Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B7F67DCF5E111EFBF48D087762E951A.roa
File: 9B7F67DCF5E111EFBF48D087762E951A.roa (raw, json)
Hash identifier: SHbOJvuBmsZR/sn2qydVjMsctbRL2fR3xO0zxnGy6Pc=
Subject key identifier: BF:C9:E3:F3:60:8B:5E:DD:8F:FD:12:AB:75:16:AA:12:F9:99:F7:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013E60
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B7F67DCF5E111EFBF48D087762E951A.roa
Signing time: Fri 28 Feb 2025 14:38:00 +0000
ROA not before: Fri 28 Feb 2025 14:37:56 +0000
ROA not after: Sun 13 Apr 2025 14:37:56 +0000
asID: 138915
IP address blocks: 156.244.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81504 (0x13e60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 14:37:56 2025 GMT
Not After : Apr 13 14:37:56 2025 GMT
Subject: CN=67c1ca48-d6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e3:b9:a5:e9:b7:09:0e:e5:23:c3:ea:4d:81:
1b:b1:1f:48:36:36:86:b1:2c:e0:98:41:59:58:b7:
dd:56:d6:48:0a:a8:7c:d2:53:07:17:49:a0:02:63:
a3:fc:e1:30:ef:38:9d:d6:96:c7:65:63:c8:7a:eb:
22:0d:de:48:2c:0e:95:0b:8e:9f:5a:f3:10:4c:4e:
52:b5:00:32:4e:8f:3f:dc:e8:41:aa:c4:a5:d1:8b:
46:4b:2d:3d:52:cb:d5:29:3d:e3:dd:37:b7:74:b3:
40:02:d2:2a:5d:d0:a1:36:cb:17:33:d1:39:aa:4f:
d7:fe:23:c6:3d:4c:7d:46:61:ec:60:67:8a:b5:ef:
5b:74:89:76:ba:49:3a:2c:6f:fa:44:09:19:4b:ad:
d8:5b:9c:90:7a:80:2a:c2:b0:c3:3b:7f:de:29:4b:
2b:3a:31:4d:24:10:47:80:82:04:9e:59:dc:cf:61:
7c:33:69:d1:5a:96:0a:25:80:e9:aa:38:8c:f9:0c:
73:5c:e0:36:16:88:20:7e:e6:28:63:75:ee:c4:00:
5c:e2:49:b5:51:3e:4b:21:60:53:25:c8:0d:47:2c:
88:c4:4a:36:95:68:0a:a0:91:cd:d9:20:87:b4:be:
34:0d:25:a6:3a:6e:ba:c6:76:e7:02:c8:f0:ac:ea:
f1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C9:E3:F3:60:8B:5E:DD:8F:FD:12:AB:75:16:AA:12:F9:99:F7:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B7F67DCF5E111EFBF48D087762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.22.0/24
Signature Algorithm: sha256WithRSAEncryption
05:1f:50:17:b6:62:fc:ae:e7:fc:57:b8:b5:f2:2b:1b:2f:76:
d3:c7:5e:42:b2:6b:dd:82:b1:31:61:a5:e1:ef:3e:16:98:a4:
f4:32:57:31:56:df:ab:d0:ad:96:92:56:95:86:15:f1:e4:8d:
12:a2:cd:8e:7b:30:e5:2a:f0:ca:93:47:2d:0c:f0:cb:e1:c2:
56:23:2a:83:25:0a:d0:97:31:db:10:5c:aa:f7:8c:71:ec:8b:
a4:cc:78:9a:14:7c:fb:d5:6e:4a:93:4f:be:87:3d:63:8b:5a:
c1:37:c7:83:b2:81:ae:04:72:0f:60:7e:cf:51:3f:32:97:b7:
15:ff:c9:dc:d6:87:15:eb:1c:47:40:2e:22:c3:cd:e5:d2:4f:
e1:3a:cf:25:48:32:40:85:bf:78:6d:24:73:fe:6a:9d:7a:66:
38:f5:24:45:de:ad:96:b9:32:ef:c1:ad:17:85:70:6c:a9:69:
7a:21:e5:70:b5:2e:66:14:42:17:af:f6:fd:58:ba:a5:37:1a:
5a:50:6d:76:58:cc:8b:59:da:55:11:f4:bb:77:9e:ee:68:0e:
9c:c5:6a:06:4e:fa:17:f2:7f:47:1b:4c:2f:cb:99:15:a0:95:
35:a4:bf:44:5d:a5:a9:fb:40:da:31:dd:49:cc:76:5e:c2:17:
c6:04:cd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:01 2025 by rpki-client