Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E326FDBAF5D811EFA310FF4B762E951A.roa
File: E326FDBAF5D811EFA310FF4B762E951A.roa (raw, json)
Hash identifier: fUQUN7mHPz8BTTOpjyIGxyaZE5Vs/Ypyw/jdihdLGN8=
Subject key identifier: 0A:3E:43:06:CA:9C:3A:35:37:70:E7:E6:9D:95:C3:D0:01:A0:81:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013DEE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E326FDBAF5D811EFA310FF4B762E951A.roa
Signing time: Fri 28 Feb 2025 13:35:34 +0000
ROA not before: Fri 28 Feb 2025 13:35:31 +0000
ROA not after: Sun 13 Apr 2025 13:35:31 +0000
asID: 138915
IP address blocks: 156.244.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81390 (0x13dee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 13:35:31 2025 GMT
Not After : Apr 13 13:35:31 2025 GMT
Subject: CN=67c1bba6-4dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:9a:25:76:df:ae:1d:a0:b9:f4:1a:ab:f9:
06:5f:86:4d:08:c6:18:82:e6:37:6a:79:33:84:85:
e7:c0:a4:4f:fa:72:97:08:79:ef:52:14:95:73:d1:
4d:66:e2:d0:95:40:5c:de:52:e6:88:22:24:4f:90:
5e:fc:4d:e3:fc:00:75:1c:ac:3c:e7:60:4b:24:c8:
29:ff:b7:7f:fc:90:28:56:24:93:b2:2c:4d:0a:d5:
a7:b7:aa:a8:f9:4a:0d:4a:00:58:80:3f:d1:d5:fe:
f5:39:28:80:a3:d9:b0:bb:bc:1d:19:71:c5:1d:f4:
8f:55:77:8b:fe:4e:06:26:8a:88:a9:64:b8:f6:fb:
ef:4c:d6:8c:13:41:0b:32:7e:1e:f1:05:11:18:9b:
f2:5f:06:89:34:51:a4:78:fd:bc:85:8f:bf:10:26:
c6:35:06:93:3c:1a:5f:75:b0:da:8e:b6:3c:1e:dc:
38:16:f0:76:07:fa:e6:8f:14:5c:cf:5a:08:2b:1b:
2e:07:55:a5:5e:ac:a5:75:9c:76:97:71:27:5e:66:
e2:e4:5c:5a:34:a7:4a:9a:d0:1d:6e:ba:00:72:ac:
b0:8b:f0:77:8a:f1:35:fd:b5:d7:6b:aa:23:a9:ff:
b8:7c:46:d3:8b:8f:cc:ab:bd:59:de:b9:51:ae:d3:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3E:43:06:CA:9C:3A:35:37:70:E7:E6:9D:95:C3:D0:01:A0:81:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E326FDBAF5D811EFA310FF4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.36.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:aa:48:7a:b0:bd:1b:ae:99:65:3f:de:e2:18:f7:07:9a:b0:
2d:ce:40:4e:05:d7:c8:80:a3:e6:9b:62:dc:11:45:ab:47:a9:
0e:b4:b2:97:95:de:cb:9e:29:c0:5c:7a:43:4f:26:bd:b5:d4:
46:ae:00:02:92:f7:fb:a1:68:5a:d3:36:2a:3d:6c:b0:f3:5f:
f5:f9:b9:80:19:95:19:8b:47:7d:cd:48:d0:57:56:2c:24:8f:
b4:e4:87:77:48:bd:2f:35:f9:78:d2:2e:77:37:95:67:c7:ad:
41:83:37:87:ac:8d:7c:05:27:34:54:ee:90:4c:88:58:65:7e:
f5:d8:c8:23:ab:ab:b9:f1:b2:5e:ac:b6:a5:60:fb:10:ff:b0:
54:f2:fc:00:01:19:77:ee:a0:09:77:11:06:5f:8d:6f:e1:05:
08:cd:c1:89:e5:a0:f1:f4:08:98:da:31:db:1c:62:3d:37:48:
72:a5:47:49:b9:03:98:82:c0:4e:c2:be:1d:bf:55:58:dc:ad:
e3:cb:96:5e:95:d7:61:e0:44:6b:85:32:e0:02:6b:b1:60:aa:
53:e6:b7:23:13:5b:13:47:85:5e:5c:d3:97:6c:17:44:a0:28:
62:48:8e:2f:e2:4d:51:97:0a:0b:5b:3c:af:09:38:68:d2:dd:
0c:45:3a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:42 2025 by rpki-client