Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1702EB2BEAB11EF84796CB6762E951A.roa
File: C1702EB2BEAB11EF84796CB6762E951A.roa (raw, json)
Hash identifier: nArSpy9PnodLYQ8GIIkisCJwMCQ6i5mX8NCTknr6wqI=
Subject key identifier: 08:1C:88:48:CF:80:56:86:20:30:82:BB:33:8D:9E:31:AF:40:54:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E71F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1702EB2BEAB11EF84796CB6762E951A.roa
Signing time: Fri 20 Dec 2024 08:23:57 +0000
ROA not before: Fri 20 Dec 2024 08:23:53 +0000
ROA not after: Sun 23 Mar 2025 08:23:53 +0000
asID: 328608
IP address blocks: 156.227.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59167 (0xe71f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 20 08:23:53 2024 GMT
Not After : Mar 23 08:23:53 2025 GMT
Subject: CN=6765299c-652a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:60:de:93:29:b7:d4:eb:42:1d:7b:73:5f:
83:cd:e8:6b:12:4d:d6:ef:72:4a:ce:6e:b6:a7:d1:
01:a6:2b:23:57:38:83:0d:02:b2:61:f9:5e:66:6b:
4c:59:4d:79:e1:75:81:3c:02:0b:3c:12:fb:56:cb:
7f:b7:bb:bf:76:d6:22:f0:7d:69:cb:51:7d:4c:84:
45:ff:55:e1:bd:ce:27:0d:f8:5a:d6:ba:bf:f5:43:
16:a8:92:c7:4b:a7:32:82:fe:52:4a:86:68:05:30:
3e:c7:aa:54:eb:8b:cc:9d:db:c7:0d:c6:e9:9f:e5:
19:49:5e:5c:27:ac:1c:30:d5:64:69:ac:4e:f9:7e:
fe:f7:e0:34:ac:cb:20:78:24:93:95:7f:f9:69:37:
b7:ce:ae:0d:20:97:5a:e8:9d:f6:5f:f5:31:83:a5:
7c:f4:48:e8:d9:d3:f3:e5:72:fc:0d:83:47:f7:e1:
6e:aa:8f:b0:59:b0:cd:c8:bc:36:86:7f:a2:e9:91:
5d:ce:da:e4:e8:50:d9:0c:79:23:36:31:00:c6:d5:
96:2b:8d:d5:8a:94:91:62:5a:e5:d9:4e:e7:69:b8:
c6:b0:c4:d8:85:1a:8c:16:e7:76:64:b1:ef:a1:29:
ed:5b:d3:c9:97:0f:c9:9b:19:15:25:e7:ae:d3:20:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1C:88:48:CF:80:56:86:20:30:82:BB:33:8D:9E:31:AF:40:54:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1702EB2BEAB11EF84796CB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.204.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:53:46:cd:dc:08:7e:d9:91:eb:70:fd:82:ea:cc:e1:8d:e6:
a4:ce:cf:73:4b:8a:0f:73:f4:9c:20:0b:1c:16:14:1e:b4:7a:
9a:64:62:34:ec:47:87:b9:6d:31:1f:c6:fb:a8:ae:c2:76:3b:
cb:0e:ad:e0:74:7d:9c:26:4a:18:11:06:35:11:d1:f7:8f:55:
82:82:75:7e:4b:43:2a:21:aa:b8:db:00:cd:b5:68:43:e2:9f:
f8:bd:79:5b:60:60:37:f1:04:6c:b0:5f:c5:2d:85:d9:a6:c6:
c1:ba:f2:8e:37:38:6d:2e:de:d9:bc:74:c3:ae:5b:ad:b1:da:
fe:9c:b8:4e:2d:cc:41:67:57:56:24:fd:83:c3:5a:1c:92:bb:
c2:ed:1b:d7:dd:dc:6d:dd:32:00:b0:18:e8:38:01:ce:f0:0f:
63:f9:ee:59:76:9f:c1:c0:90:13:74:d5:ce:f5:43:b2:e2:61:
40:70:e5:46:b9:1d:1a:84:00:d2:36:26:7d:62:e1:a7:ff:70:
14:71:0b:09:d7:54:4e:6f:93:60:50:0f:28:73:f5:b2:75:8a:
60:06:3c:65:0b:91:0a:6d:09:22:a3:d0:90:c5:d2:51:f6:6b:
f0:83:a0:16:89:b3:e9:8c:2e:24:2d:88:40:3b:27:d1:0d:05:
40:82:d5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:13:19 2025 by rpki-client