Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8254AF6D50511EFA1D98D50762E951A.roa
File: C8254AF6D50511EFA1D98D50762E951A.roa (raw, json)
Hash identifier: Wz2f0GQXudpzLsLEtfk7nIlahBEUQPNdcP/pUbRi+1Q=
Subject key identifier: C4:F5:1A:BF:D5:EA:3D:E4:AF:47:65:1B:44:01:83:44:78:B1:11:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010A64
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8254AF6D50511EFA1D98D50762E951A.roa
Signing time: Fri 17 Jan 2025 19:03:48 +0000
ROA not before: Fri 17 Jan 2025 19:03:45 +0000
ROA not after: Sat 22 Feb 2025 19:03:45 +0000
asID: 149641
IP address blocks: 156.225.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68196 (0x10a64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 19:03:45 2025 GMT
Not After : Feb 22 19:03:45 2025 GMT
Subject: CN=678aa994-0fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:55:1e:9a:0f:f8:ec:f6:f9:21:8c:07:78:
32:23:49:db:39:49:df:15:99:cd:07:2b:2f:e4:8b:
2a:42:47:8b:4e:10:db:65:67:b6:67:49:e5:a5:c8:
6e:8e:5d:bf:5c:86:9c:83:80:e7:0a:ec:4d:2b:39:
4c:0e:a9:98:62:52:44:53:5d:2d:e8:44:e2:9c:95:
9a:4a:3c:98:87:ae:0d:ad:33:13:b8:14:b0:d4:8c:
aa:aa:20:1c:68:ef:94:7f:0b:2e:a3:53:5e:6e:87:
33:ec:e2:f0:af:a8:94:92:4d:7d:01:f2:88:2f:0f:
f2:9a:77:1e:2d:bd:49:80:24:db:f8:ae:d7:13:5e:
77:69:6b:e5:6a:f3:5c:67:b2:dc:94:d8:14:7f:b2:
f1:e1:36:ee:d0:22:35:4a:3a:43:a2:6f:c4:96:6c:
5e:9a:d4:77:7b:4b:77:c7:38:da:3a:97:23:01:a6:
52:ed:8e:47:6b:11:0d:97:bc:47:df:15:b2:35:05:
c2:d9:85:57:39:43:b1:7f:04:83:df:df:42:cb:79:
a7:5b:f9:4c:6c:03:5b:4b:01:70:f2:60:02:27:01:
1a:4a:e3:10:36:91:c6:4f:63:20:50:a8:9b:4b:88:
87:1b:4b:5b:32:45:9b:5e:cf:92:95:aa:95:42:7a:
82:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F5:1A:BF:D5:EA:3D:E4:AF:47:65:1B:44:01:83:44:78:B1:11:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8254AF6D50511EFA1D98D50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e9:bc:39:93:be:27:1d:21:e7:d8:e4:b0:46:ed:57:7e:f2:
d7:50:7b:5f:7b:6e:42:92:84:07:a0:bb:3b:f2:c9:16:22:0a:
cf:d7:1c:f0:97:2a:08:f7:d8:68:f7:12:89:4a:1f:a9:b5:63:
35:17:5a:3f:05:7d:48:90:55:5e:c5:63:1f:be:aa:ac:b6:22:
09:11:1e:50:7a:7f:25:f4:b4:f9:c4:bf:fb:23:d9:79:e1:a0:
ed:96:e8:37:05:b9:df:04:4c:07:e1:cf:f5:f4:6d:99:18:be:
68:95:3f:2d:d5:e9:71:22:b8:0a:5a:59:5b:46:d0:7a:b5:56:
86:44:a5:bd:a4:3d:c1:5b:07:84:25:4d:47:79:fc:0c:9d:52:
93:1c:53:59:10:b2:d7:e3:8e:2f:4c:e5:dc:86:64:05:0c:55:
b9:b2:e8:44:cd:50:5e:40:98:24:55:28:24:ad:ce:fa:d3:17:
ac:06:9a:18:eb:7f:23:30:0c:27:4f:4f:4d:3e:1d:d8:87:8b:
83:b5:99:aa:e8:50:71:bd:61:88:29:56:33:49:38:86:b4:fe:
05:e4:6d:49:e4:b6:f1:93:b8:23:09:24:72:d0:3c:eb:eb:e5:
00:a9:c8:ae:fe:bb:a6:41:b8:9e:29:f4:e9:5f:3d:09:25:d1:
87:87:23:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:10:53 2025 by rpki-client