Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF680AECDC0411EFA78D3957762E951A.roa
File: BF680AECDC0411EFA78D3957762E951A.roa (raw, json)
Hash identifier: XzvFpA+E+J/87f5ds1xEtR8kzkz1sNFGtnnF1G77UH8=
Subject key identifier: 32:97:19:6D:D0:AA:C7:20:D5:A6:AF:EF:C9:05:8A:4B:6C:13:0A:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01140C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF680AECDC0411EFA78D3957762E951A.roa
Signing time: Sun 26 Jan 2025 16:44:02 +0000
ROA not before: Sun 26 Jan 2025 16:43:59 +0000
ROA not after: Sun 23 Mar 2025 16:43:59 +0000
asID: 63139
IP address blocks: 156.225.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70668 (0x1140c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 16:43:59 2025 GMT
Not After : Mar 23 16:43:59 2025 GMT
Subject: CN=67966652-6fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:39:65:59:c0:64:fd:11:a5:26:9b:2d:a0:
0c:8a:c5:54:3f:47:5d:c9:4a:b8:5d:16:da:87:e8:
e3:73:28:89:f9:2f:66:70:6b:83:0e:34:9b:76:1e:
e5:e8:9e:d9:4e:ba:0d:c9:5c:5e:15:50:f5:e7:76:
cb:61:d9:42:7a:81:15:d1:67:0e:c6:0a:87:77:71:
be:62:61:69:15:dc:2c:cd:e9:54:da:a2:28:ba:99:
74:07:3f:c2:f3:86:2b:27:1e:40:7d:41:f2:34:b9:
a8:67:16:02:79:81:7a:0d:7f:bf:00:fd:47:46:92:
aa:0c:99:34:53:41:f7:01:26:f0:2f:62:c5:f9:87:
f0:39:81:6e:0f:dd:22:df:1e:46:87:1d:19:5a:bb:
5d:35:f3:9d:76:ed:47:8c:54:a1:c8:21:e7:a9:62:
2f:78:8d:55:64:c4:e2:2b:8c:d3:db:df:d7:3d:83:
01:23:2f:73:99:2a:7f:21:d4:fd:d8:73:06:b4:99:
c4:21:06:fd:7c:d0:21:6f:e9:1f:46:d0:71:32:a0:
4c:cb:f9:37:d5:b8:d2:1a:10:06:d8:73:e8:68:f0:
ad:42:5c:07:8a:4e:c8:45:52:32:d5:80:2b:44:b1:
b7:3f:24:01:83:7e:7e:99:a0:29:44:ef:32:80:65:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:97:19:6D:D0:AA:C7:20:D5:A6:AF:EF:C9:05:8A:4B:6C:13:0A:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF680AECDC0411EFA78D3957762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.123.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:9c:1f:c5:23:a5:b0:ba:e3:01:00:b4:72:70:39:18:ef:c4:
b2:0c:5f:67:11:be:33:54:bc:41:f7:79:eb:cf:e5:a7:12:e8:
f3:90:ca:d5:42:25:e7:e7:ea:cc:aa:3f:dd:8d:8a:f8:03:96:
20:55:19:d2:86:d6:1e:ad:b7:60:16:d3:74:ee:5b:90:51:c2:
4a:a0:b0:d0:c9:8a:69:db:50:50:f6:a2:f1:6f:7f:88:86:dd:
70:4b:85:49:29:ff:c6:6c:7b:08:ab:d4:73:e9:cc:b8:31:15:
b8:fc:c0:90:2c:05:46:e4:02:94:bf:37:c7:6a:d6:21:ae:b9:
c6:49:8e:a0:cc:f5:d1:43:66:07:12:2c:06:69:62:f1:db:80:
e2:c6:39:f2:aa:97:e8:d8:86:8e:02:0e:61:4b:eb:89:61:e8:
f6:4e:34:ea:79:4b:9e:8f:54:cd:fe:ba:78:dc:40:4c:5f:89:
99:48:e6:ba:4e:1f:65:3c:51:1d:a6:da:aa:10:5a:a7:c2:3d:
46:12:8b:4a:20:5a:e9:3b:93:80:da:73:5a:72:04:fe:fb:ab:
6b:f3:ee:c3:58:38:cc:76:92:24:68:60:86:da:b1:70:f3:62:
b1:31:80:dd:fe:92:12:01:00:fd:bb:d3:63:e3:61:9b:8c:f9:
ba:7b:78:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:31:26 2025 by rpki-client