Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACF89C90058111F0A2CDA461762E951A.roa
File: ACF89C90058111F0A2CDA461762E951A.roa (raw, json)
Hash identifier: 9fZkfgFA90DqZzCsSwV8vcnRquQJxow7Zm4Uxk2npfA=
Subject key identifier: 55:4B:42:FE:B8:F2:97:4A:10:13:85:42:27:D5:40:97:BA:52:19:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014742
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACF89C90058111F0A2CDA461762E951A.roa
Signing time: Thu 20 Mar 2025 11:51:36 +0000
ROA not before: Thu 20 Mar 2025 11:51:32 +0000
ROA not after: Fri 01 Aug 2025 11:51:32 +0000
asID: 18013
IP address blocks: 156.241.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83778 (0x14742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 11:51:32 2025 GMT
Not After : Aug 1 11:51:32 2025 GMT
Subject: CN=67dc0148-702f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:f1:bc:f6:27:b2:00:92:37:3b:ef:50:ef:
93:4e:45:08:3e:08:bf:58:c6:4f:43:cd:61:8c:dd:
30:5b:ff:73:e0:50:26:cd:e1:ec:16:4b:3e:57:a5:
78:58:20:50:f3:a2:b6:68:58:19:a0:4c:66:f1:8d:
fa:b2:3e:8e:8f:0b:8b:ec:1e:29:2a:ba:2f:1d:da:
00:d8:c8:a3:27:57:8e:17:1e:11:cc:bd:b9:32:95:
0f:f1:91:2d:3e:83:d5:19:30:9f:e0:d9:d9:ec:be:
8a:2f:77:1a:0f:5a:64:66:29:24:f4:e1:2f:e9:15:
2c:a4:50:02:88:12:2d:78:54:cc:10:25:4b:cd:65:
f6:97:6c:32:cb:e3:9b:c1:1a:0b:05:09:a9:44:d0:
9c:e4:63:7a:5c:4f:bc:52:62:59:9b:4d:a3:be:92:
16:e8:8c:9e:ac:94:20:31:76:91:cf:a6:14:8d:77:
8a:ea:3c:a2:ba:d8:72:4b:35:5e:8f:b2:5a:4c:76:
2b:a5:35:05:8d:47:57:bd:17:6c:39:55:76:f3:16:
d3:59:2e:d9:12:c5:a6:6d:4b:07:21:93:17:c6:0d:
7d:af:7f:a5:8d:6b:e8:99:4e:ba:16:3a:7f:5c:a4:
f2:7a:3f:50:37:80:5f:5d:57:1c:c6:7b:ff:50:3c:
6a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4B:42:FE:B8:F2:97:4A:10:13:85:42:27:D5:40:97:BA:52:19:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACF89C90058111F0A2CDA461762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.128.0/18
Signature Algorithm: sha256WithRSAEncryption
65:73:0a:07:6c:03:af:59:c4:2a:93:a0:13:37:6c:88:75:b3:
03:35:4d:bb:f8:7c:c2:18:17:b8:ec:df:79:8e:51:f5:8f:5e:
5d:3d:1c:a6:f2:25:19:c3:b1:7b:5f:6e:a9:2c:1c:0c:ab:d9:
e8:99:04:d5:a1:73:e0:cc:db:02:d0:b3:02:91:7e:45:7c:89:
df:a5:65:05:65:78:2c:f0:6a:1d:8f:d1:eb:7e:ca:cc:49:1a:
31:d0:f3:1f:6c:a6:8b:4b:87:e6:a1:19:1b:f3:de:b5:55:5b:
43:19:5c:5e:1b:83:ce:47:e5:44:10:cc:7f:8e:42:dc:71:00:
90:c1:fd:8d:fd:50:e8:a0:61:df:98:0a:63:cb:80:1e:ae:5d:
1d:0e:9a:bd:b1:e6:2b:5b:94:45:52:c1:b7:b0:6f:28:40:8b:
84:f9:27:91:8d:63:49:a3:f6:40:68:81:77:74:ea:7c:02:2d:
09:f6:fe:a6:19:f2:8f:8b:53:62:32:bd:5a:10:1b:2f:5f:1e:
3d:13:ad:6d:1a:1e:6e:14:bb:98:f2:39:e0:99:ca:59:0d:ed:
17:1f:39:71:7b:5f:02:86:0e:36:b0:a7:60:43:6e:bc:91:78:
c6:a8:64:40:3a:dc:47:0f:69:86:f7:e5:af:6b:d8:83:36:2d:
ac:06:37:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:05 2025 by rpki-client