Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B73DF560D57F11EFA880567C762E951A.roa
File: B73DF560D57F11EFA880567C762E951A.roa (raw, json)
Hash identifier: HLGJE8Vwae3Z5DJiyoe/GmUc5PZj3dUqVB4VJTD0pAc=
Subject key identifier: 6F:76:46:94:21:66:AF:53:D6:A4:C2:0F:D1:03:06:E3:7F:1B:60:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B73DF560D57F11EFA880567C762E951A.roa
Signing time: Sat 18 Jan 2025 09:36:38 +0000
ROA not before: Sat 18 Jan 2025 09:36:34 +0000
ROA not after: Sun 02 Feb 2025 09:36:34 +0000
asID: 25160
IP address blocks: 156.225.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68435 (0x10b53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 18 09:36:34 2025 GMT
Not After : Feb 2 09:36:34 2025 GMT
Subject: CN=678b7626-43dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7c:8d:2c:1d:55:dc:c5:cf:19:1e:fa:7a:b1:
8e:36:18:82:33:b3:f8:b5:2f:5d:69:df:a5:06:85:
b7:33:2e:fb:03:a3:7c:db:ee:61:ca:14:16:05:39:
0c:69:2a:07:97:8a:f6:c9:51:95:68:ed:08:35:41:
38:e2:8f:e5:ae:ad:52:f8:ab:6d:2e:60:7a:55:96:
f1:c3:ea:75:2c:99:1f:64:2b:e0:42:e7:0c:26:9c:
f7:f3:5e:a6:98:87:64:72:c6:43:84:52:ec:5a:ff:
f3:07:a1:af:1b:ea:5a:15:57:fe:7f:76:c2:f6:a9:
13:5e:ca:b3:f9:c8:0a:21:ef:3c:76:5a:26:4c:d6:
b8:4c:de:44:ed:56:99:bb:a1:5b:1c:4d:be:3c:cc:
16:8d:7d:fa:a8:b2:64:a9:71:25:e5:1c:25:bb:f6:
05:13:82:87:91:25:0a:05:c5:85:44:a8:a4:42:48:
7d:05:c3:cc:0e:be:fa:3e:df:b0:66:b1:16:98:6d:
95:52:d4:e7:f6:78:03:1b:57:32:4d:1e:da:b8:48:
2a:ae:dc:7d:06:fe:fc:14:d7:d9:65:5e:ee:2e:9e:
8a:22:85:b7:e0:9e:69:d9:03:a1:22:38:eb:0f:74:
67:8c:24:da:fe:75:07:66:af:7e:53:7c:8c:c9:cb:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:76:46:94:21:66:AF:53:D6:A4:C2:0F:D1:03:06:E3:7F:1B:60:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B73DF560D57F11EFA880567C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.15.0/24
Signature Algorithm: sha256WithRSAEncryption
97:bf:5e:6d:61:56:63:32:91:d5:b2:f2:90:fe:cc:49:9a:fe:
b9:b6:11:a0:d5:23:2d:80:a7:5c:59:0e:c1:51:8c:d3:f0:5e:
33:d3:17:87:ff:fb:55:c1:c2:04:f1:bc:1f:9f:83:46:44:ba:
19:fa:a3:4f:4c:53:4b:53:4b:fd:73:b0:ad:0b:87:7a:63:9b:
63:61:46:c3:bc:6a:b4:dc:27:df:9d:bd:8c:e4:59:5b:cd:d5:
16:75:a9:97:1f:8b:bc:25:35:6e:1b:0e:05:2b:b3:18:39:b6:
05:db:29:c6:5e:3d:0e:8c:11:ef:fe:1e:12:02:11:74:25:25:
80:ac:5d:5f:e9:69:a3:35:b2:66:f3:33:c5:9f:08:b9:7e:49:
d7:bd:cb:2e:15:8b:73:bc:1b:15:8e:a1:7c:b2:f6:0b:64:d4:
00:88:1f:28:6e:c9:96:62:38:d1:81:5e:6e:b0:62:9e:45:dc:
4d:18:7f:8b:2c:24:2c:9d:af:8b:33:71:be:0e:19:6b:0d:c0:
3f:f4:10:a2:67:dd:9e:c5:c9:dd:6f:ae:09:e4:51:21:a5:d6:
5c:54:9f:8b:9a:49:09:ad:bd:05:ab:3e:bd:27:9b:97:e2:3e:
96:da:ce:10:3f:d7:ef:17:65:7f:a0:34:aa:6d:55:a3:11:c4:
76:ba:b4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:32 2025 by rpki-client