:
2f:39:e6:ab:f3:4b:e2:08:45:3e:61:39:30:c2:a0:83:10:5c:
3e:3e:f5:d4:82:53:d9:22:83:a7:2f:69:b8:18:22:0f:83:18:
6a:99:bf:14:9f:b2:82:32:26:5a:5a:87:ea:84:b5:67:f0:34:
71:9d:8a:6e:82:cb:f6:39:fc:a0:c5:64:76:0a:96:fd:08:7c:
01:f7:e1:e3:d5:1d:b1:df:22:ac:74:23:98:f0:95:1d:4b:91:
d2:5c:03:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:55 2025 by rpki-client