
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/926A6BA8DC0311EF98266C4E762E951A.roa
File: 926A6BA8DC0311EF98266C4E762E951A.roa (raw, json)
Hash identifier: qyoYUgkyresed+81+guxHL6IeeFcEZKOY73NbgnjBvE=
Subject key identifier: 55:7C:C2:0A:F6:EF:47:D9:36:15:86:BE:E5:17:BC:BC:02:0C:F1:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011404
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/926A6BA8DC0311EF98266C4E762E951A.roa
Signing time: Sun 26 Jan 2025 16:35:37 +0000
ROA not before: Sun 26 Jan 2025 16:35:33 +0000
ROA not after: Sun 23 Mar 2025 16:35:33 +0000
asID: 63139
IP address blocks: 156.225.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70660 (0x11404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 16:35:33 2025 GMT
Not After : Mar 23 16:35:33 2025 GMT
Subject: CN=67966459-e326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:80:7d:50:f0:66:6c:1a:d1:0f:b4:30:35:f8:
66:2f:4f:74:2a:76:24:8a:f0:00:6c:69:90:7e:f0:
ed:bc:04:17:8a:5e:a1:bc:94:11:14:97:f3:61:70:
12:98:f0:52:53:7e:3f:a6:dd:ab:e5:48:42:0d:09:
1d:ae:5d:1b:3f:f4:83:93:93:ae:83:0d:42:17:45:
0e:b7:0b:1f:cd:85:c2:02:02:e5:5f:ba:ae:5d:42:
43:c4:63:71:eb:57:4f:b1:cf:9f:62:72:bd:1b:7f:
0f:3e:ba:ef:4d:17:21:4a:0d:5c:9a:d7:0a:df:4d:
23:9c:f7:17:ef:53:b3:2f:3c:4e:62:c5:fb:73:c2:
79:c9:03:7d:d2:72:c9:6f:15:09:a4:08:74:5b:53:
de:a7:0d:fb:0b:2e:a1:fc:8d:6c:2a:af:50:2a:bf:
7b:6c:74:bc:9a:ae:74:1e:6a:3e:15:57:8c:64:44:
2c:0f:53:d9:49:a9:04:8d:7b:0c:1f:a7:d0:bd:f7:
ba:9c:9c:ef:7c:f5:80:c6:cd:3d:3e:c6:ea:88:21:
75:51:61:69:cf:ad:a3:d5:f7:35:b4:c7:00:b1:bd:
e8:2c:1c:04:5e:7e:60:5b:ec:86:7d:6f:d3:98:91:
a5:03:cb:1e:6b:68:f3:49:85:cc:2c:92:9d:a5:3f:
d8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7C:C2:0A:F6:EF:47:D9:36:15:86:BE:E5:17:BC:BC:02:0C:F1:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/926A6BA8DC0311EF98266C4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.116.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f3:03:2f:60:8e:27:47:6c:9e:26:d5:0d:51:83:c8:8e:53:
58:a1:86:75:1a:cb:25:41:41:34:96:35:c0:ba:65:7f:5a:b2:
83:e9:31:95:20:ac:09:82:17:f9:b5:3c:0f:a1:a6:27:0a:8c:
5e:bf:45:79:ee:c5:b1:7d:ba:ac:c1:62:31:fe:14:0a:3e:b9:
78:db:d5:21:c8:e3:5f:e5:dc:73:5e:78:cc:82:d2:18:15:40:
e4:39:c2:08:c1:86:f6:6d:2f:20:4e:ba:09:e2:93:d0:4b:50:
01:43:bb:dc:4a:bb:fd:67:c0:fb:9c:35:47:fd:54:4d:26:b2:
b4:0f:b1:db:98:bd:df:b9:7a:d9:40:48:13:45:b6:c1:ec:29:
bb:3c:c1:90:a4:87:b1:d2:b9:f7:c0:93:bf:dd:fc:d4:8c:b8:
3a:b3:32:8f:76:78:50:0f:af:71:92:55:dc:0a:b5:26:61:b8:
6d:9d:65:ab:bf:e8:22:cb:34:27:5e:ab:05:eb:08:e6:02:a7:
a0:4e:0e:45:7a:3b:f7:d8:0d:ee:29:4d:8d:e1:54:54:0e:55:
64:7e:5e:47:b3:f9:07:61:e8:b6:1e:e0:12:70:ff:43:91:35:
e0:be:a5:ca:74:fb:3e:88:8e:28:fb:ea:71:5e:fd:aa:a9:cb:
d0:9d:b1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:53:51 2025 by rpki-client