Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49D9FC00F44011EF881CF146762E951A.roa
File: 49D9FC00F44011EF881CF146762E951A.roa (raw, json)
Hash identifier: HKWnG/fepPRHF7YKFyvXt802IIkisEEqQjDGtFWIRw4=
Subject key identifier: AE:02:FA:63:D4:DF:CB:A7:03:11:EC:86:FF:BC:52:76:AE:BD:77:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0132BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49D9FC00F44011EF881CF146762E951A.roa
Signing time: Wed 26 Feb 2025 12:50:43 +0000
ROA not before: Wed 26 Feb 2025 12:50:39 +0000
ROA not after: Thu 19 Feb 2026 12:50:39 +0000
asID: 984
IP address blocks: 156.252.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78524 (0x132bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:50:39 2025 GMT
Not After : Feb 19 12:50:39 2026 GMT
Subject: CN=67bf0e22-8236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1b:82:ea:c3:2a:d7:9a:4b:9e:5c:43:cc:b0:
0d:d1:a4:9b:d5:63:68:d2:89:3f:2d:8d:d9:80:87:
82:57:84:6e:b6:96:7c:5d:8b:a7:16:56:00:97:44:
08:14:13:fa:51:1b:22:81:c6:71:cd:fe:fd:ac:0f:
79:e5:84:d3:9a:39:ea:12:5a:43:14:a9:55:12:72:
40:3b:21:2b:43:bf:24:f0:ee:ba:d9:55:21:36:5f:
a0:97:87:97:82:66:49:75:b8:a4:c9:ae:ae:99:d5:
77:c6:ac:55:6f:1a:12:f0:3c:34:bb:ab:be:60:87:
37:68:1d:98:5c:13:4c:0e:20:ec:d5:d4:0e:79:7e:
c6:15:f0:3f:e8:79:ca:a6:71:bb:96:8f:15:98:0e:
34:31:af:43:2a:59:a8:4c:37:72:d6:9a:5c:14:1e:
c8:14:bd:73:14:e2:9d:2f:16:66:d9:be:7a:f9:ad:
f9:b8:a3:f3:29:b3:e1:04:89:57:28:70:ec:f6:de:
ae:02:91:e4:9c:9e:50:45:12:2e:d1:4f:aa:5a:e8:
28:ab:04:1d:f3:7c:6f:c9:a8:a3:2d:a1:c2:fb:84:
ea:63:30:11:50:62:e6:51:ff:8a:72:77:a8:d1:ba:
ba:d2:7f:ff:02:93:c5:50:6f:6c:0f:dd:3d:d7:03:
33:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:02:FA:63:D4:DF:CB:A7:03:11:EC:86:FF:BC:52:76:AE:BD:77:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49D9FC00F44011EF881CF146762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.152.0/24
Signature Algorithm: sha256WithRSAEncryption
48:11:1e:f3:9a:86:75:df:65:b1:4d:8a:1e:fa:d3:21:7f:49:
0f:a5:5a:af:ce:bd:5f:fa:93:91:00:35:2d:78:b5:38:e3:83:
5d:24:0c:38:5d:7d:22:19:a4:22:ca:ed:d1:6c:ce:b8:e4:66:
36:0f:e6:c7:0b:f7:53:59:2f:1b:d2:c3:b7:72:5b:45:76:d4:
5c:11:e3:b9:ca:12:1c:56:a1:f2:b0:b7:a7:95:ef:8f:cb:da:
92:07:26:bd:ac:0d:ce:9a:a8:80:c6:c0:98:92:8a:77:78:14:
e5:b5:6d:ed:35:1e:22:88:44:1a:af:be:4f:58:2a:17:f9:5e:
d1:8e:63:23:f2:e2:3a:f8:f7:96:18:36:b3:f7:78:3e:01:43:
94:f4:d1:c2:0a:74:50:23:24:29:17:b2:59:9d:8f:09:6e:d3:
04:22:e2:34:49:1e:de:f3:66:3d:87:68:38:a3:08:5f:5e:58:
33:d1:41:dc:4e:9f:bb:e0:4e:5d:82:65:07:0f:94:eb:00:48:
af:a1:1d:18:85:34:2e:81:1f:07:95:9e:48:ff:a2:d8:bd:32:
f7:c4:b4:c8:92:43:85:4b:36:18:00:89:60:8a:19:27:e6:8a:
8b:43:fb:32:62:32:0c:90:03:9b:06:c0:0f:07:da:db:17:e7:
aa:a7:3b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:04 2025 by rpki-client