Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A3BC6CA058311F0BE02126E762E951A.roa
File: 9A3BC6CA058311F0BE02126E762E951A.roa (raw, json)
Hash identifier: S2TrKJ7C/wcS/XzZNQVeu37REMybYA93V6laJUVgOgQ=
Subject key identifier: 4B:74:37:3E:F5:F2:48:BA:E1:48:AF:06:EC:36:EE:48:E6:F0:21:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01474E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A3BC6CA058311F0BE02126E762E951A.roa
Signing time: Thu 20 Mar 2025 12:05:23 +0000
ROA not before: Thu 20 Mar 2025 12:05:20 +0000
ROA not after: Mon 31 Mar 2025 12:05:20 +0000
asID: 132839
IP address blocks: 156.242.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83790 (0x1474e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 12:05:20 2025 GMT
Not After : Mar 31 12:05:20 2025 GMT
Subject: CN=67dc0483-e4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:76:52:e3:43:4f:d3:d1:e2:90:bf:41:b3:ea:
9d:4e:6b:01:b5:6d:77:dd:d1:bd:d6:d0:d3:56:ec:
4d:7f:01:0c:28:e9:0a:88:08:0b:0c:46:6f:09:c1:
0f:64:de:c0:12:71:ea:b2:40:bc:38:46:cc:25:39:
4a:22:5a:94:5d:71:4b:cb:a0:7b:8f:3f:c0:01:b4:
3d:2b:88:96:b5:c2:25:f9:ad:a2:ce:4a:55:d2:a0:
39:62:c4:58:ff:02:57:a5:9e:8b:56:db:28:09:d1:
8d:f8:73:33:8c:d8:d5:e6:14:2d:03:87:5a:b6:32:
84:85:fe:2b:17:f7:9f:38:f6:1a:a7:fe:3d:47:98:
69:a4:99:8d:cd:44:42:44:54:34:38:57:e9:4f:29:
96:e6:a5:04:6b:d7:21:bb:9e:22:ea:86:13:8b:3a:
02:8a:72:93:00:b9:be:43:ee:f5:10:c6:7f:3f:fe:
29:e1:af:07:50:5e:1e:15:5d:5f:15:ef:1d:4c:a7:
e7:4e:69:d9:70:f6:c7:f7:7c:95:5e:cc:5c:67:29:
62:89:f2:ed:c0:ad:ab:48:5a:3d:2e:4f:90:0d:99:
fa:65:a9:59:2a:28:c9:e5:95:3f:61:75:25:b7:cd:
13:5b:6e:a6:89:29:b7:57:99:37:8c:c7:91:7e:2b:
1d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:74:37:3E:F5:F2:48:BA:E1:48:AF:06:EC:36:EE:48:E6:F0:21:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A3BC6CA058311F0BE02126E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.128.0/19
Signature Algorithm: sha256WithRSAEncryption
6a:55:ae:3d:3d:c6:53:e4:a4:bc:e6:34:34:7a:d8:b6:bc:c8:
1e:c7:cb:0d:ad:c5:b7:d8:5b:36:5e:8b:2a:e9:5a:02:aa:33:
ad:4a:eb:1f:1f:e2:d9:c9:f9:7b:b1:61:39:8c:56:88:43:a6:
8d:c9:59:3a:9d:39:7d:c5:24:0e:78:ce:d5:c1:e6:e7:31:63:
33:8b:16:da:30:7a:eb:cc:50:a4:22:07:ac:b2:70:bc:15:54:
19:12:34:79:66:b5:f2:09:f8:10:44:98:f3:04:cc:e0:f5:15:
36:d6:26:86:6e:3d:3a:26:58:5a:33:38:7d:ff:a4:ca:0d:5e:
32:a8:50:6f:56:2d:0c:3e:7e:1d:bb:b9:7b:87:3d:5f:48:91:
31:dc:59:e3:f5:2a:5a:85:70:02:e4:83:15:91:db:12:f3:2c:
a2:9d:0b:cc:a7:32:1b:99:26:8e:66:33:e3:f8:9d:e5:fb:38:
d3:bb:41:a4:45:36:cf:84:5f:74:d3:d4:d0:31:eb:4f:ac:c0:
8b:cb:9f:37:b6:62:c0:c8:4e:ae:ad:5b:dc:7d:46:95:4b:6a:
e4:31:d5:09:e7:c4:83:7b:e7:b9:b5:bc:94:1e:c2:0f:92:c0:
44:09:5a:9a:cd:63:4e:a9:6c:7b:94:a7:32:2a:6a:0e:81:fd:
bc:fd:35:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:20 2025 by rpki-client