Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC3F70F0DBFD11EFA087DDA7762E951A.roa
File: BC3F70F0DBFD11EFA087DDA7762E951A.roa (raw, json)
Hash identifier: MVMHLAXfTVjskpBCa3NLrbMq7xXhZn/vWXwH3PckPSA=
Subject key identifier: 81:7E:23:6E:0D:DD:F0:22:0A:75:5A:D6:0C:E1:ED:72:A3:49:28:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC3F70F0DBFD11EFA087DDA7762E951A.roa
Signing time: Sun 26 Jan 2025 15:53:50 +0000
ROA not before: Sun 26 Jan 2025 15:53:47 +0000
ROA not after: Sun 23 Mar 2025 15:53:47 +0000
asID: 63139
IP address blocks: 156.227.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70642 (0x113f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 15:53:47 2025 GMT
Not After : Mar 23 15:53:47 2025 GMT
Subject: CN=67965a8e-31c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:2c:b3:94:42:e1:a1:54:5c:28:41:a0:f4:
ae:b7:bf:97:0a:bc:d3:d2:e7:64:ec:4e:5b:2e:d5:
4c:4b:0d:7d:f0:3f:4f:db:97:63:11:69:9d:2d:51:
21:0e:fc:f0:45:f9:7a:a7:0d:a8:4a:13:b6:26:d5:
a7:0f:b8:29:75:9a:22:c9:62:c7:c1:07:de:83:ef:
e1:19:b5:d4:ce:0e:56:d0:49:10:9e:8a:9c:e9:2f:
08:4b:c5:08:92:2e:04:c1:68:df:f5:cd:ec:c3:e5:
ef:a6:83:d2:8d:ab:f5:2b:88:af:cb:c6:02:13:62:
98:7d:2d:3c:1a:6a:fa:6a:0c:67:7e:e4:7e:ea:67:
1b:a5:20:3c:ec:cc:d6:67:53:2f:8b:30:19:11:41:
31:42:13:bd:32:e4:74:57:d4:77:e4:7d:2f:6c:74:
3b:16:29:ce:6d:8d:4e:8b:cd:d6:ec:45:29:26:f1:
a4:ff:4a:c1:ce:71:fc:31:c4:f8:41:c2:8d:a0:ad:
de:e0:14:bc:9e:f8:e4:d8:32:82:7a:33:ae:27:c1:
49:92:79:f1:41:50:f5:49:47:b4:18:a0:3f:43:cf:
48:d5:a9:8e:ee:24:99:e1:a2:90:31:86:07:11:b0:
89:7b:d1:96:0b:4a:b6:40:ba:f0:00:02:a9:bd:cd:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7E:23:6E:0D:DD:F0:22:0A:75:5A:D6:0C:E1:ED:72:A3:49:28:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC3F70F0DBFD11EFA087DDA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.14.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:4f:77:ff:0e:86:c4:a0:7e:fd:e5:bc:a5:46:fa:85:9e:48:
94:29:2f:1e:88:07:c4:fe:4b:ac:d0:e3:dc:83:0b:8c:7f:1d:
6c:4c:df:c8:6d:4e:7a:ca:c0:61:13:95:4b:e2:78:fe:15:29:
ad:23:5d:1d:ad:0d:9a:13:98:d1:c6:0f:00:ca:22:8e:a6:95:
66:cf:0e:8c:2b:a1:ef:d6:8b:3e:8f:ce:86:94:86:2e:9c:2e:
40:5f:7f:74:eb:17:92:fc:c7:84:70:74:aa:af:43:5f:3d:a8:
f5:28:1b:b6:b6:6c:b5:6d:4f:e8:55:4f:da:d4:d2:5b:6d:33:
98:d1:f6:23:9c:fc:e1:f8:34:0d:1f:e7:66:14:9b:e0:88:5d:
dc:d4:68:1d:04:54:0c:7f:f9:ba:6c:31:d1:a4:f4:26:88:ca:
90:40:61:07:01:19:0b:97:89:68:47:91:18:36:ca:80:62:ba:
6b:74:92:2f:40:8e:7e:41:ff:35:e7:32:22:90:ce:82:1d:8e:
56:65:c0:b0:2d:f3:62:fd:06:90:c1:74:bf:0b:b9:36:c6:b1:
85:7c:82:17:07:5d:12:d8:f5:23:80:37:e6:99:77:f6:8a:06:
f4:dc:de:bc:59:bf:87:a9:2b:b9:24:26:4f:c4:e1:5c:92:31:
82:56:68:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:21:17 2025 by rpki-client