Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/237D6F66DC0711EF82F88165762E951A.roa
File: 237D6F66DC0711EF82F88165762E951A.roa (raw, json)
Hash identifier: QTS+CsdJ95ePk8UO+yHAgH8kfLX3xnqXXjQBy2h5T08=
Subject key identifier: C1:08:12:2C:B7:36:B6:D9:DF:E4:75:58:96:75:AB:B4:12:66:AD:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01141A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/237D6F66DC0711EF82F88165762E951A.roa
Signing time: Sun 26 Jan 2025 17:01:09 +0000
ROA not before: Sun 26 Jan 2025 17:01:05 +0000
ROA not after: Sun 23 Mar 2025 17:01:05 +0000
asID: 63139
IP address blocks: 156.227.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70682 (0x1141a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 17:01:05 2025 GMT
Not After : Mar 23 17:01:05 2025 GMT
Subject: CN=67966a55-126b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:61:6d:0e:e4:e1:60:ff:24:25:65:2e:43:
b3:39:cf:10:4f:e0:b2:20:55:35:c0:87:f7:cb:1b:
f8:f7:50:80:f2:7a:f2:34:13:dc:b0:46:54:43:64:
8d:87:68:10:6c:a0:04:59:a1:92:a1:27:f1:e9:ba:
32:44:c2:65:3a:4c:78:a9:64:df:8b:ed:ea:6e:88:
d2:09:d8:1d:d7:df:35:3d:36:01:b2:3f:a8:38:1a:
34:51:48:9e:d1:78:ed:53:c9:f0:0d:82:1c:f7:3f:
67:9e:21:48:cf:7e:38:84:fa:08:0e:e3:b5:aa:35:
59:1e:f4:c1:f2:c6:6d:60:ae:4f:6d:de:85:b9:2b:
4a:e2:51:e9:dc:60:90:ad:bf:a5:67:26:5e:26:8e:
16:80:f0:98:ae:55:4a:5e:94:9b:57:c3:66:bc:e7:
13:fe:2d:00:d2:8a:45:33:71:9a:9a:f7:08:37:1d:
45:29:88:c2:67:83:7f:4a:4c:25:f7:d0:90:95:07:
d5:6f:7a:67:6c:9c:ce:24:27:c3:6f:c3:74:28:5a:
4b:99:7c:9b:87:ca:dc:5a:34:af:20:47:92:a7:c4:
47:ae:42:5c:cf:cd:5d:26:0e:ca:b4:6d:7d:ea:cb:
0b:c3:53:0d:6d:64:ff:36:e4:b0:4f:2b:8d:c8:70:
87:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:08:12:2C:B7:36:B6:D9:DF:E4:75:58:96:75:AB:B4:12:66:AD:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/237D6F66DC0711EF82F88165762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:bd:28:2b:9d:2d:a0:a8:38:85:62:d8:36:3d:a2:15:e7:fe:
e8:fe:02:35:53:ef:f7:96:08:4d:99:c0:d3:94:7c:93:36:8e:
f3:7c:3c:b6:c7:ba:5e:d0:13:0f:3d:d3:fc:99:d2:5f:70:ee:
93:86:2a:08:e9:fd:40:93:13:5e:54:90:22:53:b6:c0:71:87:
19:50:b6:91:58:15:40:c1:61:5d:37:5e:fe:4c:6b:a3:cb:40:
aa:95:9e:4a:77:cc:59:f1:98:8b:3b:60:d3:00:b9:ea:b6:ce:
15:40:77:06:4d:35:db:17:7a:a8:9b:2c:79:f3:d0:91:e5:0d:
1a:32:93:a6:24:49:21:03:60:73:2b:e7:86:70:31:a0:70:5f:
72:51:fd:ce:ac:13:1d:29:82:47:11:85:7f:6d:be:6c:f7:36:
64:16:05:eb:76:81:6b:36:78:42:74:b6:51:e1:55:6b:ec:b6:
34:ba:72:9d:e0:d4:c7:b1:9f:d6:32:21:ba:e8:b0:6c:83:1f:
39:ca:51:b6:66:40:f1:8c:98:ae:79:cf:0a:c3:f5:f1:da:d6:
6f:4e:e1:a6:27:59:cb:b3:f2:ba:64:d6:c7:b8:fe:26:81:81:
43:1a:32:28:fe:9d:f3:7c:e3:17:9f:e4:88:4a:de:56:5e:bc:
6f:5a:e1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:51 2025 by rpki-client