Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2520AEFEF47211EFA4E19BA4762E951A.roa
File: 2520AEFEF47211EFA4E19BA4762E951A.roa (raw, json)
Hash identifier: 4z7SAyc3XLJUlxbsX8JX+7UpwJlbnJffRpcIfKA9mk8=
Subject key identifier: 06:B3:7C:7F:D5:4A:26:83:8F:15:6D:E4:DE:9C:9A:83:69:5E:D3:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01369F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2520AEFEF47211EFA4E19BA4762E951A.roa
Signing time: Wed 26 Feb 2025 18:47:36 +0000
ROA not before: Wed 26 Feb 2025 18:47:32 +0000
ROA not after: Thu 19 Feb 2026 18:47:32 +0000
asID: 984
IP address blocks: 156.245.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79519 (0x1369f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:47:32 2025 GMT
Not After : Feb 19 18:47:32 2026 GMT
Subject: CN=67bf61c8-67c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:09:74:b6:1a:c3:e0:02:93:22:c5:ec:0c:63:
6a:fb:1a:06:db:0c:7b:b8:66:18:77:01:c1:e2:60:
ff:fb:a2:c1:7a:43:41:a0:c5:ad:bb:73:b4:07:ff:
22:4c:39:aa:16:f9:a8:1f:61:b3:32:50:4c:ac:5a:
1a:9d:81:9c:38:2f:3f:73:92:57:62:30:a3:72:2e:
42:65:06:7a:51:c9:11:d5:49:13:d5:cc:70:db:f1:
bd:3d:34:99:e3:00:2b:ec:ff:cf:50:79:61:9f:72:
b7:ab:7f:48:98:77:7a:57:2f:d3:93:35:25:e7:c8:
95:94:2f:68:95:14:ba:d1:c2:fc:4e:23:9f:30:ba:
a3:35:e0:9c:6f:f8:9b:5d:a5:5d:2b:aa:bf:68:a6:
07:d0:38:42:f7:25:89:33:32:4a:45:e6:79:41:c9:
e9:52:57:a7:c7:ba:3b:1d:22:6c:1e:b6:43:a3:6b:
c5:4e:8e:65:91:98:a0:57:28:89:70:12:8a:2c:ba:
ac:bf:d5:3d:a3:18:82:3a:0b:d9:da:97:ff:18:24:
a8:ed:2f:70:e2:d7:5d:b8:d5:03:37:51:1b:a6:e1:
f0:fb:eb:b7:ef:7a:7c:84:47:9d:9c:28:3d:4d:d7:
46:45:aa:7f:25:3c:ea:23:b1:93:03:47:94:08:7e:
94:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B3:7C:7F:D5:4A:26:83:8F:15:6D:E4:DE:9C:9A:83:69:5E:D3:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2520AEFEF47211EFA4E19BA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.120.0/24
Signature Algorithm: sha256WithRSAEncryption
64:4c:bb:17:51:5f:4a:85:42:55:30:af:88:98:68:74:19:3d:
22:13:7d:30:24:de:f5:aa:8d:52:9b:cb:9d:90:7e:39:2e:a8:
b6:1f:8a:37:dd:71:b8:a8:a9:39:8f:7f:da:b8:1d:a5:ed:9c:
b0:1a:88:0f:94:2b:90:cc:7c:78:15:bc:be:59:56:2b:f1:a5:
bd:45:56:d5:45:32:ba:37:60:cb:5b:2b:ce:79:d1:0d:ca:2d:
e4:b0:3b:9b:b7:81:fd:04:65:73:eb:00:fc:4a:e0:11:80:11:
e1:48:cb:01:c1:d8:1e:86:05:cb:0b:3c:6a:18:a4:c9:6e:b8:
13:ec:fb:47:e6:07:61:f4:5d:f7:85:bf:62:eb:3c:b6:de:4e:
2b:7b:0a:d4:33:e4:ef:a2:71:37:69:3e:d1:c4:4c:cc:f8:85:
dd:48:b0:21:2e:4c:94:45:1d:c6:30:f4:99:70:3d:b4:c3:b7:
6c:a8:e9:7d:f8:b3:fd:34:95:ae:cf:ce:f2:30:80:c3:46:90:
89:e3:08:75:33:81:f4:2b:6c:23:a6:f3:87:1f:dc:c6:a0:b6:
b8:33:f0:ae:65:bd:6a:77:81:43:6d:d7:d0:57:01:32:73:23:
40:a9:33:9d:0b:4f:db:83:f0:09:63:28:73:a6:3b:bd:2b:66:
e3:16:a4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:55 2025 by rpki-client