Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FD07E9803DD11F0806F6047762E951A.roa
File: 9FD07E9803DD11F0806F6047762E951A.roa (raw, json)
Hash identifier: bksDeYW3dffBD3uwkm0Il3v1TFUf+giYkF4YB08Nb9c=
Subject key identifier: 2F:1D:14:FB:5C:00:2E:ED:A2:03:FF:9C:FE:A2:37:61:51:44:B2:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01468F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FD07E9803DD11F0806F6047762E951A.roa
Signing time: Tue 18 Mar 2025 09:44:45 +0000
ROA not before: Tue 18 Mar 2025 09:44:42 +0000
ROA not after: Mon 07 Apr 2025 09:44:42 +0000
asID: 55355
IP address blocks: 156.225.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83599 (0x1468f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 09:44:42 2025 GMT
Not After : Apr 7 09:44:42 2025 GMT
Subject: CN=67d9408d-4568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:c1:c0:37:49:36:a8:76:d4:48:58:b2:28:
a3:4e:c3:fa:61:99:f9:04:17:3f:49:f8:90:3d:85:
a3:e0:a1:04:44:20:4f:7b:cb:8c:5a:c4:b4:fb:57:
7f:87:10:ad:0e:04:11:97:f1:1e:ee:e6:c1:1a:a4:
a8:07:f4:02:b4:07:98:82:13:3f:93:5e:65:d8:0f:
39:6e:07:31:ff:09:42:d9:2b:a6:36:29:97:d4:7e:
a9:fe:43:46:04:26:ce:05:22:5e:1d:9f:8b:01:7c:
73:58:bd:90:63:91:8b:e1:f8:83:2e:44:65:a4:64:
84:41:e6:57:0b:f4:71:9d:ca:8a:5d:19:f7:20:69:
ec:64:75:63:3f:6a:78:c6:c9:84:7e:85:98:3d:0f:
be:40:19:f0:89:72:4a:d6:d8:ed:39:86:6d:91:31:
76:31:ae:54:1b:e9:72:a1:f0:62:c1:ef:6e:c4:13:
4f:93:cf:3e:2b:9e:63:c4:d3:bb:a1:3b:47:e8:61:
89:04:d4:64:c6:93:c3:35:5a:60:95:4a:2a:25:22:
b8:fd:9a:2c:bc:c6:7d:d5:be:da:d5:46:9f:39:98:
0c:9e:52:d5:07:f1:30:bc:44:91:a7:ae:f4:88:12:
2d:90:62:c8:09:c2:4e:50:f7:ae:ed:44:7e:cd:0c:
a2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1D:14:FB:5C:00:2E:ED:A2:03:FF:9C:FE:A2:37:61:51:44:B2:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FD07E9803DD11F0806F6047762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:f4:98:79:a6:44:d2:25:05:5c:cc:98:1b:a6:47:75:9d:79:
7f:e6:d9:7a:ef:78:bb:e1:79:9f:bc:d5:41:f0:13:d0:aa:4c:
81:16:30:ef:dd:85:be:55:46:c9:0e:00:ce:a8:f4:43:f6:35:
4e:97:20:f9:5e:30:db:ce:89:96:0f:19:b9:d9:b8:66:f9:3f:
37:7b:e2:ba:18:74:87:0c:f5:bd:57:7d:db:d9:89:4f:27:0d:
e4:12:6f:c0:33:4c:0c:81:b6:c4:54:d7:5a:76:a3:ba:cb:12:
9f:bf:5d:43:ac:2a:8a:2b:6a:85:c0:9f:3f:6c:28:41:2d:dc:
82:ff:ab:a9:b6:de:c0:b9:62:47:7d:88:6f:75:8b:c9:4f:5a:
6c:a8:d9:79:60:38:40:7f:43:8d:57:76:aa:21:8b:2e:44:15:
b4:32:c0:b3:fe:73:b5:3b:9e:b4:ab:cf:d2:65:05:6e:67:7b:
90:e7:b6:8d:39:e1:9c:9c:03:8c:09:9a:66:b8:95:1b:44:97:
d6:f7:91:86:06:fe:77:6c:17:a8:ac:d5:d2:c6:01:ea:f6:1b:
66:61:69:d3:16:c2:bf:61:5a:33:c3:c0:f1:21:dd:61:64:90:
88:fd:53:40:a8:81:46:38:b3:a9:7b:e3:29:6c:fb:91:07:8c:
58:e3:83:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:12 2025 by rpki-client