Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D478622F44711EFB755DB77762E951A.roa
File: 3D478622F44711EFB755DB77762E951A.roa (raw, json)
Hash identifier: Y0iExzgUf9BHfZ7b0ccgf7fQJLsy8pHxTeFuAWNpwh0=
Subject key identifier: E3:2D:61:67:61:82:5F:C7:5A:94:CD:78:1E:03:81:28:CD:E0:28:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013348
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D478622F44711EFB755DB77762E951A.roa
Signing time: Wed 26 Feb 2025 13:40:28 +0000
ROA not before: Wed 26 Feb 2025 13:40:24 +0000
ROA not after: Thu 19 Feb 2026 13:40:24 +0000
asID: 984
IP address blocks: 156.245.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78664 (0x13348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:40:24 2025 GMT
Not After : Feb 19 13:40:24 2026 GMT
Subject: CN=67bf19cc-6cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:82:40:9c:85:ef:0f:cb:2c:b8:9e:3a:df:
b8:e4:0d:4f:f6:47:71:91:2e:10:b6:33:66:d7:1b:
07:15:f7:c9:43:94:6a:e3:3f:97:e7:85:4c:f9:98:
9f:30:be:fc:b8:66:56:ce:af:86:01:1f:2a:c2:ea:
ae:99:3e:8f:2e:66:7f:e1:2c:36:fa:a4:95:48:23:
00:13:a9:7a:48:df:48:16:e4:2f:a1:8f:95:8e:70:
15:90:d4:d2:4a:12:9b:70:72:b3:fb:9a:4a:11:a9:
47:e6:37:ec:61:78:e1:ae:af:00:67:16:cb:33:15:
5a:01:7b:72:76:39:8d:45:e8:7a:07:cb:4f:c5:1a:
e9:9d:06:04:05:d9:77:e9:3f:81:40:ef:1f:c0:5d:
35:bc:b9:cf:4c:14:b5:74:ca:44:f1:bb:2a:a4:a4:
8d:17:e4:6a:af:ac:4e:26:ff:3a:72:8c:bb:0e:c2:
82:32:eb:ee:50:25:6e:67:49:60:e0:40:b1:94:21:
57:67:71:b3:00:9c:fd:12:81:7d:8a:65:b5:8c:6f:
08:da:11:8b:08:00:35:45:15:1b:f2:5f:87:b9:6b:
b8:d4:f2:f7:a1:d4:18:40:da:81:7b:e8:3d:d8:fd:
12:69:16:a7:53:72:ed:13:34:8f:c8:3f:16:07:bf:
17:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2D:61:67:61:82:5F:C7:5A:94:CD:78:1E:03:81:28:CD:E0:28:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D478622F44711EFB755DB77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.240.0/24
Signature Algorithm: sha256WithRSAEncryption
20:22:0e:04:17:2c:a6:db:40:65:93:73:8f:b0:d4:3d:f6:57:
bb:60:c5:3e:44:55:f0:ae:e7:30:34:3d:40:d4:0e:99:69:c2:
21:cf:64:da:f5:f8:7b:70:cb:69:14:2b:90:27:79:31:54:1d:
5d:83:cd:d3:e9:3e:bc:cc:09:ea:f7:3c:a9:fd:d8:bb:d8:49:
8c:69:cc:4b:6f:67:e3:99:4e:c9:f1:d9:8e:d8:7b:75:23:d2:
32:31:54:13:dc:23:18:d2:58:9b:77:66:e5:b1:24:35:82:38:
44:fa:f5:75:06:45:e2:ac:09:e9:d8:0b:f5:2f:3e:ac:5c:72:
76:54:b5:31:cc:50:c0:ab:71:b8:69:23:1f:67:96:34:ce:06:
52:42:68:2d:f6:dc:23:71:9e:cf:95:79:b0:27:ed:82:50:86:
33:d3:f7:f4:fc:71:14:2d:a3:50:b2:30:6e:7f:4a:54:b0:59:
71:8a:0d:89:7b:11:ba:d6:eb:19:4a:82:46:17:42:62:15:73:
8b:41:2a:c8:2c:3c:d5:56:30:1c:0d:83:4e:b9:e7:fe:79:e2:
ca:3a:16:67:00:72:a4:00:55:20:59:6b:ff:4b:52:ac:78:11:
db:fa:bc:a3:1a:e8:1e:75:e8:c2:e3:55:e5:2f:09:9e:c8:a3:
ae:a2:d5:23
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATNIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTM0MDI0WhcNMjYwMjE5MTM0MDI0WjAYMRYw
FAYDVQQDEw02N2JmMTljYy02Y2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr0uCQJyF7w/LLLieOt+45A1P9kdxkS4QtjNm1xsHFffJQ5Rq4z+X54VM
+ZifML78uGZWzq+GAR8qwuqumT6PLmZ/4Sw2+qSVSCMAE6l6SN9IFuQvoY+VjnAV
kNTSShKbcHKz+5pKEalH5jfsYXjhrq8AZxbLMxVaAXtydjmNReh6B8tPxRrpnQYE
Bdl36T+BQO8fwF01vLnPTBS1dMpE8bsqpKSNF+Rqr6xOJv86coy7DsKCMuvuUCVu
Z0lg4ECxlCFXZ3GzAJz9EoF9imW1jG8I2hGLCAA1RRUb8l+HuWu41PL3odQYQNqB
e+g92P0SaRanU3LtEzSPyD8WB78X6QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOMt
YWdhgl/HWpTNeB4DgSjN4ChqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRDQ3ODYyMkY0NDcxMUVGQjc1NURCNzc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPXwMA0GCSqGSIb3DQEBCwUA
A4IBAQAgIg4EFyym20Blk3OPsNQ99le7YMU+RFXwrucwND1A1A6ZacIhz2Ta9fh7
cMtpFCuQJ3kxVB1dg83T6T68zAnq9zyp/di72EmMacxLb2fjmU7J8dmO2Ht1I9Iy
MVQT3CMY0libd2blsSQ1gjhE+vV1BkXirAnp2Av1Lz6sXHJ2VLUxzFDAq3G4aSMf
Z5Y0zgZSQmgt9twjcZ7PlXmwJ+2CUIYz0/f0/HEULaNQsjBuf0pUsFlxig2JexG6
1usZSoJGF0JiFXOLQSrILDzVVjAcDYNOuef+eeLKOhZnAHKkAFUgWWv/S1KseBHb
+ryjGugedejC41XlLwmeyKOuotUj
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:56 2025 by rpki-client