Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCE0C6D2C95511EF85B42F5B762E951A.roa
File: FCE0C6D2C95511EF85B42F5B762E951A.roa (raw, json)
Hash identifier: WjZZvcfNEP1C+wih3+XV39RspO7CC5Kl8PaGomBrVhw=
Subject key identifier: 67:1B:D0:A7:9E:46:31:6A:C2:C0:07:28:90:4B:A5:A7:E5:FD:C9:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F3F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCE0C6D2C95511EF85B42F5B762E951A.roa
Signing time: Thu 02 Jan 2025 22:07:42 +0000
ROA not before: Thu 02 Jan 2025 22:07:39 +0000
ROA not after: Sat 13 Dec 2025 22:07:39 +0000
asID: 984
IP address blocks: 156.226.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62454 (0xf3f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 2 22:07:39 2025 GMT
Not After : Dec 13 22:07:39 2025 GMT
Subject: CN=67770e2e-58dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:38:85:4a:86:0c:b8:8c:ce:e6:66:00:ba:
dd:38:0e:b0:35:f2:26:80:9b:ad:ed:69:56:06:e2:
ae:b7:b6:5e:5e:92:fd:1a:b7:24:25:10:38:17:9a:
af:28:8d:9a:cf:cf:72:d4:71:72:69:68:75:a9:a2:
98:67:f0:01:7b:e1:4f:91:c5:9f:e8:5a:71:2a:de:
f9:cc:99:94:9e:1f:3d:81:f6:00:70:50:73:3f:13:
08:81:79:3d:d6:8f:35:32:e5:f4:79:9c:1e:10:7f:
6e:94:21:5e:b3:1a:a7:88:80:88:f3:05:cf:39:a0:
c8:be:4e:d2:90:83:7f:a8:56:17:fa:6b:12:a6:9e:
91:69:19:87:f4:a6:7f:03:65:01:86:da:c8:90:f8:
28:23:97:58:7a:10:ca:28:62:3c:4e:f5:be:2e:10:
98:28:0e:85:d1:45:bc:02:dc:1d:7a:18:36:3a:52:
52:78:3f:d6:e8:75:a1:c7:38:70:e6:f2:04:39:24:
bb:33:af:a8:5b:c5:1a:93:54:51:63:b7:7c:28:92:
6c:e8:d9:b4:2d:33:03:71:4d:b3:cb:b1:23:b9:10:
6f:6a:f2:1c:7d:ac:af:30:c6:96:5e:9f:58:07:60:
f8:1b:c8:b4:62:c6:a8:31:26:19:98:5f:de:cc:72:
3e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1B:D0:A7:9E:46:31:6A:C2:C0:07:28:90:4B:A5:A7:E5:FD:C9:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCE0C6D2C95511EF85B42F5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.147.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:bb:e3:1a:fc:8a:29:8f:6c:6b:a2:40:00:88:80:70:0f:39:
03:f1:70:73:68:a5:df:0c:96:8f:d0:61:9b:b1:c9:34:ec:5b:
1c:4a:1e:af:67:28:9f:d2:c8:92:14:ad:79:0c:88:2d:02:a0:
28:0b:14:04:67:ab:2a:c2:a9:98:aa:c7:58:a6:57:9f:d6:cf:
8b:fe:d7:0f:d8:e8:fe:ea:13:ca:3c:5c:4c:05:2d:0e:63:ec:
f1:f4:88:4c:0d:c1:17:5c:f5:70:4a:6e:20:d5:71:c0:76:d9:
7f:33:2e:bb:2a:24:e9:8f:7a:bf:69:3f:63:c1:59:99:5a:4a:
c8:25:62:50:fb:67:15:fa:d4:e3:c5:d2:32:00:dc:90:3b:3b:
10:af:57:85:14:6e:cf:90:f6:e8:55:22:af:c2:ea:64:5b:df:
0c:55:47:86:61:33:1e:48:02:87:a1:b3:72:5e:96:13:15:bc:
20:63:f9:b1:ac:9f:07:34:f0:72:6b:ed:c5:b6:23:1e:e8:91:
2e:3c:c9:47:a0:71:6b:f1:26:ea:91:b8:18:0c:c0:03:23:1a:
8f:69:6b:b3:39:e5:97:47:20:ec:48:55:17:e3:08:06:98:44:
86:33:51:b0:ba:d4:05:0e:55:e9:13:4f:a9:f1:41:5a:00:35:
79:b0:a7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:18:49 2025 by rpki-client