Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D176A86EE54211EFB64B57B4762E951A.roa
File: D176A86EE54211EFB64B57B4762E951A.roa (raw, json)
Hash identifier: lRpzAy3khRtmmpEw+DDESajMOLwGj8oUjcpN7TDNPYg=
Subject key identifier: B6:BA:67:6B:29:43:1E:31:C4:1E:C7:75:65:B6:B2:13:5A:24:E2:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D27
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D176A86EE54211EFB64B57B4762E951A.roa
Signing time: Fri 07 Feb 2025 11:01:02 +0000
ROA not before: Fri 07 Feb 2025 11:00:58 +0000
ROA not after: Mon 13 Dec 2027 11:00:58 +0000
asID: 17561
IP address blocks: 156.230.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72999 (0x11d27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 11:00:58 2025 GMT
Not After : Dec 13 11:00:58 2027 GMT
Subject: CN=67a5e7ee-eaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:5c:09:ed:8e:9e:9d:ba:03:dd:11:c7:55:
43:40:72:75:d8:48:b9:b7:ee:62:56:2c:40:ce:b5:
e9:e2:b0:bd:94:2a:e9:90:ca:3c:ba:b1:41:20:15:
7a:de:f7:2b:ec:53:05:e2:c6:b7:3a:d4:25:8b:ad:
48:89:30:19:2a:83:3e:66:56:ac:ce:a3:d0:07:f5:
6c:aa:03:4e:92:23:bd:e0:43:e7:0f:b9:b8:5a:be:
e6:60:83:74:e9:61:d2:bc:d4:bc:48:6b:3f:78:56:
c5:38:9a:12:65:a3:e3:a6:6d:0a:6a:74:a7:ee:a6:
c9:37:f4:24:ff:df:50:d5:6d:70:3b:29:83:3a:88:
e7:c4:32:1e:20:96:89:74:4a:63:50:1a:e4:c9:90:
dd:e5:41:ce:a9:48:9d:7e:85:4c:4b:e1:bf:44:41:
55:c9:35:14:ac:0b:5e:d1:e0:ee:1b:0e:56:ae:e1:
07:c9:a7:98:05:96:18:73:61:76:c8:0c:4d:a3:79:
e7:c6:ad:6e:81:03:5e:e3:62:ed:48:21:c8:8b:5e:
aa:c8:c2:14:9c:d2:67:87:5b:4d:6e:5f:97:8b:f5:
b0:db:95:43:54:71:3a:62:28:86:b8:27:99:eb:96:
a7:55:f6:3f:c5:d3:d5:dc:a7:e8:3a:c4:33:a9:97:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BA:67:6B:29:43:1E:31:C4:1E:C7:75:65:B6:B2:13:5A:24:E2:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D176A86EE54211EFB64B57B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.171.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:38:24:97:5b:89:3b:2f:7d:39:40:53:bb:e6:d5:df:f8:d9:
04:e7:d7:b0:e8:e6:98:9b:52:e4:53:cd:7b:8c:66:3d:1f:16:
5e:8a:b7:6f:24:03:8e:a7:19:c6:66:90:6b:4f:7a:10:52:f7:
79:36:bc:af:45:1c:8a:73:69:42:ef:a9:59:f9:74:17:c7:85:
ec:c6:ee:d5:fe:cf:68:2d:c2:32:84:cc:94:fd:61:55:28:75:
7e:d0:59:4f:cc:8a:44:84:ec:57:39:f5:b8:9d:ec:f3:4c:71:
82:1d:78:51:f1:d8:4e:17:63:5d:ad:5c:e7:92:81:13:26:96:
76:6e:da:92:28:e4:ea:d6:5d:9e:6b:e9:0c:cd:38:f6:cb:2d:
40:3b:da:e8:61:72:c2:a0:2b:9f:69:8a:5c:d2:2b:97:40:59:
02:34:5a:d5:f7:ce:7c:94:9a:dc:6e:c5:ff:22:ec:a3:71:2a:
47:37:be:34:af:b4:72:b7:b8:fd:23:44:0a:6c:67:0d:a1:d0:
d4:a4:f2:2d:10:8c:c0:55:fe:34:2c:2d:62:af:a7:df:cb:24:
ea:14:54:43:17:21:22:3a:bd:39:0b:e2:3f:1e:f0:e9:8f:c0:
32:0b:bc:09:5d:6e:9c:b4:c1:53:3d:1f:a0:d7:9f:22:9c:e7:
a2:0b:c3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:44 2025 by rpki-client