Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0412CF4CF42411EFAD33B981762E951A.roa
File: 0412CF4CF42411EFAD33B981762E951A.roa (raw, json)
Hash identifier: Wiq/BA/da3XU78V1f+AD0aS3ZMEqONcSyfKB2XbfC1U=
Subject key identifier: 34:F6:66:5C:9E:34:D7:1F:ED:81:DA:B8:D8:78:02:3D:68:06:3E:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013071
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0412CF4CF42411EFAD33B981762E951A.roa
Signing time: Wed 26 Feb 2025 09:28:20 +0000
ROA not before: Wed 26 Feb 2025 09:28:16 +0000
ROA not after: Thu 19 Feb 2026 09:28:16 +0000
asID: 984
IP address blocks: 156.230.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77937 (0x13071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:28:16 2025 GMT
Not After : Feb 19 09:28:16 2026 GMT
Subject: CN=67bedeb3-f168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6f:bb:c8:3a:61:7e:c6:eb:2d:3c:1b:27:94:
fe:46:da:e7:53:87:7d:14:84:69:31:9f:5e:47:44:
9e:9a:84:1c:35:f8:18:11:e9:05:6f:d1:72:62:79:
73:5c:83:28:ca:03:12:c0:5b:06:bb:c8:50:28:7b:
b1:7a:64:af:4f:bd:74:0a:e0:6c:4f:da:bc:00:7d:
75:8c:64:93:1e:44:67:60:86:8d:a7:c8:95:2a:4c:
5b:86:97:04:08:6d:2b:d0:59:c0:03:f3:95:ea:0b:
a2:65:f6:bf:78:40:80:d0:11:c3:bc:02:ac:c0:14:
fe:ed:98:29:c0:6d:75:aa:86:fa:ce:a7:f0:b6:77:
7b:30:23:2f:f4:3c:7c:9d:57:35:4a:16:48:be:46:
87:1a:8f:20:d5:fe:58:ce:73:44:7f:f5:f9:62:d9:
61:1e:bc:8a:53:c9:76:eb:a5:1c:c0:dc:3b:75:32:
9d:2e:6f:62:9f:38:0b:72:9f:2d:9d:88:30:5d:3e:
b0:a9:3e:a9:90:4b:ff:a7:bc:47:5e:3c:78:03:98:
91:05:e7:66:e1:bf:58:48:99:b0:c8:04:75:6e:28:
ad:11:12:b3:44:fd:40:59:9a:29:27:28:28:71:48:
01:64:e8:16:59:32:ca:85:a5:7c:91:97:76:87:bf:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F6:66:5C:9E:34:D7:1F:ED:81:DA:B8:D8:78:02:3D:68:06:3E:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0412CF4CF42411EFAD33B981762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.30.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:7d:7b:85:ad:4b:ac:bc:97:bf:dd:00:61:ab:1a:c0:67:7d:
de:77:03:9a:e9:81:61:e6:fe:46:78:c5:22:a1:43:4e:f1:8d:
19:c6:fc:f6:2f:20:f9:69:21:b1:30:50:7a:ea:02:cd:fd:0e:
d6:34:2d:15:86:68:3c:c5:bc:f4:9e:4e:80:2c:a8:8b:b9:9a:
36:ff:d9:c2:a8:d3:81:71:56:11:d2:97:56:4b:4d:04:d9:12:
6b:e1:62:4d:3c:dc:6a:2c:89:a9:6b:8b:ff:5d:70:e9:19:2d:
c1:4c:3c:ff:c4:e0:a7:29:9f:b6:21:fe:7b:ac:11:2e:00:19:
3c:2a:5c:6f:47:de:8f:63:28:a7:1f:5f:28:00:db:fd:27:43:
89:9a:a5:da:55:37:1e:6d:cf:6e:d4:e4:6c:da:99:c6:ce:9f:
50:a1:aa:2a:10:89:19:1d:f0:2f:07:3a:e9:3a:69:b9:7b:93:
67:60:be:4a:1a:81:80:2e:ca:fe:40:62:89:5f:03:e4:f5:53:
e3:7a:4e:2e:f2:45:f8:fa:20:8e:98:36:42:3f:4a:d8:21:73:
ba:ab:90:c2:c2:1b:00:7d:d6:98:0c:95:f1:ed:44:7c:19:5f:
78:2d:dd:c1:40:8c:e8:24:05:1a:39:e0:a9:76:f4:b8:7e:58:
8a:5b:db:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:11 2025 by rpki-client