Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD8EF5FCF2D511EFBBF5F194762E951A.roa
File: DD8EF5FCF2D511EFBBF5F194762E951A.roa (raw, json)
Hash identifier: uaS1ZLSWBnMWsNP/rEZT6NWIkb0krwTuLQncNqldM2Q=
Subject key identifier: 3D:EE:78:6F:31:9B:09:E0:E0:3E:4C:6F:FD:39:93:02:13:7C:DC:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012CF9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD8EF5FCF2D511EFBBF5F194762E951A.roa
Signing time: Mon 24 Feb 2025 17:36:23 +0000
ROA not before: Mon 24 Feb 2025 17:36:20 +0000
ROA not after: Sat 29 Mar 2025 17:36:20 +0000
asID: 203020
IP address blocks: 156.233.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77049 (0x12cf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 17:36:20 2025 GMT
Not After : Mar 29 17:36:20 2025 GMT
Subject: CN=67bcae17-9f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2d:19:d7:34:95:4b:26:fb:92:9f:cf:34:e5:
fc:86:ed:0a:62:dc:b1:1f:6e:83:64:6c:a2:e3:c6:
01:51:9c:d9:02:df:65:3d:49:45:9a:42:03:89:e0:
ce:2f:b9:1d:bd:fb:a8:26:ea:6f:39:f2:72:e3:bc:
01:92:e3:f6:ba:57:3b:2b:f1:8d:12:73:c4:0f:c9:
6e:30:be:5f:4b:b6:b8:9d:93:f9:5d:41:d3:de:55:
ac:c5:95:d9:cd:5c:c6:2d:d8:6b:7d:2d:13:51:18:
e7:45:5a:93:ec:28:f3:58:b1:46:e9:6f:24:31:44:
82:95:94:12:d6:2d:16:be:46:d0:25:3e:62:12:54:
e1:ff:ae:bb:fd:bd:4d:7a:87:be:f9:3b:a1:1d:ee:
ed:4b:10:19:62:f4:17:b0:38:09:8b:c8:4c:4d:56:
31:cd:6a:80:51:8f:f6:c2:d9:1c:ff:92:2d:18:7b:
30:f5:6f:8e:fb:3b:b7:94:35:58:64:89:bd:88:03:
6c:19:80:74:06:ec:ac:05:2a:1b:61:75:f6:8f:d5:
0e:2b:17:75:da:5c:f1:fc:a4:5f:51:5f:1e:41:b6:
5c:72:72:66:05:35:16:6a:69:e3:3d:cf:56:e4:e3:
63:53:ab:77:76:7d:5f:6f:57:bb:cc:ec:95:2a:4f:
ea:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EE:78:6F:31:9B:09:E0:E0:3E:4C:6F:FD:39:93:02:13:7C:DC:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD8EF5FCF2D511EFBBF5F194762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.24.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:ec:12:3f:22:1b:17:7e:25:9a:25:aa:a4:f3:93:ef:25:69:
fe:7d:6d:87:41:20:31:cd:a0:68:be:5e:df:0a:60:2c:75:37:
23:42:6b:f3:3b:bd:d2:9a:7f:70:d6:bd:d1:e7:5b:d8:99:26:
fd:56:7c:ac:96:db:b9:a8:ea:0a:e2:e4:4a:ea:42:97:5b:b6:
a6:1a:8e:1d:a2:c3:f8:1c:8c:ad:be:52:9b:50:7a:a2:ec:93:
94:6c:55:dc:de:c5:2b:eb:76:85:e4:ee:4a:52:8e:86:ad:b4:
76:f1:4a:c0:11:ba:10:84:c0:98:24:5e:dd:e7:66:85:18:4c:
31:df:6b:63:fc:12:54:50:db:d9:10:43:74:c7:9e:bb:f1:b9:
63:c5:19:6d:ef:58:d5:25:eb:f6:72:9f:b5:e7:a1:30:20:0d:
42:5a:ec:1b:c6:90:c2:a3:9f:16:56:b9:c3:35:21:6e:18:24:
51:98:df:1f:b5:e9:c5:8b:7e:5a:9b:45:33:8f:e3:81:30:eb:
2b:09:a2:9b:3d:ed:b3:5a:d2:eb:09:45:3a:14:a3:ce:bb:e2:
3f:97:dc:0a:48:ee:fd:b6:20:3d:40:41:cc:f7:07:33:b8:85:
df:22:f6:61:37:8a:9d:46:7b:28:ad:c6:fd:f6:2d:5c:bd:8c:
82:05:e7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:05:43 2025 by rpki-client