Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B77FE02CF4AD11EF9D1933BF762E951A.roa
File: B77FE02CF4AD11EF9D1933BF762E951A.roa (raw, json)
Hash identifier: 6N1aschba145b5BSaW9bhu+0ATOIcg+1YhctmakddR0=
Subject key identifier: EA:01:90:00:EC:13:37:0C:30:C1:DD:45:0D:F7:46:88:D9:65:B9:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0138A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B77FE02CF4AD11EF9D1933BF762E951A.roa
Signing time: Thu 27 Feb 2025 01:54:02 +0000
ROA not before: Thu 27 Feb 2025 01:53:58 +0000
ROA not after: Sat 19 Feb 2028 01:53:58 +0000
asID: 17561
IP address blocks: 156.229.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80036 (0x138a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 01:53:58 2025 GMT
Not After : Feb 19 01:53:58 2028 GMT
Subject: CN=67bfc5ba-0f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:40:f3:cd:36:f7:9d:46:ac:ed:a1:b5:fc:
3c:7d:5b:e7:ec:cf:4e:de:08:60:6b:f5:b9:dd:e7:
6a:5e:65:55:f0:15:6d:a2:3d:15:71:5b:4c:f5:39:
e2:80:eb:cd:ef:44:07:91:bb:96:af:29:6c:5e:c2:
32:b8:e1:02:05:07:40:ec:54:8e:bc:47:30:25:83:
e8:a8:72:3c:9a:ee:60:63:0f:9e:43:af:00:fa:43:
ef:f2:50:76:89:36:66:42:8f:e2:03:47:f5:43:42:
2f:be:f9:33:55:73:d0:f3:86:0e:d1:0a:28:7c:a5:
de:e8:fb:16:84:65:b7:cb:f3:84:6b:2b:8a:ca:4a:
91:14:3c:f5:dc:eb:f2:a0:d4:7e:0f:67:29:e7:f6:
0d:87:1b:e9:94:38:99:47:10:1b:f9:bd:6a:86:8b:
2c:81:a8:91:9f:42:50:db:2c:69:2d:2d:90:5b:d6:
35:db:9f:ec:d7:31:47:15:88:97:85:a3:11:57:49:
6a:a1:91:54:c7:06:a3:4e:bb:3e:55:72:30:a5:5f:
67:7a:bc:ae:7d:70:9f:e1:db:6a:fc:e1:80:12:f7:
85:f8:06:fe:0a:48:d7:46:9c:48:e2:f0:af:1c:1c:
76:4a:24:4a:e5:7e:dc:cf:86:5b:1b:f1:fa:10:bd:
9f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:01:90:00:EC:13:37:0C:30:C1:DD:45:0D:F7:46:88:D9:65:B9:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B77FE02CF4AD11EF9D1933BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.126.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:fe:29:17:31:6e:82:58:5a:9e:86:2e:0c:39:a4:cb:64:f0:
99:3e:05:ce:79:0f:1d:5c:60:2d:ac:96:7a:e1:48:6b:c2:46:
21:58:ba:bb:2c:84:1e:9e:92:c6:f1:7a:27:63:14:11:d4:3e:
04:ed:10:f8:e1:ab:8b:07:29:12:9c:5b:24:a5:9a:ca:07:c7:
cd:24:2c:50:d9:03:6f:c7:cb:87:09:41:25:24:0e:d2:f6:c6:
29:73:a2:47:54:68:48:d0:6b:06:76:4e:d9:fd:da:55:d7:96:
ae:8d:ee:1a:25:d4:4a:88:5b:50:51:1c:b1:d0:8f:fc:9c:6f:
13:31:81:91:c9:0b:56:2c:8a:7b:13:e9:59:b8:78:61:eb:da:
7b:87:34:b9:e9:97:60:ed:88:d4:4e:03:5f:92:fa:ef:07:09:
28:03:28:23:9a:f9:65:84:ff:12:96:db:05:09:43:52:9b:cf:
66:a6:11:43:cb:4d:4b:a0:53:c3:2a:6d:69:e7:0b:99:1e:37:
4b:3f:ba:57:21:a8:54:8d:d8:17:16:9e:43:8f:07:e8:9a:5b:
8c:97:b8:07:9b:60:2d:12:6c:6e:6e:7b:fc:9d:3d:29:7d:6a:
5d:b7:e6:b1:a4:38:70:54:c7:b2:e1:7e:7c:64:07:e5:0e:c8:
3b:74:3e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:32 2025 by rpki-client