Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F61F8460023411F0B7821AA5762E951A.roa
File: F61F8460023411F0B7821AA5762E951A.roa (raw, json)
Hash identifier: TSKLaFJ1bWuCy/pONn8MI2BbjM791kFtp4aYx3GDJew=
Subject key identifier: 03:E4:3C:4C:C5:13:D8:4F:AE:75:C6:36:92:E5:8B:EB:4E:CC:A0:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014657
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F61F8460023411F0B7821AA5762E951A.roa
Signing time: Sun 16 Mar 2025 07:04:54 +0000
ROA not before: Sun 16 Mar 2025 07:04:50 +0000
ROA not after: Tue 22 Apr 2025 07:04:50 +0000
asID: 213995
IP address blocks: 156.253.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83543 (0x14657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 16 07:04:50 2025 GMT
Not After : Apr 22 07:04:50 2025 GMT
Subject: CN=67d67816-7eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:bb:f3:41:a3:9a:d8:20:e3:fb:c9:ab:d7:
b7:2e:5c:67:de:9b:78:f7:92:99:b8:f5:2e:9b:ec:
a9:77:e6:4e:2c:1f:76:b6:bb:50:d6:b3:ba:95:9d:
f0:24:17:df:de:ad:c1:b5:b5:12:3e:eb:af:bd:11:
90:c8:48:f9:79:b7:49:0a:47:f7:b0:fd:38:cc:a7:
87:06:db:42:d0:3e:03:f6:b8:b9:d1:0d:70:d9:b5:
66:00:a6:63:d4:4b:7c:81:70:19:7a:6a:53:b7:6a:
59:36:0a:f1:58:0d:86:c8:cb:1a:10:9e:67:10:37:
41:05:6b:2d:ab:1f:ec:fb:9a:5b:ae:d9:83:6d:b8:
65:66:c4:35:18:c8:c8:a1:97:85:25:49:f5:ab:7b:
c4:65:93:03:47:3d:88:14:2f:8f:76:31:42:38:d6:
92:14:c1:7e:90:a3:30:e1:a1:21:ca:e8:12:1c:da:
8a:e6:2a:02:05:5f:38:c3:9e:33:82:df:77:56:7a:
3c:d8:b4:be:45:57:8c:bd:dc:51:4d:02:16:63:29:
4f:55:14:14:86:db:e1:b7:96:4e:02:7f:6b:e8:29:
d8:ab:24:3d:00:a9:32:e3:46:10:ed:e1:b3:bf:e5:
68:b7:b5:7d:00:d7:94:60:26:84:d5:49:d3:a8:b3:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E4:3C:4C:C5:13:D8:4F:AE:75:C6:36:92:E5:8B:EB:4E:CC:A0:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F61F8460023411F0B7821AA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.228.0/24
Signature Algorithm: sha256WithRSAEncryption
17:92:f8:d9:87:b8:4d:bb:70:d4:bd:82:9d:0e:9b:31:7d:f9:
7b:f0:68:be:a9:cf:d0:66:f7:68:98:2b:24:03:d2:0d:ec:e2:
4f:bc:e4:2f:80:fa:78:9b:79:30:5f:93:96:8d:02:40:f9:50:
35:c6:24:bf:d5:3f:4b:77:d3:92:14:f0:ed:9d:1a:1b:77:07:
59:0f:ce:20:11:2e:df:fe:68:a9:49:24:dd:db:b1:0b:47:c8:
00:ba:c8:ec:db:10:1a:09:48:f3:22:81:23:4c:5e:3d:4f:a1:
f5:0e:5c:a7:ab:e6:1e:32:86:19:e8:91:1c:96:b1:6a:ce:df:
fa:b8:5c:e0:9a:2f:85:6e:37:b4:67:2e:cb:17:f6:1c:35:5a:
22:62:e1:a0:f8:51:3d:38:11:58:be:e3:89:8f:39:21:60:cd:
c8:12:eb:a0:a7:da:84:1e:dd:74:3c:70:86:09:aa:e3:97:e0:
31:99:e9:98:77:e4:49:8a:73:a0:8d:2f:7a:59:a2:ee:cd:d3:
80:be:4e:59:b6:8c:63:a0:61:6b:3b:6a:c9:db:d1:f2:a7:ad:
3b:a0:b0:fc:2f:f5:0d:df:f9:c8:7d:44:27:72:0f:d8:79:e5:
14:21:50:a5:9f:a1:b0:51:9c:1d:87:a1:f0:75:2a:25:ad:76:
45:d9:33:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:52 2025 by rpki-client