Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E94D882EF33C11EF88E8065B762E951A.roa
File: E94D882EF33C11EF88E8065B762E951A.roa (raw, json)
Hash identifier: o1gVUptE9dOZcBLBKzPM0aEeDzuVDoTakbs1uhSy5kA=
Subject key identifier: F1:99:C6:C0:61:79:30:3D:E2:E8:81:1C:C0:0F:D8:7F:AE:BC:94:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012D84
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E94D882EF33C11EF88E8065B762E951A.roa
Signing time: Tue 25 Feb 2025 05:54:01 +0000
ROA not before: Tue 25 Feb 2025 05:53:57 +0000
ROA not after: Sat 19 Feb 2028 05:53:57 +0000
asID: 17561
IP address blocks: 156.249.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77188 (0x12d84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 05:53:57 2025 GMT
Not After : Feb 19 05:53:57 2028 GMT
Subject: CN=67bd5af9-83b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:45:9e:06:b4:95:e9:b7:73:ec:0b:c7:3b:
ab:08:91:93:fb:a7:fc:6e:8c:41:86:68:25:ea:1a:
cd:2b:45:35:c9:99:a4:ab:df:31:39:6b:33:5b:46:
24:e6:71:95:65:4d:29:04:29:03:cb:28:a2:fc:07:
28:e4:ca:22:21:af:c8:0c:ac:91:34:50:7a:d6:87:
ba:0a:45:6b:80:0e:13:09:4c:55:c4:f2:82:e9:6b:
44:47:23:93:0d:7f:9c:05:66:dc:df:aa:67:73:be:
83:3a:a3:61:bb:92:e1:ab:2e:d5:d9:2a:17:d8:fa:
42:89:2e:38:4a:10:95:ff:36:a7:66:30:d4:f7:05:
bc:fb:8f:13:b6:c7:8e:1a:73:0c:2a:17:1a:9f:fe:
d1:b8:50:88:0c:25:92:22:18:95:25:a9:b0:89:9c:
f0:23:22:5b:c4:c3:7f:c4:ee:1a:c8:89:d5:8c:a4:
d9:eb:c9:66:20:35:e7:7d:bb:fb:b6:5f:94:4a:a9:
df:d0:e8:cb:43:da:c8:2d:8d:49:02:86:12:e3:ed:
24:ae:82:db:c7:88:e9:f2:11:35:97:ce:73:5f:c3:
ed:e5:d8:b9:89:70:8d:7c:43:29:45:ca:fd:b7:6e:
72:cf:b5:8a:2e:56:e9:34:ec:87:42:47:66:03:aa:
83:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:99:C6:C0:61:79:30:3D:E2:E8:81:1C:C0:0F:D8:7F:AE:BC:94:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E94D882EF33C11EF88E8065B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.194.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ab:bf:ed:1e:0c:91:e4:69:81:dd:2b:10:aa:6b:a4:48:8a:
7c:02:14:e1:1a:15:96:5b:04:0d:13:08:49:39:44:ab:57:39:
a8:1c:86:36:f4:a1:ef:3f:d4:ce:9c:e2:7f:d7:e0:15:4c:58:
2c:44:5f:3e:a1:75:f3:64:fd:5b:5a:cf:e1:7f:a5:58:e7:bf:
32:10:87:27:c5:c4:4f:fa:fa:11:fc:f2:02:4a:e9:e4:00:91:
64:61:4c:06:4c:56:58:6e:07:5e:1a:9e:b5:a3:cb:23:95:ba:
86:0e:5f:4a:67:d6:17:20:fc:a2:3f:bd:e1:f9:48:a8:8e:4d:
3b:c9:fa:62:5c:10:28:46:1f:35:ea:d7:9f:da:8d:33:a0:2e:
71:e7:7b:d5:74:3c:0e:c2:96:c8:1d:1a:bc:62:20:d4:e3:97:
3f:02:0d:3a:73:88:07:c0:59:90:cb:6c:bc:ae:1f:ce:ad:52:
de:5c:cd:8a:37:0c:f2:c7:b9:45:88:5c:a9:5b:21:80:5e:8a:
57:77:74:71:0e:28:e4:a2:bb:ac:18:ed:17:cf:65:aa:da:f8:
ca:61:d3:7c:cd:34:e1:a1:6d:b6:9a:1a:fb:90:43:e6:8f:10:
4e:00:d2:16:47:b4:43:9d:90:d2:e2:d6:12:2f:fc:b4:04:08:
35:ae:d0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:51 2025 by rpki-client