Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D75286C00B711F082B6828D762E951A.roa
File: 8D75286C00B711F082B6828D762E951A.roa (raw, json)
Hash identifier: 96WojsHM0UISiRPmsCTbjcyd7UL/6oh/6QztupG0Fo0=
Subject key identifier: 1C:E7:CD:06:24:F3:56:AC:1A:76:22:6F:B5:46:B3:2E:F5:5F:47:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D75286C00B711F082B6828D762E951A.roa
Signing time: Fri 14 Mar 2025 09:34:40 +0000
ROA not before: Fri 14 Mar 2025 09:34:36 +0000
ROA not after: Sat 19 Apr 2025 09:34:36 +0000
asID: 53835
IP address blocks: 156.231.104.0/24 maxlen: 24
156.245.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83398 (0x145c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 14 09:34:36 2025 GMT
Not After : Apr 19 09:34:36 2025 GMT
Subject: CN=67d3f830-1211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b1:08:44:c6:f8:66:d8:52:fa:4b:7f:6d:a4:
96:03:20:cf:9c:f0:e3:10:e5:73:f9:f6:e1:53:2b:
ce:6f:b2:a3:c5:b8:4e:9a:90:13:5f:96:f3:63:0f:
ff:be:96:2c:59:5b:5f:5c:41:4c:19:4f:9f:91:1a:
f6:19:8f:cb:bd:3d:36:71:f3:ed:24:75:ed:0a:be:
63:a2:f8:1d:23:65:6c:f3:ab:ba:e3:f9:23:20:78:
08:d2:1f:39:ca:e9:c2:55:00:98:33:9b:71:11:76:
38:23:ce:ae:41:39:e9:07:f2:50:06:0e:ff:83:e2:
00:6c:91:f8:19:e9:67:05:e0:e7:35:3e:b0:19:d2:
4c:1e:8f:7f:69:0a:86:a2:eb:57:2a:b8:a5:7e:4d:
2f:aa:3f:7f:ff:ed:7d:a5:bc:32:6e:68:e9:ac:59:
4b:83:91:0a:4c:d1:58:b5:03:17:bb:70:4e:29:49:
b5:cc:42:50:d3:ef:33:c5:78:13:40:b9:4b:84:f1:
36:a4:0e:ba:a5:1b:83:7b:86:f9:14:c2:c2:af:f2:
00:6c:c4:32:e1:3f:90:f0:9f:de:cb:3e:84:a2:6d:
21:a4:d1:c0:7c:fd:db:07:db:23:50:02:bb:ae:40:
e1:f9:b0:a4:ce:1e:9f:32:a6:b3:da:49:0c:d6:9a:
61:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E7:CD:06:24:F3:56:AC:1A:76:22:6F:B5:46:B3:2E:F5:5F:47:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D75286C00B711F082B6828D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.104.0/24
156.245.190.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b9:ed:ba:4d:ba:26:b5:0a:4f:96:9d:8a:99:ea:7b:73:ef:
bd:b9:92:6f:a8:b0:8a:68:55:57:7c:56:72:8a:38:84:56:6d:
ab:aa:4c:1f:aa:8e:02:ce:f4:1b:ff:39:f8:d8:27:fc:4d:bb:
8d:95:cd:39:d7:bd:31:a4:62:c0:7f:c9:a8:03:fc:8e:57:ea:
b8:f4:d1:e4:14:8b:a9:08:aa:26:99:19:1d:92:2d:e1:cb:96:
6b:21:c3:ba:58:58:59:df:62:d5:ec:82:dd:a6:9c:86:20:eb:
cf:c3:e4:a8:73:d8:0b:cd:e1:a4:e3:7f:ae:28:42:9f:b9:e5:
b4:1b:27:e8:dc:d8:0a:db:28:f7:30:a5:4a:bd:3a:1f:e5:b2:
8e:49:23:b0:e5:45:2c:df:02:02:54:07:50:43:e3:09:76:54:
65:5b:69:59:10:37:66:d0:3d:46:14:91:dd:7c:45:d5:75:a3:
6a:97:30:33:12:a9:c4:bc:67:1c:30:b1:25:7a:67:92:69:3d:
32:72:f0:8b:2b:0b:0e:52:d9:c6:f5:33:aa:98:43:37:63:82:
07:c8:47:c7:67:03:25:39:59:08:9e:22:be:1d:d0:ad:1f:51:
06:cf:07:1b:f2:c9:3a:1a:27:de:4e:59:66:27:cd:84:67:17:
ea:18:d5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:46 2025 by rpki-client