Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B63A31D4FF3B11EFB1B3CA82762E951A.roa
File: B63A31D4FF3B11EFB1B3CA82762E951A.roa (raw, json)
Hash identifier: pwaYblZ0BlPqz7XX02YyRwAdXIDchJnjlD9yZVqFRpk=
Subject key identifier: A9:99:DC:D3:1A:53:86:31:47:5F:06:85:C8:E6:28:80:B9:C2:35:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01456F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B63A31D4FF3B11EFB1B3CA82762E951A.roa
Signing time: Wed 12 Mar 2025 12:15:40 +0000
ROA not before: Wed 12 Mar 2025 12:15:36 +0000
ROA not after: Thu 01 May 2025 12:15:36 +0000
asID: 398443
IP address blocks: 156.229.176.0/20 maxlen: 24
156.229.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83311 (0x1456f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 12:15:36 2025 GMT
Not After : May 1 12:15:36 2025 GMT
Subject: CN=67d17aec-e429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:7b:a6:bd:48:fe:34:7d:fb:63:f7:2d:4d:
3e:04:97:6c:e2:d4:de:ef:23:a5:7d:80:ed:75:0a:
63:01:6b:75:1f:63:bc:45:88:1b:62:1e:0b:56:78:
23:96:95:ae:7d:4b:eb:b5:60:c1:28:dc:ba:57:f3:
2f:3c:62:5f:bb:2e:86:6b:2f:62:9f:0d:22:7c:99:
c1:fd:31:10:3e:a5:f8:8d:2f:55:1c:97:64:bc:38:
36:81:3e:ac:1e:a1:cf:ae:f8:7b:c3:65:59:ea:0b:
1d:2c:58:55:fa:f2:34:56:84:65:42:89:cc:1c:1f:
be:89:50:ca:41:fb:8a:60:bc:4f:be:b1:09:b7:e6:
44:01:98:d0:b3:f7:cb:e0:45:cd:f3:9b:69:de:7a:
44:20:76:51:24:e5:2e:44:72:e3:2a:00:aa:6a:9b:
63:2a:a6:8d:01:87:50:9d:aa:cf:6c:1c:04:6e:4c:
d9:cd:b4:a7:ef:ff:56:4f:95:1a:75:85:4f:1e:9e:
be:04:83:aa:5e:56:0c:17:5b:b6:79:8b:e6:58:bf:
4f:d0:09:60:30:de:90:9a:ab:b3:e9:e0:8f:cf:ec:
42:d5:3c:8a:67:e8:3d:8c:e0:98:2e:4b:ed:b8:01:
89:8e:62:e2:71:97:30:e5:f8:b3:74:af:71:04:10:
09:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:99:DC:D3:1A:53:86:31:47:5F:06:85:C8:E6:28:80:B9:C2:35:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B63A31D4FF3B11EFB1B3CA82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.176.0-156.229.223.255
Signature Algorithm: sha256WithRSAEncryption
0d:74:3a:42:db:93:01:69:b6:6a:55:47:bd:30:ba:a7:36:a6:
28:2c:c3:9c:c7:49:d0:6e:c0:19:03:96:64:89:b3:5c:53:e1:
85:c7:da:f0:5d:6a:a1:8f:b7:81:c0:fb:a0:b1:d2:1f:b0:92:
03:3f:00:6e:bb:50:2c:6d:70:cf:67:4b:23:34:f4:00:d6:47:
ed:ba:06:b5:6e:dd:8a:9b:e9:20:87:5f:e1:28:7d:1c:8b:7a:
a0:d4:1f:88:3d:be:a2:cb:f4:b0:c6:7b:4b:d7:47:15:c1:f5:
cd:f5:ff:e4:be:6b:1f:bc:21:d6:09:0a:a7:38:1a:27:19:b3:
87:d9:20:5c:c4:6b:0f:34:90:b4:90:c3:15:65:4c:d4:20:07:
4e:4f:2e:33:b6:22:09:db:57:3e:0f:d0:75:3d:11:a5:94:d0:
6b:65:26:a5:1d:6e:e9:a7:0f:b3:bf:d4:86:c9:b7:63:d8:df:
61:2e:70:11:7e:26:3e:5d:c1:05:c8:7f:a7:e6:58:c3:a4:0d:
c6:ff:39:9d:ea:17:e0:a4:2f:7f:35:a0:85:88:8d:04:2c:91:
b9:27:02:4c:85:6a:f8:2a:cb:cc:96:e2:62:b9:a3:e0:ef:e4:
81:62:7a:7d:57:a7:00:7b:07:d8:2c:fa:6f:16:a5:1d:32:96:
dc:db:95:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:34 2025 by rpki-client