Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32EF0B82F41F11EFBE46875F762E951A.roa
File: 32EF0B82F41F11EFBE46875F762E951A.roa (raw, json)
Hash identifier: kOiZklXTG6srLf62IUtHim92IeVYPy6XBLLobr9kKQo=
Subject key identifier: 6A:5B:21:F0:21:0A:3C:83:DA:40:BC:7B:56:63:17:DD:3A:D1:CF:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013030
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32EF0B82F41F11EFBE46875F762E951A.roa
Signing time: Wed 26 Feb 2025 08:53:51 +0000
ROA not before: Wed 26 Feb 2025 08:53:47 +0000
ROA not after: Thu 19 Feb 2026 08:53:47 +0000
asID: 984
IP address blocks: 156.252.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77872 (0x13030)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 08:53:47 2025 GMT
Not After : Feb 19 08:53:47 2026 GMT
Subject: CN=67bed69f-b9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:c2:df:98:58:87:f3:be:b4:fa:d4:1a:9b:
7b:d4:ad:f7:1f:ac:9b:71:3b:a5:80:41:64:eb:e7:
2b:e2:c0:e8:49:58:c6:97:ef:4b:66:1a:96:95:49:
49:52:8a:af:f6:46:07:7d:6f:e4:90:b8:52:0e:f2:
3c:af:64:b6:aa:0f:bb:b2:86:0e:a3:59:fd:47:c9:
00:18:43:ae:87:c2:04:f9:c7:59:0c:d8:ea:26:b9:
da:d7:15:a0:1f:51:3e:05:cb:63:d9:7c:e2:31:4f:
14:c6:37:7c:19:59:e0:8a:43:09:f7:32:36:91:bd:
ea:9a:5e:6e:80:fc:3d:7f:de:21:b1:97:ad:21:01:
c2:b0:0b:60:e1:78:d3:42:08:58:f7:59:03:78:7c:
a8:a6:24:46:38:22:63:52:f8:e8:94:6b:66:90:70:
9d:ad:c0:d9:35:27:75:96:b7:87:ef:e1:e4:14:d0:
e0:56:b1:8d:33:55:62:db:fe:85:2b:5e:aa:0f:43:
9b:c5:b3:41:cd:aa:f1:36:ed:bc:74:ee:9a:0e:1d:
a4:5d:4e:94:5b:98:28:3b:09:2a:94:bd:f2:e2:e8:
6b:73:38:eb:4c:3d:1f:5e:b5:77:45:ae:42:cb:11:
ec:9b:d3:3f:5e:ff:fd:8a:ce:67:56:f3:4c:24:00:
f0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5B:21:F0:21:0A:3C:83:DA:40:BC:7B:56:63:17:DD:3A:D1:CF:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32EF0B82F41F11EFBE46875F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.35.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:45:e8:76:8a:1b:9a:a8:34:fc:c8:81:3b:31:06:26:04:0a:
ff:38:e2:f4:75:9e:10:a8:90:4d:50:f7:ed:80:0e:3f:53:d0:
b6:06:95:4a:d0:f7:ef:e6:ac:1e:f8:ec:55:25:43:89:08:29:
e7:e8:1d:d7:63:6f:8b:5f:a1:88:50:fe:24:97:38:f5:f7:45:
88:d6:10:f3:71:46:be:3c:c0:e3:59:25:96:c6:b2:eb:a9:cd:
7c:60:f0:4e:a7:f7:9b:aa:5b:1e:93:80:40:3c:1e:08:9a:9c:
37:32:d2:0f:80:68:50:1a:00:b6:80:57:31:d4:a2:20:b8:ec:
0a:12:d8:6b:c8:51:56:50:ec:2f:24:b1:01:e8:d8:bd:e7:a6:
95:0b:1c:46:39:d5:70:ed:ce:10:db:73:5e:ce:6c:9e:d7:cd:
ad:4e:3f:e4:9b:41:95:a7:d0:f7:72:10:64:21:1e:1f:09:4e:
de:c5:0b:bf:2b:1a:6e:db:95:00:f7:7e:56:6e:da:c0:5b:00:
40:9e:ca:b6:bf:e5:eb:1a:21:ea:7f:1f:e9:53:86:fe:63:d6:
3a:92:de:60:85:e4:40:61:41:95:fa:f4:c4:c9:1f:05:36:b8:
a6:e6:51:95:05:35:c8:28:85:53:ec:ac:66:d6:14:9f:4c:49:
b1:5f:71:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:35 2025 by rpki-client