Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FD0F1BCF7F811EF990F1644762E951A.roa
File: 8FD0F1BCF7F811EF990F1644762E951A.roa (raw, json)
Hash identifier: NAYjPLQ6DHKikQR5t2P2kOSt+RHXKQ4WcYgz62vEn9Y=
Subject key identifier: 2F:6A:DA:C1:C4:05:C1:FD:DC:30:B1:F9:69:D3:10:3C:C4:4C:D2:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0140B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FD0F1BCF7F811EF990F1644762E951A.roa
Signing time: Mon 03 Mar 2025 06:27:21 +0000
ROA not before: Mon 03 Mar 2025 06:27:17 +0000
ROA not after: Mon 21 Apr 2025 06:27:17 +0000
asID: 63139
IP address blocks: 156.227.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82097 (0x140b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 06:27:17 2025 GMT
Not After : Apr 21 06:27:17 2025 GMT
Subject: CN=67c54bc9-c738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:66:27:3c:c1:1b:5b:34:93:bd:91:87:af:
9f:88:4d:81:51:87:45:c5:4a:88:47:1f:2e:39:15:
b1:1f:b1:d7:90:9e:7d:03:ee:53:f2:d4:02:b2:8e:
8d:6f:fd:15:36:6f:19:3b:4b:64:19:d6:df:2c:ee:
2b:b9:ef:94:fa:73:b2:0a:e8:e7:4e:69:4c:a4:c5:
38:fe:57:93:0e:d9:f9:9a:54:c9:ed:a6:92:0e:52:
51:4a:14:97:34:1e:fc:02:fa:90:c8:0f:52:cc:b6:
be:c7:b6:8d:a2:b7:ca:4c:8f:34:93:38:b9:e9:0c:
f3:ed:56:3d:be:d0:7b:ba:21:d6:fa:e2:54:b1:20:
94:da:58:c3:a9:e9:3f:38:40:bb:6b:52:bb:60:2f:
24:f2:11:03:90:ba:15:4b:90:5c:07:3e:c2:ba:a4:
5e:3a:7d:3a:5f:6a:af:fd:b7:61:b2:33:b2:ca:0d:
b9:2b:9a:e3:bd:92:8e:d8:03:5b:25:54:06:ee:1a:
03:5d:71:6c:10:fd:e8:80:d5:d4:f5:a7:38:8b:25:
37:69:2e:0f:64:49:ab:db:89:9f:fb:d2:3d:e3:bb:
19:5e:75:4e:6f:6e:a9:30:92:92:d8:b5:29:7a:f5:
a2:fa:9d:88:60:58:fd:83:68:6f:e0:f3:d9:53:bc:
9d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6A:DA:C1:C4:05:C1:FD:DC:30:B1:F9:69:D3:10:3C:C4:4C:D2:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FD0F1BCF7F811EF990F1644762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:54:d5:46:f1:b8:40:27:23:08:98:17:e4:e5:52:10:33:ee:
a8:72:63:fb:16:cc:97:e5:00:f1:4f:a2:a6:5c:65:36:2d:8f:
61:f1:5b:a5:e7:71:8f:61:34:4a:28:8e:89:bb:3a:b6:76:86:
79:6a:32:68:07:96:c6:f3:ac:6c:68:c3:88:3d:b1:4c:e2:3d:
f6:4a:4f:ee:4e:0f:38:3d:74:a3:63:7b:b5:fc:1b:c1:ae:e5:
70:17:a3:6f:f8:bc:48:d8:24:ed:68:db:63:0b:87:cb:89:cf:
41:59:95:83:40:e6:3b:d1:9e:49:be:37:29:af:e0:7c:31:ef:
dd:d2:ad:0a:dc:73:93:62:7b:eb:f5:e5:c5:0d:6c:7c:16:e7:
60:75:d2:92:52:7b:49:eb:38:63:34:80:90:2a:c9:9a:b3:d3:
2f:c7:7f:7c:42:b9:9f:59:9a:1a:9e:79:b5:6a:f6:eb:84:a7:
6a:08:8c:5a:3a:62:10:64:a7:67:b8:e8:d1:6d:47:96:d0:bb:
47:df:4b:c6:97:1a:8c:27:98:54:f0:8a:e3:a1:6d:f7:4b:e7:
66:d2:67:29:f5:04:78:55:8c:f0:05:6e:88:98:6c:27:47:b7:
eb:ad:03:f0:61:d9:1d:35:bd:86:52:38:72:a4:f8:2b:e7:9b:
d4:e8:d4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:54 2025 by rpki-client