Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6022422F80811EFBE84E3AE762E951A.roa
File: B6022422F80811EFBE84E3AE762E951A.roa (raw, json)
Hash identifier: l5ACT+ZDODy99U+4wgf/QZejdLGmavD5TSv+/RERnZk=
Subject key identifier: 41:E0:78:3B:7D:FE:7C:C8:0C:C5:51:DF:50:CA:70:9A:7A:BF:11:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0140C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6022422F80811EFBE84E3AE762E951A.roa
Signing time: Mon 03 Mar 2025 08:22:57 +0000
ROA not before: Mon 03 Mar 2025 08:22:53 +0000
ROA not after: Mon 21 Apr 2025 08:22:53 +0000
asID: 63139
IP address blocks: 156.229.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82115 (0x140c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 3 08:22:53 2025 GMT
Not After : Apr 21 08:22:53 2025 GMT
Subject: CN=67c566e1-ff61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f8:5a:70:a2:8a:58:32:9a:9d:a2:24:de:bb:
7f:0f:e7:5d:05:1d:c0:dd:cc:ee:9e:bd:cd:c3:6e:
02:fe:e6:0a:33:de:d0:db:ed:d9:a1:05:92:34:bc:
29:0c:d9:e5:9c:b5:cc:62:f4:c7:9c:76:e4:5d:50:
ba:cd:a1:bb:c2:b3:27:5b:b4:ff:ad:35:42:3c:2f:
df:85:a7:52:09:58:83:63:9f:aa:dc:9b:c9:5f:5c:
ee:24:13:42:ac:ee:82:ff:75:48:e4:37:d6:1a:73:
cc:43:91:ff:34:d3:7c:0d:19:a6:e3:7e:64:2c:52:
51:8a:e5:22:2a:f6:66:f3:3d:52:45:7b:f7:08:f9:
60:0f:73:03:a8:63:03:a9:cb:ee:a1:4d:ad:cf:30:
5b:b9:18:48:c3:4b:ae:d6:3e:35:1d:85:82:9e:9e:
4f:b8:49:7c:17:c5:36:45:d5:e6:55:3c:23:85:0c:
6a:02:90:35:30:78:c0:89:b7:ef:75:d7:59:4e:c8:
3d:3a:ec:ed:42:f8:d2:bc:d3:06:d3:ea:65:7d:a6:
15:cf:9d:1d:a4:87:0d:3a:24:a1:0e:19:3c:d7:ef:
a2:bf:1f:09:e6:54:69:b0:ab:87:83:b2:3a:fd:ea:
61:5c:90:d5:c0:4a:11:2d:29:60:4d:15:fd:2a:b0:
4d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E0:78:3B:7D:FE:7C:C8:0C:C5:51:DF:50:CA:70:9A:7A:BF:11:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6022422F80811EFBE84E3AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.44.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:9b:11:0a:07:2c:55:0e:de:cc:fb:e3:bf:c1:4e:22:29:5c:
92:a4:4f:42:55:d6:05:a2:06:a6:63:ce:f6:eb:8c:da:e9:6b:
e9:35:49:56:24:18:16:ee:c6:13:17:52:88:8a:25:2e:e9:10:
2c:1f:ec:3c:9e:5e:eb:5b:3b:ac:20:87:8f:53:b9:dd:3e:51:
5c:26:5d:4c:be:dc:33:08:77:e4:be:06:00:1b:c2:6d:27:52:
a3:9d:26:a8:27:a2:2e:b4:1e:19:b1:27:0d:34:68:ef:d0:e1:
7e:f2:5a:42:35:61:00:af:a2:0b:8a:cc:3a:17:02:82:e8:e1:
f3:68:e8:22:99:5a:de:bb:21:60:4b:a2:b8:30:f3:2c:7c:13:
0a:ba:fd:80:4d:89:09:97:06:61:09:46:4b:75:a7:bc:21:d4:
5a:f8:61:d4:63:47:b7:10:d8:5e:38:6c:76:42:be:46:ab:d3:
32:12:c2:56:fe:aa:99:ab:30:44:56:c0:36:33:5f:c5:55:7d:
7b:fc:de:d7:d3:7f:66:9f:0d:02:4d:53:92:66:22:60:2d:16:
5d:79:79:9c:1d:30:f1:08:e5:9f:8b:a1:9a:cd:75:0c:83:4c:
c7:2e:a2:b6:86:77:c9:72:d5:9c:2f:6c:6b:9f:e8:38:5d:0e:
0a:76:69:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:11 2025 by rpki-client