Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A1787C8F44611EF81DA5672762E951A.roa
File: 3A1787C8F44611EF81DA5672762E951A.roa (raw, json)
Hash identifier: MCfh8pBGeSMeQh/FH6RLUGQgxws0ypHtbCO17fxlgG0=
Subject key identifier: 83:0A:C0:9C:56:53:A1:8E:FD:16:6A:4C:73:7D:E2:D9:A6:2B:DD:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013334
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A1787C8F44611EF81DA5672762E951A.roa
Signing time: Wed 26 Feb 2025 13:33:13 +0000
ROA not before: Wed 26 Feb 2025 13:33:09 +0000
ROA not after: Thu 19 Feb 2026 13:33:09 +0000
asID: 984
IP address blocks: 156.252.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78644 (0x13334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:33:09 2025 GMT
Not After : Feb 19 13:33:09 2026 GMT
Subject: CN=67bf1819-ed3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0f:2b:47:53:52:4b:42:46:10:df:3f:74:a5:
6d:35:ec:18:e9:be:65:37:3b:39:d9:a5:df:2c:df:
c5:0b:41:07:49:67:a1:cc:53:f0:c0:1e:5d:2e:05:
a3:c5:bc:89:c2:7a:3a:63:b3:f6:ce:4a:43:3f:be:
a7:13:90:23:15:79:25:93:db:4e:ca:80:3a:21:bd:
55:d3:84:a4:ad:de:a4:16:21:e8:c6:b8:95:59:43:
3e:86:fd:a5:c3:a9:7e:c7:15:44:0b:62:88:a5:3e:
4a:40:b3:29:f6:2a:78:ad:57:81:ba:63:51:ee:17:
cc:f8:28:86:38:86:54:47:ae:79:db:02:bb:0c:f4:
ee:58:d4:ce:5c:28:80:b4:9f:b1:81:79:8d:1f:60:
1c:33:04:70:0f:5c:01:c0:5d:1c:b4:ed:51:3c:92:
61:6e:cb:a6:40:e1:57:28:09:22:ad:c0:8f:3c:33:
49:d4:81:f8:0f:eb:a8:b3:25:bd:d6:27:75:af:cc:
5d:8f:d5:c1:d2:a2:da:3e:8f:5e:2b:2d:af:ee:d3:
91:39:2c:de:1a:28:e9:ec:57:9c:b7:96:09:de:d6:
ca:46:98:3f:98:6c:ee:0c:65:bb:29:22:32:8b:33:
f1:b5:3d:1c:51:aa:66:9b:f8:0a:d8:a8:50:7d:9c:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0A:C0:9C:56:53:A1:8E:FD:16:6A:4C:73:7D:E2:D9:A6:2B:DD:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A1787C8F44611EF81DA5672762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.171.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:fe:b2:3d:c9:dc:9a:15:c5:03:b6:8f:20:38:9b:1d:60:dc:
39:02:8b:73:ec:d8:69:3e:1e:b2:e5:09:02:3e:09:fa:62:a9:
df:14:e4:4f:13:ac:5a:8e:70:fa:c4:c7:a6:d1:0c:c0:c4:b9:
50:ee:59:23:31:9f:86:09:9f:b3:ba:32:11:cb:47:ad:8a:26:
f9:58:03:5b:66:ec:61:82:ff:5d:3e:54:c2:93:ee:ce:a9:ec:
ce:ef:45:74:c2:4c:1a:0b:de:b4:88:10:e5:c0:6c:80:67:10:
82:70:9e:55:a5:ae:f3:2d:53:7a:2a:ab:e9:34:8e:f3:7a:f2:
46:75:8b:4c:10:98:cf:36:2f:0b:6b:fd:d2:df:19:58:63:e2:
99:4e:49:52:0c:db:4e:d5:04:d0:71:31:ac:30:bd:d8:69:d8:
28:de:90:c4:85:96:6a:54:a0:5c:b6:a9:85:d1:7c:fc:96:57:
0a:2f:b1:5b:4c:75:17:26:34:5d:e0:59:a1:29:73:d7:ff:7c:
ea:3e:f1:a7:de:2a:ff:15:29:ac:3f:6d:10:c6:9d:12:89:e3:
a0:42:2e:05:cb:95:80:62:0c:d9:20:91:d2:72:33:fb:e9:2d:
97:5c:89:8f:7e:31:e2:59:e5:c1:0b:d4:4d:40:71:91:2f:5a:
1a:51:e9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:31 2025 by rpki-client