Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/178752DEF45411EFBE9E1455762E951A.roa
File: 178752DEF45411EFBE9E1455762E951A.roa (raw, json)
Hash identifier: aKJPD9RepFlkiroctZWgp2XlVDNMdSCl5vDpt9bUQO0=
Subject key identifier: 40:AD:90:F1:60:BB:44:BE:B2:9D:C1:34:F0:68:8E:10:C0:E1:B4:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013422
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/178752DEF45411EFBE9E1455762E951A.roa
Signing time: Wed 26 Feb 2025 15:12:28 +0000
ROA not before: Wed 26 Feb 2025 15:12:24 +0000
ROA not after: Thu 19 Feb 2026 15:12:24 +0000
asID: 984
IP address blocks: 156.252.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78882 (0x13422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 15:12:24 2025 GMT
Not After : Feb 19 15:12:24 2026 GMT
Subject: CN=67bf2f5c-9a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:f0:e4:5e:83:62:ff:18:34:ee:5b:6a:ca:
c2:1d:7a:1b:9a:22:18:1c:38:19:ec:2d:72:5d:b5:
f0:d8:6d:a2:f8:82:95:22:90:b7:93:04:61:3c:f7:
73:63:a3:e2:9c:b9:77:30:a7:6d:4e:61:84:34:b3:
2e:05:75:20:01:61:90:e8:eb:f5:20:48:0f:50:75:
c1:4f:79:79:19:ec:c6:d7:f4:f9:b8:66:f9:91:7a:
92:fa:90:69:e9:25:aa:76:82:31:5b:b5:b4:22:1e:
15:66:40:e6:f1:fb:9b:91:a0:d2:fc:e0:5f:d1:87:
d5:ef:fa:c3:18:3f:a6:15:4d:9a:4e:f8:47:5c:8e:
77:8d:d6:08:f4:92:cc:20:db:7c:14:d4:b9:8d:49:
2a:ad:a4:fb:b9:15:e4:ad:5e:3d:56:53:d4:a5:ce:
d1:52:10:c3:f1:e2:b8:0b:a3:c7:de:b8:c5:d1:1a:
8b:7e:ef:37:f9:f5:2b:46:a6:bb:81:f0:71:30:92:
55:14:51:48:6c:79:72:14:02:fd:a9:06:48:c5:bf:
f9:92:a7:82:d0:d7:21:95:e3:1c:c0:87:ed:3f:30:
8b:c6:5a:f8:60:30:de:6e:9f:0b:2c:cc:e2:c7:a3:
56:fa:42:7f:55:b1:f8:8d:1f:cb:11:cc:22:c4:25:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AD:90:F1:60:BB:44:BE:B2:9D:C1:34:F0:68:8E:10:C0:E1:B4:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/178752DEF45411EFBE9E1455762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.208.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b8:1d:54:99:b4:fa:de:8e:52:9e:86:b3:91:fd:d2:8c:6e:
da:13:cd:e1:a0:5c:7b:6f:55:31:ff:1e:5d:d5:86:88:8d:c1:
f5:f0:22:db:56:69:2c:97:73:8f:66:d5:0f:e4:8c:00:65:aa:
67:e7:a9:d5:06:d4:55:f2:60:e5:60:bb:8f:bd:b1:9d:0b:49:
8d:95:08:f5:e6:45:85:fe:22:05:6d:55:33:25:4c:9e:fe:0a:
0e:22:3d:f7:a7:08:5c:83:08:a7:82:48:9e:7f:89:a9:bf:29:
28:4c:f5:16:bb:e6:b1:1c:5b:ce:7c:3d:81:fa:db:4f:46:c9:
d3:d5:57:50:37:a9:87:41:c1:67:7a:79:c9:d6:f3:3f:01:dc:
20:f9:3e:19:4a:c5:76:10:6b:8b:52:93:6f:fc:c3:8b:7e:55:
da:47:09:78:b8:d3:54:19:82:d1:9b:cc:91:b1:3f:ad:40:18:
f9:a4:d8:72:2e:2c:d4:a8:a3:43:69:00:3a:dd:10:b2:a2:99:
5c:34:c0:e9:bc:c4:f3:3d:61:0c:22:4e:56:00:64:65:c8:82:
34:01:fe:fc:31:8c:f3:92:dc:7b:e8:4c:5a:53:fb:55:bd:85:
fc:04:8c:1a:92:d6:70:56:1f:60:c2:ff:30:fa:83:f3:f2:d1:
79:6e:3c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:51 2025 by rpki-client