Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F79237EF42911EF8245F9A3762E951A.roa
File: 3F79237EF42911EF8245F9A3762E951A.roa (raw, json)
Hash identifier: XU1KfcLzFh+tUCAzO7ixRP0F4I2yY1lhirKMLtQyRUg=
Subject key identifier: 09:B7:28:1B:28:C9:9F:A8:61:32:78:C4:F6:7A:FF:81:CC:46:79:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F79237EF42911EF8245F9A3762E951A.roa
Signing time: Wed 26 Feb 2025 10:05:47 +0000
ROA not before: Wed 26 Feb 2025 10:05:43 +0000
ROA not after: Thu 19 Feb 2026 10:05:43 +0000
asID: 984
IP address blocks: 156.230.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78022 (0x130c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:05:43 2025 GMT
Not After : Feb 19 10:05:43 2026 GMT
Subject: CN=67bee77b-5af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:a5:bb:81:5c:a2:9e:5f:88:d5:00:64:ea:
b5:28:86:40:65:a3:07:31:e9:85:3a:96:a3:20:4a:
48:21:c8:f1:63:fc:01:08:83:a2:d6:aa:bd:3b:7f:
d4:c7:89:b9:8c:c1:c9:e7:22:8d:18:21:64:c6:87:
bd:35:a6:99:c8:bf:0c:60:29:e5:29:01:67:6d:9a:
ad:27:c3:81:2d:59:f3:af:3d:dd:72:bb:0b:f6:60:
9d:44:da:42:03:ea:4d:94:89:19:37:5d:83:64:f1:
52:75:56:87:51:34:7b:ef:f5:28:c7:3c:3a:24:dd:
64:7c:92:4b:08:7b:71:a3:d4:27:3a:84:36:a6:f7:
59:6d:05:83:54:40:6d:48:43:46:19:7b:31:57:c3:
33:b8:91:63:cd:8a:ad:bf:ab:52:37:31:b9:c9:2f:
bc:3b:f5:72:f9:b3:8f:30:c6:04:2b:70:f4:fc:89:
f8:cd:6c:c9:55:7d:4f:4d:bb:53:28:4e:b5:1e:17:
00:1d:6e:d6:de:5c:8e:b0:eb:87:30:7b:75:75:07:
07:30:93:87:ea:26:92:11:0d:e2:47:63:9a:33:0c:
fc:c4:61:c2:95:56:f7:a4:5b:20:ae:88:a3:5c:b7:
b8:7d:fc:f7:a9:f2:e9:ec:56:af:c7:17:26:0e:e8:
e5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B7:28:1B:28:C9:9F:A8:61:32:78:C4:F6:7A:FF:81:CC:46:79:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F79237EF42911EF8245F9A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.140.0/24
Signature Algorithm: sha256WithRSAEncryption
40:11:7c:d2:3d:6d:9a:fd:95:ca:39:b9:40:7d:85:5f:32:80:
9b:72:c1:ea:77:ec:ee:73:65:3e:8c:3c:71:a8:13:88:6a:4d:
1f:87:8a:87:66:6d:a1:79:72:2c:97:3d:ae:ee:83:44:5a:ce:
27:85:b9:00:ee:cc:f1:62:7e:3b:60:ae:87:2a:2c:ec:4c:c6:
c7:06:78:0b:48:3a:fb:2a:0c:f7:57:df:53:da:07:d5:c1:46:
11:c0:6c:57:cf:f8:1b:2d:33:2c:b0:06:56:8c:33:b6:90:ae:
62:41:0b:a3:2d:7b:22:84:2a:94:c9:40:90:e2:ac:fc:77:9e:
34:8f:40:96:5c:f7:77:b8:cf:a0:f2:05:28:4c:59:63:c0:e2:
b4:8d:ef:52:9a:e1:0d:47:53:73:ab:2e:3b:fe:ab:4f:29:b7:
a9:96:f7:0e:65:4d:bb:d4:5f:d4:3d:00:82:4e:b1:6b:e8:61:
ef:f2:f5:01:2d:98:1e:75:a0:1a:2a:fe:fa:ce:ee:03:3c:e6:
de:a1:2d:3e:6c:f4:ee:73:07:80:0c:ce:82:55:30:7b:50:2b:
6e:11:6d:89:15:3c:09:09:0e:89:e8:ad:37:7c:4a:d8:a0:e5:
e6:4f:70:3f:12:f2:55:e6:6c:51:f2:ec:66:6c:56:b6:62:79:
7f:5b:b1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:35 2025 by rpki-client