Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62B358F4DC0111EF8BA055BE762E951A.roa
File: 62B358F4DC0111EF8BA055BE762E951A.roa (raw, json)
Hash identifier: SEHyHzSQvATyzHysHH271i18v9T8Ui9L7Ef3EYO1dPc=
Subject key identifier: 3E:5D:8C:8B:28:67:79:5B:86:00:B1:FF:BA:BC:E7:7F:4E:09:1A:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62B358F4DC0111EF8BA055BE762E951A.roa
Signing time: Sun 26 Jan 2025 16:19:58 +0000
ROA not before: Sun 26 Jan 2025 16:19:54 +0000
ROA not after: Sun 23 Mar 2025 16:19:54 +0000
asID: 63139
IP address blocks: 156.227.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70644 (0x113f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 16:19:54 2025 GMT
Not After : Mar 23 16:19:54 2025 GMT
Subject: CN=679660ae-c46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:8a:88:8f:a0:50:00:67:61:59:26:37:ae:
12:a9:6f:b7:c8:b5:d8:09:50:1f:09:87:e5:6d:96:
b9:40:d2:e5:27:be:b2:5a:26:9f:a5:a3:d0:09:4a:
ba:ea:00:b8:97:31:5f:a1:88:07:95:e3:f7:64:a7:
4b:ab:e5:e1:09:e6:b2:14:41:ee:cc:ea:d0:02:e7:
d2:ff:b9:b7:2a:98:4b:9e:2f:35:5a:31:cf:86:e9:
c9:06:8d:cf:44:af:26:c5:08:06:bf:01:45:be:ed:
4d:e6:66:6b:ff:7e:c9:81:9f:59:57:a4:a1:28:12:
0c:1d:6e:d1:05:50:b1:90:c0:89:76:57:49:6e:23:
6d:0b:48:e9:8d:84:4e:78:81:74:e6:fe:89:00:be:
c2:91:0f:05:c1:96:11:41:ea:dc:31:d2:b2:6e:c4:
40:f7:0f:ec:eb:a3:86:e4:ba:ce:20:1d:34:0b:30:
e5:5d:67:ca:3e:1a:00:21:af:21:69:0e:44:8c:03:
4e:fb:1a:a4:85:2e:03:c8:bc:63:d6:8d:ca:d1:f7:
d7:68:53:85:9b:81:57:87:5a:fa:81:41:21:96:67:
ef:c1:58:a7:e9:36:8a:86:02:36:ba:8c:7d:19:87:
57:59:af:ed:ad:a5:56:02:17:20:84:ff:ab:17:7a:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5D:8C:8B:28:67:79:5B:86:00:B1:FF:BA:BC:E7:7F:4E:09:1A:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62B358F4DC0111EF8BA055BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.15.0/24
Signature Algorithm: sha256WithRSAEncryption
65:78:12:a4:09:12:1b:04:d0:06:b5:e8:6a:d0:54:6b:6c:11:
c1:15:a1:4a:52:6d:8a:5e:a0:09:de:d8:6a:34:dd:49:67:2f:
7b:95:2f:99:ec:cb:e4:b7:35:57:6d:15:85:42:74:23:8b:aa:
e7:0b:20:62:4a:3b:7b:a3:8f:b1:cb:2d:8d:53:76:e9:e9:4b:
f3:c7:fe:76:10:d1:a3:be:11:0b:ff:09:79:6b:f9:d9:50:09:
a8:39:63:1e:2f:77:9d:76:44:54:5a:56:9a:ee:48:a1:48:fe:
57:6b:a1:91:3e:8e:0d:19:b8:fb:0d:d1:17:d1:95:22:a3:7c:
78:74:89:3f:8b:80:23:b3:80:a5:4b:a9:38:f6:ae:17:32:07:
66:1b:f2:c0:2a:48:7a:67:b8:81:79:a9:59:71:08:66:82:0a:
cd:1d:eb:5f:82:4c:a6:53:82:e1:d0:24:ee:fa:69:5a:1a:34:
3a:37:38:91:19:15:fc:10:96:d1:fa:d5:74:a7:f8:43:13:45:
34:bb:5e:4c:f6:cf:67:e1:04:47:64:d6:da:3f:1b:f2:03:93:
da:fc:4e:cf:96:41:df:cd:7c:0c:dd:f2:f3:84:ff:e3:69:ee:
93:51:cd:a7:55:fb:ed:6e:9d:9c:b3:22:8f:29:86:30:9b:7d:
e1:7d:7e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:19:46 2025 by rpki-client