Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C085D980FFE611EF907E7852762E951A.roa
File: C085D980FFE611EF907E7852762E951A.roa (raw, json)
Hash identifier: NkBXFFXrT6cmEuNu9h4gMgiCOb8vjKPpImXjRWA74k0=
Subject key identifier: A7:B2:9D:3A:C0:F9:B3:30:A6:0B:1D:E3:CA:C7:57:45:70:5D:9C:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C085D980FFE611EF907E7852762E951A.roa
Signing time: Thu 13 Mar 2025 08:40:01 +0000
ROA not before: Thu 13 Mar 2025 08:39:57 +0000
ROA not after: Fri 09 May 2025 08:39:57 +0000
asID: 134823
IP address blocks: 156.234.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83364 (0x145a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 13 08:39:57 2025 GMT
Not After : May 9 08:39:57 2025 GMT
Subject: CN=67d299e1-f8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:65:cd:f1:6c:2b:a6:ac:29:a1:2c:b9:de:
44:7e:b8:2e:7f:b9:37:ff:7d:c6:e9:c9:d9:23:f3:
03:ee:8b:b6:39:f9:fc:04:d7:7d:4c:78:dd:93:17:
5d:b4:20:40:55:6d:27:0e:e3:0a:bc:22:a2:f7:be:
a8:40:7f:f1:ae:93:24:01:14:d1:28:a0:a1:0a:00:
4f:fd:35:21:1f:4a:7b:c6:36:12:07:2f:ee:95:31:
c4:5f:ac:31:f6:cd:a7:de:0a:11:39:b1:63:a7:e2:
cb:22:46:2a:45:db:cf:aa:34:6f:ab:ec:7f:82:8f:
f5:db:34:02:53:df:86:e4:1b:d0:ca:fa:07:a3:62:
a6:22:ec:44:9b:40:94:99:f6:74:0e:e5:97:0a:ab:
8b:c8:27:06:b7:64:30:f2:7a:01:43:19:72:67:a9:
55:e8:2c:d6:b8:a0:06:e8:69:82:79:37:46:65:45:
32:cb:a2:1a:57:5c:8c:43:57:2c:74:60:76:ad:71:
a7:e1:9d:ef:2d:98:f8:a4:e2:31:00:b3:67:4d:c0:
f4:2f:20:2b:21:1d:69:e6:d0:ee:87:5d:3e:cd:09:
2d:b3:63:88:48:d3:4a:22:7f:00:15:39:c1:f9:c0:
43:ad:17:d9:ef:ae:8a:a1:02:68:ef:30:29:26:61:
43:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B2:9D:3A:C0:F9:B3:30:A6:0B:1D:E3:CA:C7:57:45:70:5D:9C:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C085D980FFE611EF907E7852762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.228.0/22
Signature Algorithm: sha256WithRSAEncryption
46:49:94:3d:ce:fd:a8:ef:a4:85:2c:39:d7:b3:e1:c2:bf:12:
5e:3b:d7:d0:73:0e:27:fa:8d:66:f2:03:cc:30:94:09:bd:15:
21:6f:dc:28:71:18:86:fb:7b:11:30:47:d7:fb:ac:f3:10:cf:
1b:57:c1:99:ef:4b:3a:a1:58:c3:e4:12:87:46:3c:9f:a5:ab:
7e:9d:23:79:bd:57:f1:90:10:33:33:35:35:6e:4d:c0:ef:1f:
61:12:f3:6b:4d:97:3f:6c:d0:22:c7:40:d3:67:1f:6f:e2:80:
86:0c:f0:39:ec:1b:ed:9b:8d:19:5e:d3:27:99:ba:64:17:5c:
6a:04:bd:10:76:63:fe:e4:d3:7f:ea:51:46:d1:2c:b6:9a:78:
1e:70:08:57:06:5f:55:46:9c:15:4a:f9:67:64:35:3d:07:10:
ba:fd:a1:42:27:64:9a:84:d7:8c:e3:74:8e:c2:98:df:16:13:
cb:92:5f:11:8a:a4:8e:1d:25:c7:c7:1c:44:85:34:e3:ba:32:
a7:da:02:63:ff:30:e8:f3:23:56:c0:05:57:96:d3:7b:d2:09:
56:03:54:4f:41:e9:4d:6c:9a:08:6c:dd:53:f4:e3:97:52:c5:
18:53:30:06:65:fe:35:39:16:62:97:47:58:cb:e9:c0:0e:b7:
36:27:92:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:15 2025 by rpki-client