Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F4388AEFB3B11EF865B0D58762E951A.roa
File: 8F4388AEFB3B11EF865B0D58762E951A.roa (raw, json)
Hash identifier: kmOXW19/TzKZWF2Ghs4Vl5HniibpCxs8ANTjJNX9DtY=
Subject key identifier: 60:9E:DA:B9:49:D1:13:BF:85:F1:34:6C:8D:36:23:46:C5:F6:CA:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014410
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F4388AEFB3B11EF865B0D58762E951A.roa
Signing time: Fri 07 Mar 2025 10:04:30 +0000
ROA not before: Fri 07 Mar 2025 10:04:26 +0000
ROA not after: Sun 13 Apr 2025 10:04:26 +0000
asID: 398993
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.252.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82960 (0x14410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 7 10:04:26 2025 GMT
Not After : Apr 13 10:04:26 2025 GMT
Subject: CN=67cac4ae-2ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:73:1d:a2:a4:0a:5b:43:83:f3:4a:80:96:
5c:68:57:22:a2:25:41:5f:d2:0b:4a:28:82:9d:a9:
b0:6d:4d:85:18:35:30:68:8c:ee:62:30:08:98:63:
ec:0f:0d:c7:ac:b6:93:5d:cf:48:bd:40:93:29:9a:
b4:2b:6f:c6:cc:7f:2e:74:74:8c:e4:b7:d9:62:c8:
1f:86:b1:05:b2:22:92:d2:67:b1:aa:1e:c9:d6:99:
04:56:fe:68:8b:87:5c:1b:7f:6f:ab:6b:6a:4f:f3:
d6:4a:c5:6d:fb:56:3e:d9:d1:7f:95:b2:f3:e2:13:
60:dc:89:ee:52:42:6a:11:09:86:89:a9:bd:c5:49:
91:8e:4a:d1:8b:a0:49:c8:7d:fa:68:60:8c:a4:39:
96:a0:61:49:2e:98:7b:63:fe:9d:4c:30:e6:20:e6:
cd:62:ac:ba:23:83:39:0a:0f:c0:96:17:47:98:a1:
66:20:05:99:27:ae:ac:29:4e:10:9e:a5:ec:61:76:
d5:af:e4:02:00:ac:91:46:f6:e2:1e:10:2b:83:39:
d7:0b:20:ca:9e:d6:cd:09:24:50:55:48:81:00:32:
23:8c:5e:c7:97:44:79:83:19:df:56:d5:d9:73:fa:
93:b4:25:16:a7:e5:0a:37:d8:3b:a4:2a:14:66:dd:
60:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9E:DA:B9:49:D1:13:BF:85:F1:34:6C:8D:36:23:46:C5:F6:CA:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F4388AEFB3B11EF865B0D58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.252.96.0/19
Signature Algorithm: sha256WithRSAEncryption
af:00:c2:e3:bb:d3:5b:0e:3a:40:6e:8f:f8:91:84:4c:17:75:
12:68:cc:a7:2b:54:ea:c1:f4:0f:0b:0c:f7:02:53:2e:97:ff:
0e:fd:75:36:99:61:d1:46:fe:20:10:f0:e6:ce:a9:a5:7d:ff:
6d:7f:f2:f8:91:6e:5c:ab:c7:39:79:5f:59:eb:5d:32:05:12:
c8:a0:0a:4e:6c:01:39:91:a2:b6:b1:e0:75:10:8f:93:d1:80:
4b:07:9a:76:87:b7:a3:93:a4:e2:fd:b2:47:06:77:ba:98:22:
2f:e2:62:b4:d1:8b:f0:3a:61:31:66:f1:f0:42:5b:12:39:59:
26:76:19:4e:87:b5:46:22:a5:11:74:2a:ea:0c:d0:06:69:60:
58:f9:e7:18:ce:5a:e3:02:8f:64:ad:8c:15:43:86:2c:fc:9b:
c7:78:07:43:20:17:07:7a:af:f1:1f:e1:24:63:c4:39:3b:9f:
0b:63:7b:ec:88:7d:1b:64:0f:55:b5:68:ee:bd:9d:27:f6:7b:
3a:91:a9:62:b6:26:bf:af:b0:a0:03:cb:3e:2b:d3:ac:da:31:
2a:b8:2b:f2:dc:ce:0b:2a:12:45:91:42:a7:b3:e6:17:6e:0b:
11:20:d8:2b:3f:e4:7e:c9:17:31:ca:43:4a:db:0d:c3:f1:b5:
2e:ef:49:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:00:59 2025 by rpki-client