Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DF12036D3D911EF86F2B7AF762E951A.roa
File: 7DF12036D3D911EF86F2B7AF762E951A.roa (raw, json)
Hash identifier: QX9uJIkjl3Mu2SYBKYa+G9f6EJf+2WcaxP/lCkysss4=
Subject key identifier: F9:CA:94:03:1D:20:B0:12:6C:56:B9:E8:48:1C:45:BC:88:EE:5B:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0108BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DF12036D3D911EF86F2B7AF762E951A.roa
Signing time: Thu 16 Jan 2025 07:14:15 +0000
ROA not before: Thu 16 Jan 2025 07:14:11 +0000
ROA not after: Thu 20 Feb 2025 07:14:11 +0000
asID: 142032
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67774 (0x108be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 16 07:14:11 2025 GMT
Not After : Feb 20 07:14:11 2025 GMT
Subject: CN=6788b1c7-ac0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:0c:57:8b:59:94:25:2e:68:84:85:ce:f3:
a1:17:c8:48:40:2f:ea:4e:19:26:8e:a3:cd:17:bb:
13:fc:49:c5:1b:1e:2f:45:7c:5b:21:58:52:62:c3:
af:a0:a9:dd:6f:90:6c:94:fd:8d:ba:98:57:e0:08:
9d:13:5e:20:b6:59:f7:a7:a8:8b:36:4b:28:f4:16:
d1:cf:2d:a3:d9:3d:37:a6:62:e4:75:71:25:67:a1:
57:63:86:30:42:ef:10:cf:48:ec:f6:d4:4f:7a:cb:
4b:16:fc:27:3f:65:26:fa:75:e0:dc:a6:f7:84:5c:
3c:02:97:4a:5e:20:55:53:8e:15:27:4c:9e:9c:e6:
75:c9:4d:11:a6:01:da:f8:eb:37:cb:af:c8:ae:70:
d6:17:4b:0e:38:72:44:a5:3e:3a:ad:31:a8:ea:d7:
bc:7a:ca:a2:d0:2b:09:5f:e6:f7:0e:08:27:a7:c6:
c8:99:30:ff:7f:27:53:55:cb:75:3c:fd:e7:3b:5f:
0a:69:f3:db:c2:db:d4:86:fa:50:24:a8:23:b7:9f:
12:f9:cc:ed:74:90:ae:96:01:9f:22:69:d0:2e:b9:
0c:11:8a:fb:fd:35:b0:00:bd:e6:0a:f0:02:ad:41:
44:81:85:65:0b:c9:34:5e:48:0e:29:2f:37:79:93:
88:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CA:94:03:1D:20:B0:12:6C:56:B9:E8:48:1C:45:BC:88:EE:5B:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DF12036D3D911EF86F2B7AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
02:4c:32:a1:13:cb:60:ba:9e:44:da:82:55:5f:7b:c8:d0:71:
59:43:15:f8:91:0c:b1:b9:43:70:21:89:dc:d4:a3:28:fb:bd:
bd:da:50:a9:e1:e7:2e:fc:5a:7a:7d:18:ab:36:0f:2d:cd:f6:
6f:bf:f6:22:81:f7:ba:e4:57:bf:05:c9:96:a2:87:19:3f:31:
a8:b2:95:c6:ed:76:17:d0:7c:76:b5:08:50:8f:4f:31:da:17:
1c:bf:95:fe:a7:3e:51:d9:d6:c4:8a:f3:6b:43:d1:fa:70:29:
aa:53:5a:94:7f:a4:40:70:ef:63:e7:76:41:dd:1c:cf:5e:e8:
02:7f:a1:d9:0c:57:44:64:71:81:e5:5c:97:23:54:7e:21:0c:
b2:04:ce:fd:c7:27:a6:6e:4a:4a:e7:1c:a0:67:f2:74:12:d4:
54:f0:1c:a1:93:70:95:5b:be:92:4b:ae:c9:f3:68:90:aa:43:
f9:21:1d:7c:34:7c:5d:70:b2:bd:50:0d:47:96:09:5c:f1:3b:
e1:80:6e:bc:62:16:b0:a3:f2:d1:91:4d:6e:e1:dc:7d:f8:16:
ee:6f:7a:41:05:74:cc:17:b1:a2:31:79:9e:33:47:de:91:14:
1b:b3:df:3a:28:08:1a:06:60:5e:6a:63:b3:eb:ea:9d:a1:cb:
7c:6b:19:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:27:50 2025 by rpki-client