Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68F0220ACD9D11EFA79BD99D762E951A.roa
File: 68F0220ACD9D11EFA79BD99D762E951A.roa (raw, json)
Hash identifier: pOC+bcqeRWXJ0un2DtuM91hQOFhBf0a865HMkgpZqY4=
Subject key identifier: A7:60:1C:4B:5B:7B:22:1F:39:F8:8F:84:C9:13:7F:26:0B:77:37:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01009D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68F0220ACD9D11EFA79BD99D762E951A.roa
Signing time: Wed 08 Jan 2025 08:49:03 +0000
ROA not before: Wed 08 Jan 2025 08:48:59 +0000
ROA not after: Tue 16 Dec 2025 08:48:59 +0000
asID: 984
IP address blocks: 156.249.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65693 (0x1009d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 8 08:48:59 2025 GMT
Not After : Dec 16 08:48:59 2025 GMT
Subject: CN=677e3bfe-abef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:ea:c5:7e:a9:80:c1:6f:a6:07:49:b0:98:
6e:22:07:d4:4c:16:5e:7c:87:90:f9:dd:b1:3b:d6:
ff:bb:92:2d:5f:b3:ce:72:ee:e0:8d:b7:ab:c6:49:
bb:82:1a:44:0b:21:8c:dd:7b:4d:b1:57:c9:74:b9:
46:a1:a2:a9:24:a9:2d:86:22:a7:ea:0e:2f:5e:3c:
23:9e:60:0e:e3:9e:22:b7:7c:93:66:e5:44:ed:de:
d5:ed:63:13:80:0c:20:1b:57:bc:b6:f5:25:d3:e3:
92:9c:93:13:c2:30:73:b5:96:6a:29:b0:e1:6e:3a:
18:bb:cc:07:12:a6:70:63:f1:7c:92:cc:39:6c:b9:
0c:96:a7:88:50:7f:46:6a:d2:50:0a:8c:b1:f5:b6:
d2:22:56:b8:ac:20:1d:bb:82:da:fa:25:61:fc:70:
e0:c3:64:69:d4:5b:eb:bf:72:f3:06:4e:41:11:7d:
2b:9e:41:a5:bf:d6:fb:66:b5:8b:61:ee:f8:cf:05:
68:13:f1:0f:63:93:f5:0e:be:be:71:a8:77:18:f4:
55:65:4a:b2:0a:2e:b8:a9:92:89:c4:73:0c:7a:67:
8f:9f:04:ed:74:77:c5:d9:38:d6:10:19:a8:80:3c:
57:d5:5b:13:62:b8:34:93:94:49:ba:67:e6:ed:47:
88:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:60:1C:4B:5B:7B:22:1F:39:F8:8F:84:C9:13:7F:26:0B:77:37:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68F0220ACD9D11EFA79BD99D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.94.0/24
Signature Algorithm: sha256WithRSAEncryption
03:75:a9:5e:8d:60:a9:c1:e8:ed:4b:5c:ec:d3:5f:cf:3c:7d:
2f:98:49:b7:d6:bd:6d:1a:76:4c:b3:b2:23:e7:e0:85:13:76:
f1:7c:6c:c9:7e:ae:51:04:62:57:77:e5:75:24:56:fe:f7:08:
30:67:89:27:be:94:82:72:bc:70:fe:d3:32:a3:90:e0:de:a7:
84:b5:48:ac:83:5e:5a:82:e5:e7:c2:90:0a:2c:09:1e:8d:6c:
bc:7c:a1:44:cd:b4:14:92:96:3c:fb:ac:a5:3d:d9:19:a6:8a:
9f:14:b5:d8:1f:a4:5d:d8:28:50:62:54:56:7e:e0:61:7b:a4:
cd:b1:f3:76:c4:40:eb:23:f9:bf:56:e9:01:f3:f6:b1:b5:d5:
e2:1e:f5:8d:f2:81:71:ed:19:0d:2c:dd:9b:f4:23:2d:06:c2:
9d:34:27:9d:6b:10:5f:f6:ae:ae:a1:28:25:11:08:9d:5f:c3:
97:09:60:ab:a8:23:43:2d:81:67:dd:03:37:60:3a:26:3d:42:
09:03:9b:0e:3c:84:df:4f:ad:2d:5e:0b:f6:88:8d:44:ef:f8:
95:0c:82:da:77:26:fb:df:e0:f1:d3:f6:e1:77:4d:78:98:07:
36:c3:70:18:7a:45:d7:b5:ee:2e:9c:a2:4a:ba:30:fd:48:77:
3f:f6:d5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:15:10 2025 by rpki-client