Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/238288F8F4CF11EFB2DCE6AF762E951A.roa
File: 238288F8F4CF11EFB2DCE6AF762E951A.roa (raw, json)
Hash identifier: X9KY8CE4SQEGQRCeCdblReUyLtqm/yBbiAPJAfwkpMs=
Subject key identifier: 09:E1:8E:7F:62:7A:65:C1:5A:A3:F1:3B:41:F4:66:AB:90:44:87:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0138E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/238288F8F4CF11EFB2DCE6AF762E951A.roa
Signing time: Thu 27 Feb 2025 05:53:16 +0000
ROA not before: Thu 27 Feb 2025 05:53:12 +0000
ROA not after: Thu 19 Feb 2026 05:53:12 +0000
asID: 984
IP address blocks: 156.247.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80105 (0x138e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 05:53:12 2025 GMT
Not After : Feb 19 05:53:12 2026 GMT
Subject: CN=67bffdcc-ea5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a6:32:31:da:f8:8d:00:6c:b0:36:dc:fb:8c:
b4:25:af:e1:71:12:cf:8a:29:9b:89:ba:e4:a4:64:
90:17:88:18:b8:90:a2:d8:57:e1:52:f4:30:54:55:
01:5a:fa:99:9e:47:98:be:ee:15:10:04:9e:10:c4:
c2:46:b9:39:5d:a8:b8:03:ec:9f:47:74:e8:b7:88:
73:ea:c5:d4:8e:02:98:37:fc:88:d3:0e:4f:b7:3c:
b4:22:84:c0:84:b6:09:93:81:96:22:ac:4a:92:dd:
56:57:79:82:33:12:5e:cc:4b:20:5b:37:d6:c7:e3:
96:49:66:bb:19:fe:e9:0c:ab:ba:d9:6c:10:7a:86:
2c:b3:ae:32:a3:e2:24:0d:4e:08:88:94:72:60:38:
9d:6c:00:76:4b:d7:66:c4:7b:2e:7f:d2:83:42:fb:
0d:3d:80:45:df:34:2d:ac:fb:01:28:77:0e:92:90:
d2:da:f9:17:77:51:0f:2e:28:5c:18:4f:7c:b4:98:
e9:1a:84:5e:3f:74:d5:55:b4:ac:10:a7:5d:a7:9f:
a0:3d:1b:01:f9:ca:63:48:0e:a8:c3:31:bd:5f:22:
e6:ef:bd:ad:94:9b:9a:ec:d5:dd:8a:43:7c:14:9f:
10:42:b1:a4:ad:92:e8:64:6e:8f:71:97:a9:55:59:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E1:8E:7F:62:7A:65:C1:5A:A3:F1:3B:41:F4:66:AB:90:44:87:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/238288F8F4CF11EFB2DCE6AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.114.0/24
Signature Algorithm: sha256WithRSAEncryption
62:45:a8:03:28:3e:33:8e:f2:98:e7:01:9d:b9:98:d7:f7:79:
a7:d9:57:93:ac:f9:db:72:3b:75:b2:e2:73:89:55:7f:c7:e3:
05:5d:65:4d:5f:83:e7:af:0b:e1:47:40:71:15:fb:dc:a1:ad:
7a:ba:de:44:9d:d1:2a:dd:96:71:59:b0:24:61:df:c3:0f:7a:
f3:20:d5:8f:aa:ed:42:57:d7:38:5c:be:57:a8:c3:16:13:da:
45:08:69:0e:cc:03:d7:d0:2b:37:62:4d:cc:c6:b7:40:5e:21:
c1:17:fa:0a:d0:76:2e:94:38:fd:cf:7a:25:5d:dc:fc:b8:77:
a7:5b:33:f9:59:94:e6:7f:45:31:13:93:71:36:38:34:2d:b6:
d0:01:ff:9c:fa:da:c6:ed:d1:a6:b6:2a:a2:16:1e:47:b3:86:
81:19:b5:0f:29:81:5f:0f:b3:92:d6:db:e1:08:5d:b3:9d:16:
86:96:b1:1c:fc:25:35:cd:2b:0f:0e:76:eb:05:43:75:07:d0:
19:e1:2b:eb:c7:2d:7f:c2:c3:c6:b8:8a:32:e8:21:52:50:d5:
2f:6b:89:4e:76:15:4d:38:fe:e1:a7:91:6f:2f:de:1b:07:8a:
42:b3:fc:de:81:49:6f:73:f3:96:7a:5c:cb:f6:4f:25:cc:d0:
52:1a:21:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:30 2025 by rpki-client