Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E05F35480B0411F0AEC6A37F762E951A.roa
File: E05F35480B0411F0AEC6A37F762E951A.roa (raw, json)
Hash identifier: 8npi20YdAJ0k36h3/mibS6BTSxaROOX2a9C7c/cRw+E=
Subject key identifier: 4F:A0:A5:CA:80:43:85:34:23:83:C3:B5:FC:06:FE:8C:C8:6B:C7:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01486D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E05F35480B0411F0AEC6A37F762E951A.roa
Signing time: Thu 27 Mar 2025 12:13:22 +0000
ROA not before: Thu 27 Mar 2025 12:13:18 +0000
ROA not after: Wed 16 Apr 2025 12:13:18 +0000
asID: 40065
IP address blocks: 156.254.18.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84077 (0x1486d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 27 12:13:18 2025 GMT
Not After : Apr 16 12:13:18 2025 GMT
Subject: CN=67e540e2-29d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f7:0b:0a:0a:31:8f:33:70:c6:db:d8:22:4b:
a8:66:62:53:fa:e9:9b:91:fa:08:e5:b0:1c:09:3d:
77:97:65:a6:59:a6:46:29:33:9c:ac:02:3d:58:ca:
17:88:c7:fe:47:58:7a:d8:81:b1:ed:40:d2:48:c5:
c3:8a:dc:a2:4e:78:e7:d8:d9:73:7c:67:ad:da:6c:
7f:18:31:4e:17:d5:aa:83:a1:71:0d:84:36:28:50:
58:d3:c0:b3:47:9f:bb:b4:d5:82:5c:a8:e3:ea:24:
33:ed:c2:5c:b6:10:27:fd:9d:b7:de:8d:40:5e:41:
a0:df:4e:67:1c:e4:a8:32:7f:5d:d1:ba:8a:54:c1:
ae:ab:44:39:1f:21:82:fe:1b:25:09:1c:c4:e3:fc:
29:d6:e2:6c:64:09:54:79:f4:6d:7e:f8:0c:eb:91:
e3:12:27:a8:c9:e1:c4:04:56:85:44:4a:34:8f:fa:
14:30:16:48:1d:cd:77:55:c6:9a:43:83:d7:02:d2:
d3:12:33:5c:cf:b6:54:64:48:ce:d3:e4:52:9f:c3:
49:69:07:43:c7:43:40:b7:e6:58:4d:2b:1b:87:cf:
71:d4:f3:9e:1b:6f:34:07:5b:a2:73:c6:ad:32:89:
cb:e6:fb:c3:65:54:c9:ce:05:3b:37:0b:0c:4f:dc:
90:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A0:A5:CA:80:43:85:34:23:83:C3:B5:FC:06:FE:8C:C8:6B:C7:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E05F35480B0411F0AEC6A37F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.18.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:ae:4e:34:ca:07:36:6f:07:a3:4d:44:00:be:7d:d3:69:6c:
55:a8:21:ab:c4:98:9f:7a:ab:0f:5e:48:6d:0c:59:bb:59:22:
e5:07:f7:1c:3e:32:8a:4b:ec:dc:4e:b8:96:61:a7:71:1e:0e:
88:ae:24:e9:ad:aa:37:43:37:d6:f2:96:c4:f0:3e:2b:f0:44:
79:0d:9d:d5:44:7d:25:43:59:03:ae:7b:33:09:ee:99:9e:84:
32:eb:c8:4e:e3:97:40:e7:6d:cd:66:e1:46:11:5b:f9:a8:e0:
45:b2:d4:13:30:58:96:8c:5f:ef:3d:dd:7b:b8:ea:27:77:83:
4f:c9:5a:4c:b0:3d:9b:92:d6:06:12:ad:4b:69:a6:2a:93:74:
a0:3d:5e:25:77:8f:69:96:02:33:14:c8:4e:da:40:74:1a:31:
36:08:79:87:9e:82:8c:9f:68:5d:ed:bc:99:75:9e:f1:93:8c:
da:27:36:02:10:1e:7c:03:84:0e:d9:a7:52:eb:29:42:f0:5c:
fc:f6:ea:f6:cd:07:f2:6c:01:df:92:c1:3f:bf:3d:1b:4a:cd:
65:19:6d:82:00:0c:73:a9:a2:c8:9e:e2:70:db:4a:85:c6:be:
08:62:37:e5:bb:7b:52:e5:ea:17:5c:e6:6a:b2:02:68:f7:5c:
6f:c2:aa:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:05 2025 by rpki-client