Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CF69B7CF46211EF969DE7B4762E951A.roa
File: 1CF69B7CF46211EF969DE7B4762E951A.roa (raw, json)
Hash identifier: 2WZ+XQwmQua6YXp3I0UV68SbGqtfTkuKyzhxny7lMlU=
Subject key identifier: 90:EC:50:69:4C:E3:11:99:80:91:B6:2B:59:EB:24:0A:B5:0F:D7:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01352F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CF69B7CF46211EF969DE7B4762E951A.roa
Signing time: Wed 26 Feb 2025 16:52:50 +0000
ROA not before: Wed 26 Feb 2025 16:52:47 +0000
ROA not after: Thu 19 Feb 2026 16:52:47 +0000
asID: 984
IP address blocks: 156.245.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79151 (0x1352f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:52:47 2025 GMT
Not After : Feb 19 16:52:47 2026 GMT
Subject: CN=67bf46e2-5f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:cb:e2:27:41:bf:40:b4:78:71:52:62:a4:
0e:8f:ce:1f:7f:b2:e7:a7:f4:9e:a1:22:b2:a7:20:
23:91:b0:36:36:f4:1e:cd:8c:61:0b:f4:fa:35:fb:
9c:a5:3c:04:ca:1b:05:18:f4:9d:bb:af:7c:18:5b:
9c:83:5c:d4:77:1b:2d:ba:14:a8:bf:73:29:85:da:
a3:3f:24:a3:2b:eb:04:98:ae:34:88:99:d0:20:01:
91:f5:f4:2d:81:8b:a0:8e:91:d2:56:db:b7:58:82:
45:6d:2d:8f:59:38:8a:9c:5f:f0:9f:f0:4a:c8:81:
4c:fe:32:6e:d3:2c:21:da:e0:77:bf:6c:87:f1:2d:
37:32:f8:ec:48:d8:9c:50:59:e0:25:41:65:3d:0b:
a8:8d:a7:3f:14:12:4d:a8:6d:5a:d3:18:44:a1:cd:
fa:b6:b5:74:99:fd:1b:53:64:60:f9:57:e3:75:0f:
97:71:7c:5b:85:ad:aa:8b:6c:86:42:e3:72:6d:d1:
5f:e6:71:de:89:13:d1:cd:f7:87:13:54:63:05:cb:
e4:74:bb:bf:ac:de:5f:34:6a:ed:51:24:08:18:df:
2a:cb:8b:77:d7:25:0c:b1:ae:49:b6:ca:af:e7:b8:
79:99:0a:8a:79:ca:74:37:da:7c:a0:8b:32:b2:8c:
2e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EC:50:69:4C:E3:11:99:80:91:B6:2B:59:EB:24:0A:B5:0F:D7:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CF69B7CF46211EF969DE7B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.70.0/24
Signature Algorithm: sha256WithRSAEncryption
73:80:35:22:79:42:fd:00:a4:7e:25:7f:b1:67:0a:37:0e:d8:
14:48:bc:de:e2:b8:c9:eb:d0:d8:31:2b:8a:54:8b:06:57:5d:
61:96:6e:eb:d1:50:b2:32:34:26:70:57:66:3b:82:c2:4c:0b:
b9:2d:0d:dd:a3:5b:e4:4a:cd:e9:0e:8c:9e:ad:fe:4f:44:b4:
ae:de:6f:83:f3:d6:d8:7d:84:0c:ad:08:c7:bc:1a:c1:d4:cd:
8d:ec:e4:3a:fc:36:4c:7a:fc:40:b9:a8:50:d1:90:d3:80:d8:
36:45:15:fb:5a:94:fc:b3:12:35:4b:69:43:6b:9b:a6:33:a4:
e9:69:90:db:aa:e5:df:50:e6:5f:cf:1a:36:6f:f3:73:49:4f:
21:0f:42:d2:36:d0:1f:95:b6:e9:05:09:5f:c2:a8:08:0d:c0:
a6:4e:54:53:37:65:98:97:34:22:01:47:34:95:f3:f2:bb:ba:
31:30:c7:77:68:d6:c3:45:6a:74:79:ef:a6:0b:ec:aa:26:db:
38:a2:39:20:74:1a:ba:43:f2:ed:9b:ae:68:59:f6:5c:da:c9:
da:68:4c:d4:18:2f:51:dc:14:bf:00:92:f3:48:95:b5:ef:b1:
6f:94:95:d7:98:aa:76:97:dc:42:72:4c:d0:62:f5:63:a4:ae:
de:a0:bd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:06 2025 by rpki-client