Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8730DD7AF46911EFAA3ACB66762E951A.roa
File: 8730DD7AF46911EFAA3ACB66762E951A.roa (raw, json)
Hash identifier: LrVPV92O+f/1JL935JWAy8JMTrzfJfTQIRsgL2QjW84=
Subject key identifier: 8B:AE:92:84:DD:0A:80:B8:FB:4F:AC:31:AF:01:53:1A:E3:A0:39:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8730DD7AF46911EFAA3ACB66762E951A.roa
Signing time: Wed 26 Feb 2025 17:45:55 +0000
ROA not before: Wed 26 Feb 2025 17:45:51 +0000
ROA not after: Sat 19 Feb 2028 17:45:51 +0000
asID: 17561
IP address blocks: 156.233.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79317 (0x135d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:45:51 2025 GMT
Not After : Feb 19 17:45:51 2028 GMT
Subject: CN=67bf5353-34a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:54:d1:a6:9b:af:09:6d:8b:53:45:b3:0d:f0:
13:a8:1d:24:6e:a8:43:9b:a8:f0:98:7d:12:9a:36:
db:dc:87:2b:8d:c5:16:03:21:24:cd:8e:36:cd:77:
00:f4:ee:f8:a4:28:67:6f:06:92:2a:92:e1:63:0a:
95:1c:47:71:6a:f2:51:25:bd:3c:19:4c:fa:c8:81:
f5:8b:fd:af:45:f9:03:bd:51:49:1c:fd:c3:15:f7:
17:73:f7:5e:fa:48:8a:6b:6c:1e:24:b6:d5:be:c5:
2c:87:d2:b6:d8:79:de:fc:9c:67:63:00:a2:33:6d:
28:70:03:a1:fc:08:5b:d1:3e:ff:ec:7f:4b:24:53:
2e:e3:6f:02:b4:cf:2f:36:87:58:c5:bf:00:be:ea:
b4:b9:7b:8a:81:7d:5f:dc:b8:fd:0e:43:c1:07:bb:
bf:b6:5b:c0:76:21:85:f1:5e:0a:97:32:f4:93:26:
6d:a4:bb:27:b5:bd:ff:04:20:f2:34:93:ab:35:4e:
cd:07:2d:09:1e:0d:e4:85:f0:56:26:e8:11:0d:58:
20:bc:cb:6a:73:96:33:94:f0:f4:a4:d1:e6:9b:d4:
97:36:74:87:9a:f6:e1:d8:1f:d7:ad:ea:9b:b3:f0:
a6:6b:6e:79:cf:c9:c4:c9:72:ce:d0:ab:19:c4:44:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AE:92:84:DD:0A:80:B8:FB:4F:AC:31:AF:01:53:1A:E3:A0:39:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8730DD7AF46911EFAA3ACB66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.100.0/24
Signature Algorithm: sha256WithRSAEncryption
17:de:e2:49:71:3a:e1:ac:30:9c:ee:b5:b3:be:c0:6e:24:b7:
71:ec:7c:2c:94:f3:e0:98:53:be:eb:98:9a:36:b4:ce:4f:ff:
86:48:07:e2:b8:08:df:13:87:ae:63:c2:d5:00:dc:ad:19:6c:
29:3a:d8:6d:b3:19:a3:29:4c:68:ff:6d:96:14:1a:c4:50:42:
ef:94:2e:cc:75:1f:36:11:20:54:41:d7:92:2a:bf:4d:9f:d4:
e9:69:93:e3:35:4d:19:fc:a9:81:26:b8:17:86:73:11:8b:70:
b6:18:41:fe:0c:d0:49:12:1b:b1:fb:fa:35:2d:b5:32:57:4a:
bd:70:f9:d7:85:c3:06:ef:c0:dc:d8:bb:fb:e2:e8:34:2c:1a:
69:0b:b7:40:74:a4:51:b5:df:fe:e0:1b:13:be:29:bc:7d:ec:
35:f3:ff:89:4d:3a:b8:c7:fc:7e:b7:5c:cc:f9:b5:bf:cd:90:
a0:8f:b8:60:87:99:cb:fe:9d:1b:a1:dd:24:9a:d1:06:40:0c:
0e:89:d2:a4:78:f2:d9:a5:77:6c:09:f4:b8:5c:c2:3e:a7:a8:
00:12:82:1a:27:b9:96:f7:bf:50:de:95:e6:01:39:70:91:59:
cb:79:f8:19:2b:e1:60:6f:fa:58:e3:a7:2c:4b:2a:1b:8c:6c:
48:70:10:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:02 2025 by rpki-client