Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA66EB0AD97311EF95800D84762E951A.roa
File: BA66EB0AD97311EF95800D84762E951A.roa (raw, json)
Hash identifier: nzp8SKlYb93GcORfvP/v5jvXQ4iB04g4hzb7yiLum88=
Subject key identifier: F3:CC:85:B8:4A:4A:3B:A3:79:C9:6E:50:88:DF:60:5C:E3:C0:11:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010F10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA66EB0AD97311EF95800D84762E951A.roa
Signing time: Thu 23 Jan 2025 10:20:54 +0000
ROA not before: Thu 23 Jan 2025 10:20:50 +0000
ROA not after: Sat 15 Mar 2025 10:20:50 +0000
asID: 138915
IP address blocks: 156.224.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69392 (0x10f10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 23 10:20:50 2025 GMT
Not After : Mar 15 10:20:50 2025 GMT
Subject: CN=67921806-9a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:75:70:4b:d1:d9:da:58:53:36:8c:fe:08:c0:
69:ca:f6:25:4e:9c:f7:81:ec:77:86:6b:68:02:93:
94:bf:e2:06:ac:ac:5c:9f:b3:30:e5:cc:f2:7c:af:
36:d9:f5:a8:d7:44:f6:1a:01:e7:ec:39:5b:89:c1:
ee:48:da:bb:92:40:d0:cd:5a:c1:e1:31:6c:ab:c9:
30:5e:57:39:33:37:78:ff:85:28:01:79:a2:d1:d9:
69:e5:29:d9:b7:62:14:1c:0b:68:b6:86:65:92:4e:
f4:d9:9a:28:b3:14:ff:94:48:25:f4:b5:28:4d:e5:
7e:e8:b5:cc:30:11:b7:1b:17:67:ac:17:ce:a0:a7:
6b:57:9a:ec:6a:d8:d7:2c:5f:69:b3:eb:88:3f:b6:
7f:fa:e0:67:ae:11:14:d5:07:25:88:e5:e2:a4:a3:
eb:84:38:e7:85:0c:f1:80:3e:9e:49:05:b9:32:96:
b6:83:0d:8e:cf:53:24:71:0d:87:49:5c:7b:4c:05:
2f:ad:4e:7a:d8:cc:a8:2b:ce:e5:05:7d:cc:dc:eb:
fd:0a:d7:4c:86:99:80:74:77:d5:97:bb:63:8d:ea:
1b:b7:91:54:37:0f:64:8a:51:c6:fb:db:20:8a:e0:
54:00:d4:17:23:80:df:ac:90:e3:4b:aa:d7:67:68:
26:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CC:85:B8:4A:4A:3B:A3:79:C9:6E:50:88:DF:60:5C:E3:C0:11:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA66EB0AD97311EF95800D84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.3.0/24
Signature Algorithm: sha256WithRSAEncryption
25:64:ae:3f:83:65:de:25:22:98:0c:f5:f1:93:32:13:b6:2e:
ca:46:42:41:16:5d:bd:1d:61:09:aa:cc:bd:9b:00:d5:2c:fe:
31:5b:de:de:6e:90:e5:91:d9:ff:bc:96:95:dd:b7:4f:4b:f5:
f3:0c:85:13:3c:06:3a:af:7a:c2:c6:4c:b7:3f:80:d8:48:3e:
ed:a4:b5:ee:a4:17:14:06:1a:23:ff:50:42:66:8e:86:28:fe:
22:a4:fd:79:70:57:c9:e5:d0:f8:93:e6:79:21:6f:80:55:e9:
86:a2:2e:85:4b:7b:3e:81:dc:5a:2f:01:c6:aa:2e:f7:82:30:
89:b4:f7:14:fc:92:35:67:0f:61:25:f3:1c:97:ed:5b:23:cb:
7d:fb:a5:5e:88:5a:0b:1b:0c:6d:1f:a4:42:f6:8c:44:22:61:
52:14:03:70:94:f8:68:81:09:43:b6:3e:00:91:01:3b:8e:a1:
7e:1b:ba:e3:3c:35:97:bc:a6:64:26:9a:e3:f8:14:17:82:db:
35:71:e5:7c:27:3e:ed:2e:3b:49:34:90:24:34:14:26:a1:e5:
09:d8:4c:3d:0f:cb:bb:d4:58:b7:58:e3:89:0f:8e:15:55:ff:
34:96:77:b4:31:fc:cc:91:9c:1f:a7:64:39:8a:e7:e9:e8:81:
ed:fb:79:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:07:21 2025 by rpki-client