Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C3F643AF34C11EF9E7DBA41762E951A.roa
File: 8C3F643AF34C11EF9E7DBA41762E951A.roa (raw, json)
Hash identifier: K/5WcmJGLUWNgzcFapdN36J3PSqn3ntbKZeV9FYlBms=
Subject key identifier: 14:61:34:F2:3B:BB:5F:2F:F2:51:64:6C:1C:A7:96:BE:5D:68:0F:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012DBE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C3F643AF34C11EF9E7DBA41762E951A.roa
Signing time: Tue 25 Feb 2025 07:45:57 +0000
ROA not before: Tue 25 Feb 2025 07:45:53 +0000
ROA not after: Sat 19 Feb 2028 07:45:53 +0000
asID: 17561
IP address blocks: 156.249.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77246 (0x12dbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 07:45:53 2025 GMT
Not After : Feb 19 07:45:53 2028 GMT
Subject: CN=67bd7535-fcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:53:a2:ae:a8:c4:51:26:2d:3d:ab:91:f5:
ec:43:08:d0:af:fa:74:57:ec:74:e2:cc:ae:2d:fe:
06:5e:3b:f4:78:e1:14:02:2e:46:6d:0b:52:f3:f7:
d9:59:5b:38:71:f2:73:38:f8:da:08:23:da:40:c2:
60:3f:71:ac:c6:bc:12:ff:c9:40:59:92:be:22:a6:
09:bd:97:41:5c:f3:86:99:83:a7:78:4a:2c:84:5d:
f0:a3:13:15:b8:25:d4:80:d7:76:25:62:1c:e7:5f:
6b:85:5d:82:a9:4b:d4:17:06:2c:49:fe:d6:49:1f:
9f:89:74:59:ca:32:13:11:35:da:9a:b0:d1:54:d5:
f8:13:36:13:e9:6f:8a:1e:01:42:36:06:5d:db:53:
aa:45:5d:d8:d8:c8:25:80:2d:d2:71:f0:f0:16:91:
07:eb:d7:09:9e:11:6d:84:3a:fa:4e:f3:a3:0a:4a:
83:55:f4:11:c7:b6:43:df:d6:25:b1:0c:a1:33:6e:
0a:6e:c0:89:98:01:4b:8c:0f:70:3c:be:ed:50:27:
d2:98:8a:22:62:c3:6a:29:61:33:11:79:04:b0:7a:
08:af:61:80:a6:ad:ac:6d:60:a6:3d:8c:9e:5c:21:
08:57:cb:9a:f9:0a:6d:c6:2e:87:81:68:f2:26:be:
60:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:61:34:F2:3B:BB:5F:2F:F2:51:64:6C:1C:A7:96:BE:5D:68:0F:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C3F643AF34C11EF9E7DBA41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.234.0/24
Signature Algorithm: sha256WithRSAEncryption
54:93:13:c1:08:27:ac:fb:e8:a8:7a:96:ad:a6:ab:98:73:36:
b4:43:7a:eb:70:ce:1e:e5:4e:8a:28:c6:df:d2:1a:9c:9a:5a:
b2:ee:3e:77:a3:94:38:3f:a0:db:48:30:50:96:71:21:1d:80:
aa:1e:76:6f:e8:59:30:22:3a:f3:00:be:7b:58:c0:90:2b:c5:
77:f3:5f:ff:d7:5d:16:09:69:4b:08:93:9f:22:0c:ff:8b:45:
9a:84:03:61:b6:46:ff:76:c7:2c:23:e4:a2:32:f7:16:26:fe:
ff:58:87:fe:46:f9:23:f7:7e:a2:0a:73:dc:f9:c3:c6:cb:3a:
ec:56:eb:1f:bf:54:fb:07:1a:38:6c:18:7d:2b:c8:c5:52:05:
3e:41:92:c3:41:49:94:b8:bf:02:27:a0:c1:fa:6b:b6:c3:f4:
87:62:cd:25:6d:e7:36:60:25:ac:95:4e:60:8e:c7:8a:ca:e0:
5f:7e:e7:ee:b0:46:3f:ee:d8:b9:ba:54:15:84:de:43:25:cd:
25:c6:cd:ca:d4:92:8a:8b:13:93:3c:cb:17:ef:fb:63:8c:ea:
3f:86:43:9b:4a:a4:4a:93:14:2e:aa:dd:9c:23:b1:6b:aa:c4:
24:91:43:fc:13:83:d5:77:d5:59:f6:b3:7c:ad:d5:8d:40:ce:
b6:11:c5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:08:56 2025 by rpki-client