Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5199C754DA2311EFA688DAA5762E951A.roa
File: 5199C754DA2311EFA688DAA5762E951A.roa (raw, json)
Hash identifier: BL4b96mArfLqyUmk+Bsp7EfotI+0OVPY1yU2myw6E6U=
Subject key identifier: 83:5B:D9:56:C5:D2:B4:C2:71:69:E4:67:DB:C1:06:44:20:82:45:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F25
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5199C754DA2311EFA688DAA5762E951A.roa
Signing time: Fri 24 Jan 2025 07:17:50 +0000
ROA not before: Fri 24 Jan 2025 07:17:46 +0000
ROA not after: Sat 01 Mar 2025 07:17:46 +0000
asID: 61112
IP address blocks: 156.229.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69413 (0x10f25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 07:17:46 2025 GMT
Not After : Mar 1 07:17:46 2025 GMT
Subject: CN=67933e9e-cbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:d7:a7:4e:0a:47:88:70:63:6a:de:45:53:
10:e9:c3:32:df:e2:8b:d3:7c:f1:49:44:3b:71:3d:
15:fe:54:a7:ee:3d:3f:22:af:6a:1c:da:0c:32:a8:
2f:eb:95:a7:7c:a5:bd:8a:2c:21:f3:9c:d4:31:42:
c7:bf:fd:e3:34:e9:46:bc:84:98:cf:e8:dc:32:30:
a6:03:ec:eb:6c:e7:bc:2d:eb:b1:87:35:5e:7e:a8:
f0:94:49:8d:39:b1:df:81:17:56:a9:37:73:1c:fa:
c6:44:b2:b6:43:f1:86:e1:f1:97:e5:d2:cf:51:59:
96:dd:a4:76:b1:7e:0d:35:27:a6:b0:4c:0b:c6:e6:
f6:81:80:b2:a6:9e:6d:31:f0:2c:b8:0c:97:77:b2:
4c:32:b3:3f:4e:fb:d9:d2:b7:95:76:34:dd:94:08:
97:d8:8d:6a:17:47:c0:45:97:56:92:62:45:00:fd:
15:22:ef:4d:23:23:95:06:0e:83:f3:27:f7:14:c1:
2a:8c:19:cb:63:f9:5c:4f:de:35:0a:c4:c9:b6:b7:
a3:87:6f:87:02:75:33:bf:d8:2e:e6:a7:a0:eb:45:
ab:e9:14:6b:ce:00:d1:73:bc:ef:98:f3:9a:b6:c9:
ec:96:3a:79:79:28:e9:38:95:ec:02:3b:bf:9d:43:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5B:D9:56:C5:D2:B4:C2:71:69:E4:67:DB:C1:06:44:20:82:45:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5199C754DA2311EFA688DAA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.160.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:db:30:b2:3a:11:2b:ab:2c:ee:a8:5a:0c:d2:7f:57:1a:23:
5b:4a:52:0f:ee:b4:c9:8b:99:d4:32:21:07:c2:42:49:bf:16:
2a:5e:d9:fb:68:c2:4e:ce:03:8a:72:9f:d7:10:2b:28:6a:3b:
1a:cc:b3:cf:06:f6:5b:36:79:33:05:cd:42:35:69:6f:cb:1f:
56:0f:50:3b:8d:5c:08:7c:d5:86:49:b2:4f:e5:57:2c:88:c5:
03:aa:16:bf:a0:2a:8d:0a:3b:b1:1c:50:9b:74:e5:0a:49:2c:
45:26:71:38:ba:fd:57:48:20:15:b1:f6:23:10:6b:8c:77:9e:
a1:26:0e:0a:6c:d2:ff:41:e1:50:4d:73:e7:34:cf:65:63:c8:
7d:b1:52:7d:d8:9f:46:e1:e5:74:79:8a:2a:d0:86:f7:17:ee:
14:db:da:cd:27:1c:c3:44:02:c7:a3:39:2d:00:ab:27:e0:3a:
60:d0:31:e2:0f:31:01:17:d8:c7:df:9f:49:9d:ea:2e:75:e0:
3c:10:33:b6:c8:c1:5d:1d:f1:89:21:99:0f:c8:c1:f9:9c:28:
c7:ea:e6:5d:93:9b:f6:52:5f:2f:04:08:23:3e:a8:82:82:f8:
e2:bf:b2:87:16:f5:74:7a:49:a2:11:01:de:e4:4a:1c:6b:3c:
ac:9f:7e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:53:50 2025 by rpki-client