Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A15308EE53F11EFAE3CF29D762E951A.roa
File: 2A15308EE53F11EFAE3CF29D762E951A.roa (raw, json)
Hash identifier: IvEBXHKX9u66YrGaSQvL151zm+Zs5mBx1g0MHGZMFYM=
Subject key identifier: 15:EF:F3:06:C9:24:DB:31:48:C8:D2:25:0D:13:FD:0A:96:67:C3:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011D09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A15308EE53F11EFAE3CF29D762E951A.roa
Signing time: Fri 07 Feb 2025 10:34:52 +0000
ROA not before: Fri 07 Feb 2025 10:34:49 +0000
ROA not after: Sat 13 Dec 2025 10:34:49 +0000
asID: 984
IP address blocks: 156.230.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72969 (0x11d09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 7 10:34:49 2025 GMT
Not After : Dec 13 10:34:49 2025 GMT
Subject: CN=67a5e1cc-72a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:04:90:a2:81:9c:f7:4f:b8:51:bd:98:b9:
ba:d3:08:1f:c6:c3:b5:c9:72:bc:ad:67:36:fd:d6:
22:52:fa:ea:f2:6c:66:02:37:95:f4:6b:c2:3e:96:
af:db:92:f7:04:3b:32:67:bd:f9:3b:3f:e2:2a:da:
e2:d7:01:ba:02:6a:e9:d2:b3:ed:82:13:1c:3a:91:
e9:9a:13:e9:cd:d4:2e:df:b4:26:bc:ac:24:c6:be:
8c:d0:73:77:53:0a:b2:a8:fe:47:b4:d5:b9:69:b8:
a2:d2:79:09:99:17:1e:a6:eb:86:77:7f:c1:f5:3f:
f7:18:ad:f2:9d:43:65:34:7d:4a:d2:ca:17:60:09:
16:46:3d:77:3c:9f:fb:23:41:a7:3a:79:84:a7:aa:
be:34:0b:07:5b:7a:d5:48:31:0a:92:d7:14:d0:ec:
f2:8e:ef:8a:65:2a:b4:25:29:e0:43:ae:f0:ab:97:
ad:43:2e:e2:d7:8a:d8:31:f5:b1:1d:0e:b3:a5:53:
1e:ea:92:df:91:67:96:78:70:84:dd:3f:e6:f4:86:
3d:1d:d2:6c:5c:f5:54:d1:a7:3c:dd:24:cb:1c:25:
75:df:86:9a:d9:e5:23:da:92:d0:cd:4c:bf:05:a9:
e2:87:9c:0a:82:e0:e6:a2:65:7b:59:2e:b4:38:5d:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EF:F3:06:C9:24:DB:31:48:C8:D2:25:0D:13:FD:0A:96:67:C3:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A15308EE53F11EFAE3CF29D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.160.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e2:98:c1:c6:4b:7f:7f:10:41:91:07:25:21:2f:95:af:60:
fd:61:57:69:ac:73:66:f1:b7:20:a2:05:ba:0b:c8:aa:9d:81:
3f:d5:7c:ad:6f:d5:f4:33:cb:4a:2f:32:0d:a3:e5:14:ca:24:
69:46:f7:dc:0c:e6:50:dc:79:c0:d3:37:b3:20:84:82:24:20:
37:a2:9d:ab:d3:d1:e4:69:57:15:bb:d8:eb:06:35:da:bf:3e:
19:18:98:ca:07:c7:ed:33:60:45:02:b5:09:f7:e3:cb:d8:e3:
9e:7f:d9:d7:ec:8f:8b:cb:26:7a:2d:d0:5e:d3:a3:b7:08:f3:
70:a6:3a:bf:4f:0c:cb:80:5d:09:21:d8:88:9f:c8:17:f3:b2:
33:6d:0b:71:0a:f8:f6:fa:bf:11:53:ac:78:54:7b:a7:4a:1d:
e7:0e:a0:7e:06:0d:01:00:3f:24:e7:cd:8c:76:0a:ed:c9:f7:
12:f5:2d:aa:93:dc:3b:eb:8c:7a:bf:9a:c4:47:b7:45:8a:a1:
9e:c9:82:1a:38:13:71:f7:4b:af:2f:6c:79:fc:53:52:33:8f:
d3:d1:4b:b3:e5:1a:cf:c6:87:d5:f7:fb:c3:0a:b5:38:4e:fd:
df:b0:25:39:e5:05:a9:66:52:af:16:a6:80:ed:0d:cc:6d:25:
8d:4b:de:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:47 2025 by rpki-client