Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/374E4036F43211EF861EA863762E951A.roa
File: 374E4036F43211EF861EA863762E951A.roa (raw, json)
Hash identifier: xWGIZm+fgYo2vvBpTyHuhd22iEbqCvTSweJS0KuyZWU=
Subject key identifier: E6:B2:D7:7C:07:A6:8B:DB:DA:0A:0E:1C:FB:51:6D:25:7C:D0:89:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0131A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/374E4036F43211EF861EA863762E951A.roa
Signing time: Wed 26 Feb 2025 11:09:58 +0000
ROA not before: Wed 26 Feb 2025 11:09:55 +0000
ROA not after: Thu 19 Feb 2026 11:09:55 +0000
asID: 984
IP address blocks: 156.230.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78242 (0x131a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:09:55 2025 GMT
Not After : Feb 19 11:09:55 2026 GMT
Subject: CN=67bef686-f5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:40:21:33:e6:61:75:c2:cd:aa:52:a4:8a:
47:8e:b2:28:a6:3e:1d:94:4e:05:59:5b:90:83:e1:
80:b4:c9:f4:e3:41:b6:c8:23:c0:b1:3f:41:c2:4f:
0a:74:03:d5:90:ee:db:40:a4:a8:7f:56:2b:36:10:
a7:1d:3a:f8:0f:08:f1:67:c8:68:a4:17:dc:01:0b:
f1:bf:20:6e:cb:76:56:56:b5:cc:03:66:e0:93:7f:
f3:90:de:74:44:78:ca:8d:ec:46:e4:cb:8c:4d:4e:
c1:9c:d0:75:2e:cf:33:07:38:6c:cb:c6:6e:ba:1e:
12:8b:40:e0:06:01:37:c4:c3:9b:f1:e9:44:9f:63:
12:e3:38:ef:e6:67:34:fa:51:e0:d1:d8:3b:2e:0f:
cd:cc:68:51:f2:79:97:64:c7:d1:62:04:fd:6c:a3:
82:ee:0b:e6:2b:a1:f0:24:58:4e:7c:ce:9c:e3:15:
60:f8:a8:4f:d1:63:30:32:52:d4:cf:64:d7:d3:a4:
fa:44:7f:36:ce:19:ef:6a:15:27:c0:b0:81:e8:5e:
fe:c5:8f:10:38:57:d1:d1:d0:47:c9:f4:7e:7a:38:
15:2d:bc:7f:a9:d2:29:f5:97:b9:54:b6:ca:e8:14:
cc:61:88:a9:00:7c:37:71:84:fd:c3:89:b7:74:ca:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B2:D7:7C:07:A6:8B:DB:DA:0A:0E:1C:FB:51:6D:25:7C:D0:89:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/374E4036F43211EF861EA863762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.190.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:22:28:b7:e2:70:b1:66:a7:f9:d3:be:b0:f7:5b:91:75:5d:
a0:7e:d8:2a:31:70:9b:0a:30:6e:d7:be:70:32:b4:d1:12:4d:
01:18:11:46:3a:2d:2f:00:ed:52:7d:86:a4:f7:8e:8b:cf:cb:
50:24:1c:d1:a6:27:08:82:1a:bf:a0:3a:27:a2:0c:06:57:38:
3c:9b:fb:97:60:be:6e:ab:e1:53:93:ac:53:54:c9:77:04:f5:
15:a2:dc:66:6c:59:ab:90:77:5b:9b:3d:08:73:fb:6f:c8:af:
59:ba:77:6c:b1:ba:dc:3c:2b:c2:aa:6f:df:f0:bc:e8:5e:9d:
71:fc:f4:e6:6a:a2:6c:dd:ab:90:05:59:a6:2d:16:d8:85:e6:
13:09:ba:7b:79:0e:7f:e5:04:9e:48:33:1f:91:53:13:d5:0e:
8d:58:cb:7f:8f:06:a9:cd:65:e9:c7:81:27:15:73:a3:3a:02:
e6:9b:73:e4:1e:22:7a:fa:94:2d:ca:b1:34:7f:6b:b7:73:29:
88:9b:ed:2a:df:a6:c5:a5:bc:7a:92:0b:f5:1a:22:cf:bc:da:
a9:68:24:e3:b7:c9:94:bc:da:43:39:db:46:a4:5f:44:02:b4:
6c:99:36:79:bc:89:bf:bd:e8:b3:35:69:56:33:a4:a4:27:84:
7f:a2:be:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:00:11 2025 by rpki-client