Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEC195B8E53D11EF93301E95762E951A.roa
File: AEC195B8E53D11EF93301E95762E951A.roa (raw, json)
Hash identifier: WttoYEqdGs65VznZvAY+3hUVrDJM09gdsNhRGEforts=
Subject key identifier: DC:03:C4:B6:5C:69:DA:8C:E7:E9:D7:0B:5E:D5:C6:05:59:27:86:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011CF7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEC195B8E53D11EF93301E95762E951A.roa
Signing time: Fri 07 Feb 2025 10:24:16 +0000
ROA not before: Fri 07 Feb 2025 10:24:12 +0000
ROA not after: Mon 13 Dec 2027 10:24:12 +0000
asID: 17561
IP address blocks: 156.230.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72951 (0x11cf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 10:24:12 2025 GMT
Not After : Dec 13 10:24:12 2027 GMT
Subject: CN=67a5df50-1039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:ab:16:7a:86:7a:31:1e:25:3e:7b:d3:8b:
b2:0f:3d:74:6c:41:7e:1d:d1:38:8c:f9:6c:9a:52:
29:e3:d1:0b:2d:3f:25:b4:12:e2:8e:33:fa:06:86:
e4:31:4f:4e:95:a4:9b:85:53:da:67:58:86:c4:1f:
81:ef:f1:26:80:cc:0b:19:4b:be:9e:d5:25:c4:08:
7d:4d:f8:60:7b:9e:3c:7d:73:95:95:66:0b:f2:5c:
54:72:19:fc:70:ae:00:d0:3f:fa:7e:f3:da:0f:ab:
71:5c:a4:d0:f7:56:a4:5a:90:64:0e:3e:00:28:4a:
f9:57:8a:87:94:c7:e5:b3:46:c9:3f:8a:22:3d:e4:
c7:33:47:4f:ad:40:d6:1d:c0:9d:d9:71:b8:8e:c4:
97:dc:73:df:c0:0a:a1:d1:a7:af:ab:21:c2:c6:c9:
e9:f2:c8:43:b1:49:db:98:de:1c:03:db:2a:e1:00:
6a:ea:d7:e2:ba:03:89:3e:6b:64:6f:d4:b6:bd:51:
65:0f:e8:a4:31:aa:07:ef:d2:49:70:bc:e9:b8:31:
94:c7:be:03:79:98:9a:bc:de:23:4f:c7:3e:a8:3f:
ed:12:1a:6b:1d:0a:11:44:ce:dc:f5:5c:8d:36:90:
cd:53:26:f8:86:16:6e:0f:f3:9a:7f:4a:cd:04:c6:
f1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:03:C4:B6:5C:69:DA:8C:E7:E9:D7:0B:5E:D5:C6:05:59:27:86:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEC195B8E53D11EF93301E95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.155.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:6d:df:1b:50:91:68:35:93:be:31:2e:9f:cb:e8:5f:ca:14:
49:73:0e:86:46:a5:95:af:88:5e:49:4e:09:44:1d:fa:66:cb:
ac:ca:ac:55:58:23:c8:84:00:12:4c:df:ac:ca:66:7c:36:29:
35:19:f1:43:0b:56:ed:ce:17:93:8f:f7:8e:8f:90:13:42:9f:
5f:f7:a5:50:34:6f:89:15:0a:a1:22:d4:07:1f:4b:f6:59:d5:
eb:b9:e1:4c:fd:01:e4:58:14:74:17:39:b1:eb:6d:48:48:b1:
f7:a5:cb:40:dd:32:c7:09:75:4e:0f:24:e4:ee:ff:37:2a:ba:
d0:95:7e:73:b6:81:5b:c6:00:80:af:26:f0:b6:6a:3c:c0:8a:
84:7e:bb:0b:98:fa:65:2e:17:6c:80:01:f2:21:d4:59:e6:45:
ea:db:b1:ee:b7:e2:34:7a:84:85:31:25:3f:f7:06:86:92:dd:
4b:19:3c:a8:83:5b:1f:1a:d6:e0:a9:b1:6f:9c:4e:bc:e3:a7:
58:90:b2:8d:d5:81:55:15:42:24:a3:4a:2d:0f:76:37:f3:eb:
fc:c4:a0:92:3e:12:a9:46:c2:f2:9f:ee:6f:5e:67:3f:d3:cd:
06:fd:a8:d1:47:36:4c:7d:74:d0:5d:bc:50:af:2c:01:92:c6:
db:c6:b5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:21 2025 by rpki-client