Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEA674A4D7BE11EFAB5AF7B1762E951A.roa
File: FEA674A4D7BE11EFAB5AF7B1762E951A.roa (raw, json)
Hash identifier: B1NoAuEYJi8mcdrYn6MFqvL9sVJGoQ7FE8OCkP61ABY=
Subject key identifier: 50:30:C6:43:4E:4C:F1:66:2E:69:4F:E2:D3:A5:50:4A:E9:4D:0D:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010C9E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEA674A4D7BE11EFAB5AF7B1762E951A.roa
Signing time: Tue 21 Jan 2025 06:14:39 +0000
ROA not before: Tue 21 Jan 2025 06:14:35 +0000
ROA not after: Thu 27 Feb 2025 06:14:35 +0000
asID: 139880
IP address blocks: 156.227.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68766 (0x10c9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 06:14:35 2025 GMT
Not After : Feb 27 06:14:35 2025 GMT
Subject: CN=678f3b4f-f005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:48:83:18:27:82:5c:e3:1f:9d:68:5c:33:
b5:ff:45:40:d0:8d:7a:44:ca:42:0f:1e:30:ac:a5:
55:0e:a4:51:57:44:83:98:b3:2a:79:ad:d4:b1:91:
26:36:b8:8a:0f:c0:ac:f8:1c:df:29:ea:65:d7:53:
38:84:03:b0:9e:ea:ac:21:7d:a7:35:d8:30:76:6a:
bf:66:2b:76:40:20:d5:e6:3f:3c:02:67:76:83:f5:
15:75:e6:bf:27:00:1a:fe:d9:98:96:57:10:c2:35:
24:3e:8a:04:3a:80:2b:f3:f8:60:b6:b1:4b:d0:c2:
8d:34:a3:80:23:55:47:e2:dc:9c:ed:5b:ff:23:ad:
e7:0b:6c:ba:1c:b7:c5:c3:c8:f7:bc:e0:7c:00:be:
3b:37:e8:ac:f0:0a:3a:34:94:e7:f3:66:14:b7:79:
6f:81:c3:12:69:d9:22:d6:69:e6:df:62:e7:39:c1:
45:83:8a:7b:a3:a0:fc:c0:f3:65:cc:e7:7d:fb:73:
b4:84:e4:b9:09:95:a0:35:3b:82:3b:c0:bd:8d:4b:
22:c9:31:64:3b:a7:a5:b4:23:01:1a:40:1c:17:dc:
8f:44:11:6c:8b:b6:cf:ee:82:52:21:92:21:89:a5:
91:79:2f:04:f3:1e:fd:1c:07:1a:76:c4:bd:58:fd:
5e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:30:C6:43:4E:4C:F1:66:2E:69:4F:E2:D3:A5:50:4A:E9:4D:0D:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEA674A4D7BE11EFAB5AF7B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5a:15:d2:8e:ed:86:22:97:14:8d:46:db:29:7f:f1:55:c1:25:
8c:cd:4a:8f:5c:56:dd:27:48:27:0d:c3:f0:12:a2:21:c0:a7:
af:9f:d2:45:d3:31:10:56:1d:e5:14:ea:f3:da:47:64:58:33:
ff:df:59:74:78:32:ca:56:8b:ee:5d:46:00:0f:75:69:f1:d9:
37:e4:22:5a:06:28:33:25:d2:a8:a2:2b:00:90:09:2c:39:7f:
25:31:cb:fb:7f:f4:aa:2c:8c:00:23:f2:bf:4a:c1:af:18:94:
46:d9:0c:ad:25:83:30:6f:73:7b:5c:5f:63:89:17:f5:99:be:
29:cc:d1:6b:e0:6a:7a:d8:cb:0b:e7:79:55:56:19:05:dd:99:
57:e2:29:47:9a:dc:c1:6d:da:fa:8b:ce:7c:69:40:e8:ac:82:
f0:a9:0a:1c:96:6b:ec:3c:7f:c0:5a:cc:a6:0c:ef:ae:00:40:
f0:31:02:8b:61:87:fb:b4:23:aa:a3:02:07:bd:d1:c2:b9:39:
1a:ed:f3:d7:ea:f4:b7:65:be:82:47:8f:1d:f2:0e:88:c2:41:
2c:fe:78:9f:e0:c5:9b:aa:78:c5:5a:ee:d0:37:86:2f:7a:30:
69:cc:9d:b7:6b:96:8c:7e:c1:ca:ef:85:3c:88:a3:e7:48:f2:
14:93:37:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:18:38 2025 by rpki-client