Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F57F1C7EFCCA11EFBCDB5C5D762E951A.roa
File: F57F1C7EFCCA11EFBCDB5C5D762E951A.roa (raw, json)
Hash identifier: w4ZFfhCs9ImLveI11j+JQBjqg7wtL38gQvmTx1t5aqU=
Subject key identifier: EE:F8:62:EC:2B:80:33:18:56:8A:59:0B:FC:FC:63:E6:EC:55:B4:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014440
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F57F1C7EFCCA11EFBCDB5C5D762E951A.roa
Signing time: Sun 09 Mar 2025 09:43:31 +0000
ROA not before: Sun 09 Mar 2025 09:43:26 +0000
ROA not after: Thu 10 Apr 2025 09:43:26 +0000
asID: 395793
IP address blocks: 156.225.2.0/23 maxlen: 24
156.225.50.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83008 (0x14440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 9 09:43:26 2025 GMT
Not After : Apr 10 09:43:26 2025 GMT
Subject: CN=67cd62c2-10ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:55:74:10:76:42:24:ce:0c:03:c9:fe:19:
04:c6:04:17:ea:f8:af:97:bf:90:28:96:91:5a:35:
cd:6f:1c:a2:e7:39:e7:57:09:10:a6:46:02:9e:bc:
64:a7:47:e4:35:39:87:85:03:3d:27:e9:3f:fb:11:
e7:31:b7:23:18:c8:40:75:f0:e5:fb:b0:9c:b8:a2:
d4:56:4c:7d:99:e7:34:71:f9:71:e0:1d:c7:6c:c8:
43:ad:d0:ea:41:c5:2f:b5:5f:03:b7:a1:73:2d:fa:
8d:d9:99:6b:cc:4c:16:4c:a3:f7:91:58:d9:c4:a8:
06:c1:67:0c:5b:44:3c:fb:e5:d4:17:42:11:76:2d:
bb:8a:88:ff:24:41:b6:3b:17:9f:5a:7a:99:d7:65:
98:1f:58:a3:19:77:31:b2:1e:51:3a:9d:21:fc:a3:
57:60:6c:4c:be:50:cf:4c:f2:9f:d4:cc:9f:7c:95:
82:81:40:e6:42:2a:cb:2f:2f:7a:c4:1e:eb:91:73:
c1:71:70:00:7a:57:54:51:16:0e:29:f0:07:9f:27:
4e:21:27:e7:30:88:12:1b:99:01:19:a4:4e:11:e9:
ca:c0:ed:e8:3a:ab:a2:0d:68:89:ba:53:61:d2:68:
f6:c8:cb:d5:bb:94:02:e5:c4:64:b8:cb:ad:3e:1e:
6c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F8:62:EC:2B:80:33:18:56:8A:59:0B:FC:FC:63:E6:EC:55:B4:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F57F1C7EFCCA11EFBCDB5C5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.2.0/23
156.225.50.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:1d:a3:fc:22:27:ae:63:f0:55:41:d7:2b:26:0d:41:00:2d:
d3:7c:9e:88:f2:c8:08:dc:f3:41:4f:90:52:e4:0a:80:75:c4:
ba:e0:e7:84:b0:c4:52:4e:b5:23:db:58:c8:d9:69:b2:df:4e:
60:ba:c4:03:b9:05:39:85:18:11:5e:55:1b:94:30:c3:b7:67:
50:fb:a3:d7:92:20:5f:ab:bb:f2:6c:a5:5c:c5:36:09:9e:33:
ff:bb:e1:49:b8:18:91:48:9e:35:fa:0e:21:43:a4:bf:2a:34:
d6:8a:d5:48:c3:68:f5:d2:10:a3:af:70:cb:c2:2c:c6:86:81:
ec:30:d9:cf:68:c1:26:93:92:f3:ee:f8:70:90:48:87:6b:cd:
b7:4d:c2:20:55:9a:ed:da:f1:e5:78:5f:bd:c1:40:64:69:7d:
53:6f:df:ab:3a:ea:e3:93:1a:81:7d:eb:11:5e:68:fe:96:32:
ed:c3:33:1c:9e:a1:e8:74:28:7f:5a:21:10:00:f9:da:ac:c3:
6b:03:f4:bf:1e:0b:a8:fa:88:bf:51:96:6d:0c:e3:32:18:c5:
10:d2:86:0a:27:f6:8f:1d:00:3c:6f:d9:d4:cf:a9:ec:51:7b:
ca:2e:ba:b8:50:78:e7:3f:52:c9:c4:7c:e4:fd:7d:7d:20:b5:
35:b2:ad:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:00 2025 by rpki-client