Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/326E1300F46611EF8A8FC152762E951A.roa
File: 326E1300F46611EF8A8FC152762E951A.roa (raw, json)
Hash identifier: wIhKRgLjNUnFYbNIEYT0CIcX+0frn2ZpmWgItnSfYF0=
Subject key identifier: 26:8D:6C:94:28:21:F6:CF:0F:8A:79:15:29:C3:B0:5D:D1:E3:70:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013586
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/326E1300F46611EF8A8FC152762E951A.roa
Signing time: Wed 26 Feb 2025 17:22:04 +0000
ROA not before: Wed 26 Feb 2025 17:22:00 +0000
ROA not after: Thu 19 Feb 2026 17:22:00 +0000
asID: 984
IP address blocks: 156.245.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79238 (0x13586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:22:00 2025 GMT
Not After : Feb 19 17:22:00 2026 GMT
Subject: CN=67bf4dbc-93a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2e:ce:e3:e5:fd:9a:01:c1:a0:ef:81:38:9a:
5b:0d:03:dc:23:fd:aa:f1:3f:54:26:40:80:e0:2c:
4d:e3:ff:2b:51:df:b6:1a:a9:40:38:de:3b:96:d2:
5d:44:00:f5:cd:ac:0d:fa:32:51:78:c6:2a:50:06:
1e:7d:0b:fc:4d:b7:6b:70:f0:8b:73:1a:3e:4c:14:
16:0e:31:34:4e:3a:12:e2:44:38:75:1f:18:03:e5:
2f:59:32:0d:5b:fc:18:f1:51:9d:5a:55:0d:37:ca:
63:b6:82:54:4b:09:c1:fc:29:5f:7a:78:ce:ca:3d:
2a:09:22:af:50:86:31:fd:ed:71:2b:89:12:b2:1c:
43:6c:39:a3:4f:d0:03:c5:bf:b4:c1:5d:9e:9b:23:
3d:11:5f:e7:17:bb:5f:7c:f8:3c:43:70:e5:14:dc:
d6:35:a7:8e:28:2f:c5:fd:7f:3e:80:b7:d7:40:4b:
61:2a:51:e5:3d:d8:30:c2:95:25:87:7e:b1:59:5e:
78:37:4f:02:4b:55:07:94:38:90:16:11:5d:81:5e:
cf:25:47:fa:3f:cb:3d:21:b7:d9:fa:97:2f:ba:d4:
01:ba:f6:9f:c5:16:c4:90:a7:32:fd:fe:42:53:01:
4a:d3:d6:8c:a7:ae:18:9e:91:5e:37:29:e9:6b:e5:
31:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8D:6C:94:28:21:F6:CF:0F:8A:79:15:29:C3:B0:5D:D1:E3:70:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/326E1300F46611EF8A8FC152762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.83.0/24
Signature Algorithm: sha256WithRSAEncryption
61:94:e4:4d:33:eb:ad:01:96:3f:94:ab:0f:f9:c6:d4:80:e7:
cf:58:16:cd:ee:a3:d7:de:3e:82:a4:a0:36:c7:68:97:46:51:
5b:6a:5a:e0:71:d3:96:42:8f:9b:dc:a4:65:3f:89:3d:9f:90:
59:07:a2:f0:56:d8:14:bf:a9:c4:6e:52:b3:09:0e:26:55:74:
1e:83:af:e8:bb:66:67:d5:3c:45:5f:71:ab:fe:78:84:9c:1c:
df:24:68:c8:ad:d1:93:3d:34:82:cc:f2:58:54:7b:81:ac:5f:
a1:31:fc:e1:6a:61:ee:96:f8:d7:7b:00:4e:2b:76:94:0c:93:
9d:38:35:fa:42:5f:89:95:4a:93:55:42:85:35:eb:a0:94:99:
34:50:49:db:89:cb:94:97:79:c5:67:c7:b6:04:f6:e1:4a:f1:
c1:a3:19:12:3b:d7:8c:a1:b9:8f:2c:0d:bd:82:7a:5c:52:83:
61:71:ed:6a:04:de:88:8c:d7:d4:19:3d:65:5f:d5:7a:c4:be:
55:15:0c:c2:20:4a:75:1b:21:cc:88:94:0b:47:2f:6b:97:31:
54:8d:69:92:d1:05:e1:f9:99:1c:82:b9:dd:ff:27:07:6e:3c:
e8:d0:40:1b:5d:3b:09:75:b0:f3:d0:27:75:79:a2:75:50:00:
f1:28:2e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:08 2025 by rpki-client