Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19279516F42E11EFA46B1E47762E951A.roa
File: 19279516F42E11EFA46B1E47762E951A.roa (raw, json)
Hash identifier: /4/jyEHP/Kj3OYep+Jm+xxQfP3DQ7i7r7+4SZI322Ms=
Subject key identifier: 46:DE:75:B9:4D:0A:3E:FE:D4:A3:B5:FD:F1:90:41:AD:56:0E:7F:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013144
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19279516F42E11EFA46B1E47762E951A.roa
Signing time: Wed 26 Feb 2025 10:40:30 +0000
ROA not before: Wed 26 Feb 2025 10:40:26 +0000
ROA not after: Thu 19 Feb 2026 10:40:26 +0000
asID: 984
IP address blocks: 156.252.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78148 (0x13144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:40:26 2025 GMT
Not After : Feb 19 10:40:26 2026 GMT
Subject: CN=67beef9e-fb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:41:84:c3:9d:0c:f8:ac:0a:ef:b0:07:7f:f6:
5e:00:a6:30:48:50:18:24:23:d2:e7:86:4d:11:9e:
b9:9e:9f:32:be:85:29:94:9d:c6:cd:52:83:3b:14:
2e:72:37:7c:12:c0:ee:59:b5:29:c5:e1:9a:ed:44:
71:58:59:47:8c:86:23:c6:6f:75:69:db:e8:08:34:
ea:2b:36:ab:42:ef:73:5d:2d:3f:40:f2:cd:12:d1:
b8:96:de:98:1b:63:3f:d4:48:f6:41:f3:97:c1:94:
4e:08:59:6b:b8:af:2d:41:e2:f6:c0:0a:48:2b:4d:
90:3e:f1:4f:3a:f1:d3:ca:ff:b1:2a:33:cf:9c:e5:
43:16:55:0f:d5:a2:3d:9a:81:0c:33:e6:33:d8:2a:
b7:c6:ef:29:98:75:5a:08:16:dc:1e:0d:f1:fd:46:
ab:56:83:48:b9:75:5d:c2:78:04:7d:34:3c:4f:26:
b0:bd:2d:87:df:18:71:77:e2:19:c0:30:e0:99:90:
5c:d0:b0:60:bb:76:12:28:3c:b4:69:24:b9:1d:e6:
2d:0b:b6:6c:d9:14:de:3c:95:a1:75:31:4a:5c:23:
bb:e5:1d:48:9d:d1:4d:f2:69:08:1e:9d:0c:26:b2:
ab:b7:70:6e:a2:54:4f:71:c7:41:1a:c4:9d:f7:f9:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DE:75:B9:4D:0A:3E:FE:D4:A3:B5:FD:F1:90:41:AD:56:0E:7F:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19279516F42E11EFA46B1E47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.95.0/24
Signature Algorithm: sha256WithRSAEncryption
15:76:5e:42:6c:ff:75:c7:f9:cd:3e:3a:d9:62:1b:fa:dc:ca:
b9:04:03:1c:9f:51:47:98:cf:a6:40:10:88:66:76:58:bf:a3:
d1:52:17:e5:7b:f2:0f:a5:73:31:aa:cf:b0:8a:e1:2e:6f:e4:
96:b2:93:84:5e:d2:8d:af:6b:0f:73:e2:38:f7:c6:4f:6f:29:
7e:37:59:3c:a0:4f:9c:22:cf:e8:12:c3:3e:79:f9:7c:06:21:
2a:70:64:0b:f2:18:90:a0:39:28:f4:03:ca:84:c1:ef:87:45:
bf:ee:f5:a0:21:c0:b0:9a:86:d6:0c:4c:cf:90:61:27:56:ec:
b7:0a:78:94:c7:ce:57:9f:29:ed:b4:5b:49:18:ae:b3:65:b6:
ad:9a:d2:63:eb:a7:6b:99:ee:e9:ca:45:8e:b2:1a:3e:61:ad:
58:7f:65:77:7b:a8:ab:c4:83:0d:80:33:46:d0:ee:ab:14:0d:
37:67:59:67:b4:ae:8b:79:32:ca:7f:c6:5c:46:e0:69:66:f9:
47:b4:84:d6:6e:45:ef:27:b1:fb:0e:8d:a4:43:f7:94:6f:ce:
c2:08:0b:1e:0c:3f:0b:aa:a8:1c:a3:f8:8f:3c:db:8b:6e:66:
d1:06:bd:f1:0b:b4:47:3b:fa:2d:a7:b5:eb:84:d0:b1:39:2c:
f6:35:8e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:51 2025 by rpki-client