Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1642B06EF42F11EFB6590D50762E951A.roa
File: 1642B06EF42F11EFB6590D50762E951A.roa (raw, json)
Hash identifier: SUDXZ3xb3ZNSJNwaQsm0Kyp3ap95DqHi63RJFN/SYpw=
Subject key identifier: 80:55:19:70:42:15:B0:6B:45:C0:FB:57:1C:E9:B7:50:B1:7F:AF:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013162
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1642B06EF42F11EFB6590D50762E951A.roa
Signing time: Wed 26 Feb 2025 10:47:35 +0000
ROA not before: Wed 26 Feb 2025 10:47:31 +0000
ROA not after: Thu 19 Feb 2026 10:47:31 +0000
asID: 984
IP address blocks: 156.230.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78178 (0x13162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:47:31 2025 GMT
Not After : Feb 19 10:47:31 2026 GMT
Subject: CN=67bef146-4a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:14:24:b0:ec:64:a0:1e:68:36:46:c6:6d:c1:
05:74:a4:a2:4b:ee:61:f7:7b:87:2f:78:9c:4c:08:
7d:b0:70:0c:04:77:24:e8:2f:84:84:2e:16:28:eb:
3d:e4:de:ec:c0:a0:71:ae:6c:82:e6:a0:96:8d:d9:
df:be:e5:2f:69:27:84:7d:59:4f:c0:f9:07:08:84:
8f:45:30:d6:2c:a9:14:97:fb:48:5b:13:9e:30:40:
21:42:26:85:57:8b:52:ad:82:fd:9e:fa:c6:62:b3:
57:ec:7a:45:65:8d:12:73:2f:ca:4c:e9:52:a5:36:
84:25:05:23:50:72:d0:68:e0:62:68:e2:89:b4:56:
99:5e:dc:16:de:2f:08:04:84:a2:23:d6:29:ea:0e:
d2:3c:29:a5:4f:df:f1:7b:3a:12:8e:55:6d:73:bd:
16:a2:2f:67:4a:af:8f:59:37:fb:2a:87:06:31:cb:
b4:45:28:a6:65:72:be:ca:2c:f4:f4:e4:e1:0e:fe:
80:9f:50:dc:79:05:8e:9f:92:7c:62:17:87:78:e4:
72:0b:01:8d:3a:24:fc:25:61:4d:5d:a6:55:84:af:
f6:76:38:33:49:8d:82:83:d8:65:be:51:6e:2b:43:
12:d1:40:ca:15:93:69:94:fc:af:e7:8f:24:48:88:
2c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:55:19:70:42:15:B0:6B:45:C0:FB:57:1C:E9:B7:50:B1:7F:AF:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1642B06EF42F11EFB6590D50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.169.0/24
Signature Algorithm: sha256WithRSAEncryption
87:3d:93:d7:32:6a:d1:c6:05:70:64:8c:e0:f8:fa:3b:f8:7c:
ae:d6:a5:54:3a:d2:96:a9:a2:d2:37:56:93:0b:75:bb:0e:5f:
bd:d9:0a:8b:c7:f9:b3:45:01:be:9a:72:c1:1b:fa:88:d7:eb:
9b:e9:8e:fd:ba:ac:18:e0:b3:99:1e:f7:12:d0:09:81:7f:d5:
5b:e2:f2:5a:ae:a0:21:0a:9f:85:34:af:54:40:28:53:a2:66:
13:ff:c3:1f:49:d3:0d:bb:46:46:8f:1e:f7:1d:36:67:dd:7a:
17:cc:35:bd:2e:db:16:2f:a1:ea:70:8c:40:e2:0e:79:b7:57:
25:8e:f4:ad:2c:62:fd:57:8d:85:fb:c0:07:44:e6:07:7f:a3:
4e:9e:91:94:f3:cb:85:40:9a:4d:8b:29:92:61:f2:e1:0a:fb:
b1:93:c9:3a:5f:33:ac:54:8b:f8:48:1c:70:d3:7a:24:74:ac:
67:42:c4:8b:94:ce:d5:47:44:d5:1e:a8:ee:4e:30:a0:83:5e:
dc:24:bb:0f:fc:ae:b9:ad:83:60:05:b3:e9:81:03:af:1b:a1:
32:56:e1:16:d4:5c:1a:80:37:d9:13:38:c8:e4:98:e3:e6:db:
6d:1e:39:e4:1c:fc:7f:74:60:73:cc:dc:66:7f:0e:a4:38:1c:
78:72:82:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:04 2025 by rpki-client