Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AE91708F42611EFA8CA4890762E951A.roa
File: 4AE91708F42611EFA8CA4890762E951A.roa (raw, json)
Hash identifier: 2qrIkVozv1eo9yxEua4WgV0WvykXehTncSadNFUsAMk=
Subject key identifier: 7F:EA:A2:0A:A8:9A:08:41:6F:A9:A9:83:A4:E4:BE:B5:08:F6:03:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01309C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AE91708F42611EFA8CA4890762E951A.roa
Signing time: Wed 26 Feb 2025 09:44:37 +0000
ROA not before: Wed 26 Feb 2025 09:44:34 +0000
ROA not after: Thu 19 Feb 2026 09:44:34 +0000
asID: 984
IP address blocks: 156.230.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77980 (0x1309c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:44:34 2025 GMT
Not After : Feb 19 09:44:34 2026 GMT
Subject: CN=67bee285-9c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:67:c4:18:bc:d4:81:0d:17:18:a5:bd:3a:de:
18:68:a5:73:e2:85:2a:2f:ef:e4:af:cf:3f:31:10:
37:00:08:ca:51:7a:fc:3d:83:56:36:37:3a:a7:ae:
ba:2d:ae:97:e9:c6:16:f4:3c:57:2b:da:7c:2e:93:
5c:b4:e4:72:72:0d:a9:5d:3f:11:59:af:e6:ad:35:
e4:b0:9c:81:60:64:ec:ce:74:05:8a:fd:06:7e:8e:
aa:92:3d:b6:83:90:cb:89:dd:30:3d:19:72:c4:f9:
34:05:9c:16:ad:3d:65:b0:94:f1:cc:29:20:21:af:
2b:17:c1:fe:5f:fd:c7:4c:79:80:81:23:a6:66:b8:
4b:25:02:97:6f:e4:27:b6:35:17:6d:02:a1:d2:a1:
f3:6c:ab:fb:02:6f:4c:47:53:bb:83:af:f2:b3:6f:
11:7b:7a:93:5d:17:b7:4a:5e:a9:62:2f:7d:94:af:
4c:c4:49:0a:58:07:f3:78:17:9f:14:b0:fc:c7:c6:
63:99:60:9b:49:ff:7f:90:d1:78:3f:1d:87:5a:13:
81:03:bf:0f:be:36:c3:f0:aa:35:cb:15:af:bd:c8:
4b:71:3f:7d:6c:63:0d:59:d0:18:c2:19:9f:1c:15:
e8:f9:d2:c0:f9:3f:4a:ed:bd:c5:da:38:4d:04:e8:
f5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EA:A2:0A:A8:9A:08:41:6F:A9:A9:83:A4:E4:BE:B5:08:F6:03:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AE91708F42611EFA8CA4890762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.53.0/24
Signature Algorithm: sha256WithRSAEncryption
88:07:00:7e:ef:7c:57:c1:f2:cb:c4:77:73:18:2a:ea:13:da:
09:fd:5a:18:77:75:c5:03:18:0e:8f:51:e4:28:de:e8:63:7b:
31:58:ec:13:6e:d4:56:07:ec:a0:5f:da:61:30:f9:de:47:d9:
a7:80:a9:3d:99:cf:6a:3d:9f:dc:84:84:ce:5b:70:96:b9:71:
2d:59:e8:e4:7b:24:93:97:8c:26:42:63:35:4d:51:c6:ef:57:
7b:0c:0a:94:82:4b:08:6f:ba:3f:8f:15:93:85:79:c5:1d:bb:
44:0f:52:3e:a5:a0:4e:6a:19:a3:98:c0:32:bc:ef:dd:85:bb:
87:66:43:d9:66:d2:88:ac:e8:3c:1f:37:1d:d3:be:b1:2d:e2:
d3:bf:2f:f2:49:6b:22:cf:48:1d:70:e6:16:b5:90:d7:83:d6:
fa:95:8d:bc:43:ba:30:d3:fd:e4:17:f2:87:6e:68:01:a8:b0:
78:d6:26:49:61:64:29:31:ba:c0:f8:3e:29:1d:6b:98:bd:35:
46:0e:ee:4a:9a:f8:28:01:d2:47:cb:76:b6:9f:5d:fc:e2:7c:
0d:d4:5b:ae:a9:c7:f7:c7:39:af:da:15:69:c5:25:c3:4b:b1:
25:95:38:9a:01:4b:83:90:71:fb:6b:d9:f8:96:61:2a:88:44:
5f:d4:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:39 2025 by rpki-client