Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCBB03F2F44B11EFA924F899762E951A.roa
File: CCBB03F2F44B11EFA924F899762E951A.roa (raw, json)
Hash identifier: HYPQN3zPq4zjGYBFItVLRVB+hbfWI0nEXbQoRuoHTRg=
Subject key identifier: F1:E9:CC:0C:74:63:BD:91:AB:3D:FA:A5:66:05:AD:0C:91:0B:E5:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01339F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCBB03F2F44B11EFA924F899762E951A.roa
Signing time: Wed 26 Feb 2025 14:13:07 +0000
ROA not before: Wed 26 Feb 2025 14:13:03 +0000
ROA not after: Thu 19 Feb 2026 14:13:03 +0000
asID: 984
IP address blocks: 156.231.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78751 (0x1339f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:13:03 2025 GMT
Not After : Feb 19 14:13:03 2026 GMT
Subject: CN=67bf2172-d4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:0f:76:8d:81:fc:7d:06:2a:b5:8a:0e:06:
4b:ad:df:0e:75:1f:e1:26:7e:d4:96:b2:2a:de:49:
51:07:5c:cb:15:35:57:ed:60:7b:2e:c1:dd:9f:1f:
b9:d5:e4:55:ec:4a:a9:65:12:54:d4:b2:c7:d2:48:
35:ce:fd:88:5b:2b:f3:67:d9:1a:88:d4:60:26:b1:
13:48:a9:c7:ee:94:5b:2b:2f:3c:a0:c8:e9:32:3d:
ec:e4:1c:a7:de:95:f4:81:27:15:53:0c:5e:4d:2e:
92:10:3d:ba:6a:be:b9:54:82:3b:d4:40:8d:5f:b1:
3b:4a:2b:bf:f4:c4:54:20:a0:79:d6:72:a1:3c:37:
05:96:f8:e6:c4:41:3b:c9:4c:f9:48:b0:c0:74:2f:
b0:ac:a6:14:d1:3c:43:5a:17:6e:98:03:05:59:05:
30:0e:66:d1:c6:c9:35:29:99:85:b4:48:bc:f5:56:
d4:7b:b2:d5:f9:f2:3e:8a:b2:27:12:20:95:a6:11:
6c:24:cc:ab:6c:be:ae:73:e8:24:63:df:c7:5e:18:
3a:f0:a2:b4:39:3d:0c:fa:57:ed:22:b0:fb:5f:61:
03:a1:a5:d2:94:15:5d:29:13:e9:13:21:41:2e:2c:
a8:f9:d8:41:f5:c9:16:3f:ac:31:08:ed:1b:6c:eb:
15:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E9:CC:0C:74:63:BD:91:AB:3D:FA:A5:66:05:AD:0C:91:0B:E5:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCBB03F2F44B11EFA924F899762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:20:82:46:1e:52:21:dd:ab:f9:02:29:de:41:d3:ce:8e:ae:
31:34:e8:3d:66:f0:c9:42:c2:94:a9:86:55:02:fc:0d:50:d3:
dd:06:f9:4b:8a:0f:93:94:64:df:d3:13:b6:2f:cc:4a:1e:35:
f1:8b:3c:ab:42:e4:b0:12:f4:61:6c:8a:1a:20:fd:ba:bb:97:
29:71:78:1f:41:48:1c:84:0b:f3:ba:d6:50:06:70:95:2e:a2:
1c:0c:0d:10:d8:6d:ec:ac:6c:25:3b:e5:f8:fa:19:04:6f:c1:
61:9e:1c:15:62:06:2d:3b:5a:3e:e5:c8:9e:a2:aa:1a:af:2c:
7e:b2:60:5f:ff:e8:93:c9:33:dc:76:51:61:48:cc:4e:0a:b4:
ba:b7:fc:ef:05:59:ba:59:b8:96:93:fb:7e:92:be:5f:6e:9c:
be:d5:3e:b5:07:77:9d:8f:10:8c:30:3f:aa:df:7e:50:4c:91:
54:96:57:cc:ce:05:c7:c7:aa:77:49:7e:fe:e4:3b:0c:cd:3e:
61:15:03:88:7e:fd:02:9e:e3:b9:cc:98:08:20:e6:8b:92:97:
35:f0:da:bf:a9:18:9c:38:47:58:b1:c1:7e:b3:c6:02:9d:bd:
6c:9e:7d:0c:95:58:0a:4e:8a:b3:fe:cc:2a:b6:f4:b2:3f:e9:
3e:54:84:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:35 2025 by rpki-client