Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BFCC0F4F33C11EFA9901157762E951A.roa
File: 8BFCC0F4F33C11EFA9901157762E951A.roa (raw, json)
Hash identifier: 7ZUNgCRuTuTmXmV5Jh9hpY8hiWeBmIZLsdisY37ErcE=
Subject key identifier: EC:E1:52:23:BC:14:14:4F:8E:8D:F9:6E:1F:50:68:9F:44:60:9C:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012D82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BFCC0F4F33C11EFA9901157762E951A.roa
Signing time: Tue 25 Feb 2025 05:51:25 +0000
ROA not before: Tue 25 Feb 2025 05:51:20 +0000
ROA not after: Sat 19 Feb 2028 05:51:20 +0000
asID: 17561
IP address blocks: 156.249.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77186 (0x12d82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 05:51:20 2025 GMT
Not After : Feb 19 05:51:20 2028 GMT
Subject: CN=67bd5a5d-01be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:26:e9:29:20:da:fc:d4:10:e8:f6:4e:a5:
f0:bf:33:e3:e8:c9:62:e7:d2:06:75:ab:b5:59:40:
52:2b:b8:76:bf:31:34:78:35:8f:ce:8d:69:da:47:
c9:16:20:19:f6:f0:03:66:c9:56:0a:78:6f:a3:83:
64:60:ec:cc:c0:58:be:9d:81:5f:ae:42:3d:f7:f0:
d6:22:7c:76:68:9e:ab:50:3b:bd:0f:b2:47:98:ee:
8e:76:1c:0e:35:f1:d3:79:47:f5:e0:1e:d4:d7:0b:
99:ce:f3:ff:8a:2a:5e:a8:c8:fa:2c:70:23:b1:69:
51:4c:a2:87:3f:10:25:79:a1:87:2d:9c:78:a3:b3:
db:4c:cd:28:cb:22:ed:69:5b:01:42:17:6e:a1:df:
3f:83:da:02:57:c3:e1:fb:db:5c:ec:3f:b8:20:a1:
ee:6a:98:09:7d:73:6b:ae:3c:e3:fb:8b:2c:10:9d:
a3:ca:2f:c3:17:f6:4a:e4:62:8d:98:08:6b:e0:90:
2b:96:2f:ce:8d:07:9a:b5:f1:8d:9e:d4:e8:15:e5:
7b:50:46:6a:34:fe:96:3f:bd:f5:45:21:a1:b3:be:
19:41:40:ab:8a:ff:f7:66:5f:7a:cc:ae:04:ee:08:
a4:33:79:ff:dc:17:f9:98:5e:4c:b3:e0:15:0c:0e:
e5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E1:52:23:BC:14:14:4F:8E:8D:F9:6E:1F:50:68:9F:44:60:9C:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BFCC0F4F33C11EFA9901157762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.193.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:62:7f:4b:7b:c0:4e:c6:c1:a5:9d:9a:5d:45:bb:ad:de:38:
fd:e3:12:54:97:49:a7:6c:fe:52:9c:1e:d3:76:8a:45:f7:18:
7e:a4:c9:d5:ea:5f:af:de:c3:92:71:51:2d:c9:3d:92:56:34:
6a:d6:53:9c:f4:3e:13:1f:ff:82:62:1c:31:ea:ac:e9:80:b5:
a4:27:ed:27:d4:ba:75:75:6d:34:93:61:51:d5:90:30:50:5d:
fc:6c:42:5e:14:7a:4f:25:cb:ef:82:b2:e8:51:54:74:80:c6:
76:a7:8d:85:da:95:34:87:4f:02:aa:ce:d4:11:83:04:ac:9e:
77:04:0a:5d:d1:08:3a:77:2b:41:7d:b3:c4:ef:a6:23:ae:26:
81:ac:77:9a:2c:6b:0e:36:b6:f6:56:26:e2:f2:d5:4b:55:e9:
2b:f7:90:de:65:c9:72:ae:cb:f6:fa:c1:d6:5e:25:87:fb:b1:
64:98:36:47:ef:df:24:8f:f9:66:17:59:ac:ae:bf:fa:c4:38:
46:b7:3d:26:b3:99:73:ec:6a:db:3c:fa:ca:1a:2b:18:b7:50:
82:5d:7b:42:1d:ba:1c:08:04:95:ff:ef:08:d5:b9:54:97:71:
e2:1c:ec:5b:b9:b1:07:b0:5d:60:a7:e2:1d:60:cb:7b:4e:0c:
41:c0:b9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:52 2025 by rpki-client