Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86612CF80A1011F08FD66EB7762E951A.roa
File: 86612CF80A1011F08FD66EB7762E951A.roa (raw, json)
Hash identifier: z0nhArjBvWeIwG5D7IgUFn/VBE/dnGJfuenPoUAqu4M=
Subject key identifier: 5D:CA:41:3C:17:85:26:2F:68:4B:85:A8:A4:D8:9E:59:3C:42:78:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014821
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86612CF80A1011F08FD66EB7762E951A.roa
Signing time: Wed 26 Mar 2025 07:04:14 +0000
ROA not before: Wed 26 Mar 2025 07:04:10 +0000
ROA not after: Sat 05 Apr 2025 07:04:10 +0000
asID: 135097
IP address blocks: 156.250.4.0/22 maxlen: 24
156.250.8.0/21 maxlen: 24
156.250.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84001 (0x14821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 26 07:04:10 2025 GMT
Not After : Apr 5 07:04:10 2025 GMT
Subject: CN=67e3a6ee-52e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:81:86:6b:71:70:1d:d2:09:26:35:40:20:
e9:e8:92:1b:f4:c1:86:65:6f:11:c3:8d:c1:88:5b:
b2:29:bb:fc:2c:f6:68:7d:70:9e:55:14:61:77:35:
d1:d9:13:1d:ea:78:12:bc:e7:b2:4b:b5:d3:72:3d:
71:6f:ef:47:de:69:b8:80:f5:b0:51:2a:78:21:c7:
6b:7f:c3:8a:a1:74:be:66:68:f9:23:fd:c0:6f:19:
22:dc:74:d5:1a:ad:e3:ad:c1:66:b2:5a:01:2a:b4:
cd:5c:c7:88:e7:08:0a:e9:a2:a5:6a:04:67:a8:c4:
61:34:d6:3d:04:30:45:a3:12:ed:d0:55:95:f6:41:
8f:d3:72:12:0c:28:bb:71:43:df:bf:23:48:38:84:
6c:44:8d:76:06:53:23:e1:63:bf:06:8c:16:75:05:
4d:85:5f:a0:d6:08:0a:fa:bc:80:c8:02:94:e4:34:
97:42:71:88:7d:db:db:62:8e:ff:5d:9e:06:9c:ea:
49:47:fe:de:a7:64:ad:fa:16:18:40:a1:2f:4e:09:
96:0a:3b:9d:3f:06:06:4f:54:95:a6:25:76:5c:08:
4d:ae:b9:07:f7:f2:8f:f7:11:68:96:9f:e6:ab:53:
2f:ea:ac:ab:ff:1e:4c:b4:fe:6c:65:16:ef:cc:42:
4c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CA:41:3C:17:85:26:2F:68:4B:85:A8:A4:D8:9E:59:3C:42:78:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86612CF80A1011F08FD66EB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.4.0-156.250.31.255
Signature Algorithm: sha256WithRSAEncryption
76:73:a5:62:ab:7a:a7:a3:00:91:a8:17:f6:08:c9:73:b4:0e:
d5:87:77:dd:4f:a1:12:60:43:8e:75:c8:ff:78:71:d7:93:75:
e6:50:04:c5:be:c4:6f:d8:42:82:e6:3f:b4:fa:84:0d:e5:6e:
b7:ae:2e:0f:55:e6:fb:2a:f0:46:3a:cf:e7:54:52:34:4d:33:
a8:13:3d:df:5d:59:74:1f:28:ec:fa:d1:7c:eb:5c:34:4c:1a:
bc:45:5f:f7:24:fb:8a:05:cf:89:78:ac:16:99:90:bf:0d:22:
8b:1a:fd:77:0d:6a:11:03:9a:55:f5:e3:cb:e6:b9:eb:a3:fb:
1e:db:14:eb:a5:96:12:98:ad:f3:7d:c8:e3:c5:ee:27:30:10:
d3:2d:b2:c8:19:d9:6a:f0:24:89:d7:eb:50:41:47:aa:9c:7e:
16:1a:98:39:f2:61:3f:f6:e4:35:af:7a:6b:da:78:5d:1e:02:
7a:96:98:f8:51:ac:21:9e:4b:f0:dc:95:5a:8c:59:78:66:c3:
94:05:bd:d5:2e:2c:c5:26:c6:54:34:d5:ca:43:11:d9:09:f0:
de:38:56:12:56:d8:f6:48:53:a3:9e:c7:08:12:46:e8:c0:09:
0d:a2:4b:b4:87:37:bd:9b:2e:3b:0d:9c:36:2e:71:4d:0b:bc:
18:77:df:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:39 2025 by rpki-client