Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E7AF484F41D11EF9AC45351762E951A.roa
File: 0E7AF484F41D11EF9AC45351762E951A.roa (raw, json)
Hash identifier: jStwiTYB339z0KDJP2wIYkfF6jxR6ORIu1ROIIuk68Q=
Subject key identifier: BC:2E:57:AA:4F:FE:B5:EB:16:D9:13:63:51:DD:3B:FC:1E:13:65:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013006
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E7AF484F41D11EF9AC45351762E951A.roa
Signing time: Wed 26 Feb 2025 08:38:31 +0000
ROA not before: Wed 26 Feb 2025 08:38:27 +0000
ROA not after: Thu 19 Feb 2026 08:38:27 +0000
asID: 984
IP address blocks: 156.252.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77830 (0x13006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 08:38:27 2025 GMT
Not After : Feb 19 08:38:27 2026 GMT
Subject: CN=67bed306-d574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:55:13:ce:e2:93:55:53:9a:2b:5f:24:29:f9:
84:ff:ab:65:14:96:a7:00:71:ad:58:65:61:cd:c8:
af:99:c4:e3:ba:9e:6a:77:bc:82:b6:f4:c8:49:f0:
86:96:f0:eb:47:75:b6:2c:4d:b1:61:79:97:f5:3f:
77:e4:9d:0f:b2:b2:2a:72:fb:ee:7b:49:5b:91:d9:
e8:3d:15:85:a9:55:27:21:3a:5b:4a:25:28:f3:b8:
4e:7d:7f:dd:9f:b4:fe:69:c4:e8:ab:15:ae:e1:e3:
0f:30:39:1e:ad:9a:40:ed:79:9a:20:de:f0:d5:69:
4d:96:00:d4:8f:66:c0:95:11:b5:6c:69:d4:47:b5:
63:22:be:bf:c2:4f:db:8a:76:da:df:81:dd:b4:b8:
89:dd:f3:8e:35:74:c0:47:58:42:4c:88:98:fb:e5:
94:a4:f5:2c:ff:2e:75:fe:8b:11:b1:4f:93:ef:ba:
60:d1:84:f9:fd:51:e0:52:89:e2:83:fb:b8:5d:97:
85:79:d5:d7:40:c8:9d:5b:e1:c1:05:32:0c:ef:2c:
d2:87:22:5f:53:47:6f:a6:f5:71:90:5b:d5:8b:06:
71:7a:2a:90:35:b4:c3:a5:75:8b:9e:eb:27:50:df:
88:c9:df:db:0d:09:55:10:ad:88:6d:e7:43:6c:58:
2d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2E:57:AA:4F:FE:B5:EB:16:D9:13:63:51:DD:3B:FC:1E:13:65:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E7AF484F41D11EF9AC45351762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.22.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e0:88:03:6b:83:4b:d1:5c:f2:02:82:f6:61:ed:6c:ad:6a:
e4:b7:96:2c:6f:62:95:fb:4f:93:8f:ce:e7:ea:fa:be:6a:2d:
4a:c7:da:b4:b4:af:46:c3:6c:d7:fb:47:ec:f8:fc:05:63:09:
4d:22:ac:6c:98:54:40:89:e7:bd:dc:d0:92:3a:ae:1e:76:a9:
92:97:44:70:aa:83:81:0b:24:7f:45:17:30:bd:4b:8a:8a:f6:
72:ed:0c:03:45:17:1d:ff:58:bb:b9:1d:ba:1c:15:66:ca:04:
27:86:c9:17:9c:eb:14:d6:64:8a:37:da:a6:d2:7e:f1:0e:a4:
c0:43:4e:83:c7:94:29:ed:f3:15:c3:78:97:d4:8d:92:22:68:
3e:1d:6c:f3:5e:99:43:7d:10:b1:fd:ce:16:25:8f:77:09:a8:
11:64:f9:40:50:b3:e3:a7:48:2b:4a:08:19:60:23:b0:23:83:
dc:06:58:74:fb:74:8e:fd:7f:cf:50:44:10:48:91:48:b8:56:
da:14:10:12:5f:95:64:71:69:17:37:be:44:d3:03:be:18:42:
c6:a4:ac:4b:9b:6f:f5:37:2f:d2:ce:d7:44:62:c0:36:cf:f2:
d2:f9:c7:4a:8d:54:11:8a:af:87:8d:6e:b1:66:c2:7b:ef:74:
35:28:45:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:01 2025 by rpki-client