Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96098F3EF5E211EFA0F19C8C762E951A.roa
File: 96098F3EF5E211EFA0F19C8C762E951A.roa (raw, json)
Hash identifier: qiAh5pXEa5qT3xtTqJwgCGfcxm436rCAjb4FV258HBU=
Subject key identifier: B2:3D:A6:44:A0:54:3F:01:32:B0:F9:AE:4F:58:B9:49:F6:1F:23:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013E6D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96098F3EF5E211EFA0F19C8C762E951A.roa
Signing time: Fri 28 Feb 2025 14:45:00 +0000
ROA not before: Fri 28 Feb 2025 14:44:53 +0000
ROA not after: Sun 13 Apr 2025 14:44:53 +0000
asID: 138915
IP address blocks: 156.244.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81517 (0x13e6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 14:44:53 2025 GMT
Not After : Apr 13 14:44:53 2025 GMT
Subject: CN=67c1cbec-93a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:5a:3e:92:ba:f4:e4:14:e6:c3:d1:1b:5c:
df:9f:61:5c:4b:5e:35:fa:2c:29:a9:d3:2e:05:a4:
23:87:6f:76:4b:23:67:3d:e8:f7:9a:0c:ae:f6:1e:
d7:fb:c9:c9:ec:ca:c7:e3:ad:33:f2:be:6b:02:81:
f3:a2:6d:1f:51:93:9d:2d:52:67:b3:8a:56:e9:6a:
9e:7f:e3:78:01:79:20:85:0e:82:16:a2:e0:9c:09:
3a:8b:81:52:81:a4:c8:1d:42:8b:d1:8b:1d:41:18:
ae:ed:f5:bc:06:25:f1:3f:82:44:5a:02:e7:8a:09:
70:c2:e7:64:ff:c5:c8:cc:8e:8b:3e:80:45:0d:80:
ea:cc:ca:e6:76:f1:50:40:cc:cf:01:e9:30:01:f0:
02:16:79:5a:2b:5d:53:87:8f:86:b2:2d:67:a7:c9:
2d:dd:67:67:7a:3e:70:3b:62:25:43:67:d9:46:01:
16:95:ce:78:fe:8a:3f:d5:e9:e7:77:e5:ff:f0:f7:
28:d0:43:22:90:fa:25:47:1d:ff:30:7c:b1:97:7a:
90:0e:eb:b3:9a:66:ba:33:6b:26:95:3e:a0:ba:05:
59:fc:48:da:8b:6d:48:56:e9:6f:f9:62:21:7f:c1:
e3:f9:ec:e8:b7:89:43:f9:60:65:c8:83:0f:32:a7:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3D:A6:44:A0:54:3F:01:32:B0:F9:AE:4F:58:B9:49:F6:1F:23:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96098F3EF5E211EFA0F19C8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.20.0/24
Signature Algorithm: sha256WithRSAEncryption
39:2f:0a:91:16:ac:70:3d:d0:ef:ab:38:8b:02:58:d4:bd:c1:
f6:e8:5a:e1:be:7c:de:9c:f9:e5:72:40:f3:e3:9a:44:85:b7:
c8:b1:39:4e:82:98:b6:0d:cd:d7:71:72:ab:5f:d4:47:c7:ad:
f8:7d:83:2a:29:ca:0c:ef:da:59:cb:35:00:ed:1c:38:f4:31:
e6:a8:11:06:97:e7:17:d7:b9:76:58:30:9c:12:bc:b7:da:b7:
67:53:73:67:c6:e4:b6:98:a7:85:36:bd:cb:73:23:3e:39:ed:
6e:25:67:b0:51:43:21:2b:95:d2:b7:2e:15:53:f8:15:96:43:
93:71:bc:99:08:b5:f4:a7:66:c2:1e:21:aa:46:37:dc:44:52:
c8:3e:fa:1b:67:c3:f0:2c:2c:4a:7f:cf:10:58:8c:28:ba:94:
bb:01:50:9e:a4:83:fa:85:5d:87:ff:4c:6d:95:94:82:f9:97:
e3:93:26:3a:68:30:e4:0a:b7:de:9b:21:a3:d6:76:06:a1:fe:
cb:75:16:15:9b:2b:df:5b:0a:41:d9:80:33:7f:b1:e1:f6:54:
9e:f0:c5:80:8b:ce:ea:90:88:5a:96:58:2f:c1:df:d4:58:d7:
45:7a:a4:51:ee:fd:8b:64:1b:03:90:da:b7:c1:53:8d:3e:65:
3d:c0:aa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:44 2025 by rpki-client