Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F100A32E00111EF9D78B6B8762E951A.roa
File: 4F100A32E00111EF9D78B6B8762E951A.roa (raw, json)
Hash identifier: AiL8NZmGkF1zi7tWmizFaHv6IROt14VvjugBX7pxwws=
Subject key identifier: 99:CD:B6:6A:3F:DB:AC:D6:8C:06:F3:83:C9:5A:D0:01:34:75:DE:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F100A32E00111EF9D78B6B8762E951A.roa
Signing time: Fri 31 Jan 2025 18:29:30 +0000
ROA not before: Fri 31 Jan 2025 18:29:26 +0000
ROA not after: Sun 11 Jan 2026 18:29:26 +0000
asID: 399077
IP address blocks: 156.248.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71403 (0x116eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 31 18:29:26 2025 GMT
Not After : Jan 11 18:29:26 2026 GMT
Subject: CN=679d168a-3515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:68:e8:f7:16:bc:2c:69:ef:43:13:18:94:
17:3f:1b:4c:b9:07:02:a7:bc:4f:ab:49:06:07:43:
72:77:b4:f4:14:8c:00:66:8a:05:4a:9d:0e:8f:7f:
9d:ea:e0:8b:55:66:d6:1e:5b:96:4e:cd:66:d0:2b:
6b:f7:94:f4:19:88:c2:3b:b0:89:8d:77:f8:89:98:
e7:ab:34:22:e0:48:66:67:73:59:62:06:7e:de:3b:
24:fd:cb:82:7b:98:7e:05:ce:9f:b3:73:ab:5b:5e:
65:91:c4:32:22:86:e6:a0:a2:5e:82:2a:b9:09:0a:
3a:1f:2e:a3:7a:b3:38:d3:b0:14:8f:7e:d1:f2:e1:
57:83:70:15:c1:cd:e6:08:5b:c9:20:ca:00:b0:4c:
1f:a3:39:a0:6d:8b:08:a4:b9:c1:27:95:ac:3f:d6:
42:c0:4d:fe:01:5e:3c:f6:be:4a:fb:fb:07:d9:53:
79:f5:9b:e2:79:10:83:bf:04:92:d4:bf:99:0f:c9:
22:f5:7f:2d:1e:6d:55:fb:a5:75:7a:b4:82:2e:a0:
04:a9:80:33:39:a5:a5:29:4a:f5:55:ab:ed:91:46:
a7:60:51:fd:08:b6:ad:10:5d:97:17:87:5f:66:80:
3e:e2:94:33:08:a7:b1:59:ae:80:e6:79:5c:89:d5:
7d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CD:B6:6A:3F:DB:AC:D6:8C:06:F3:83:C9:5A:D0:01:34:75:DE:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F100A32E00111EF9D78B6B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.78.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:4d:ec:b9:f2:90:3d:0d:a6:73:c0:3f:41:34:bc:23:05:57:
57:49:c1:b8:fe:f9:6a:75:c0:f1:5c:6f:12:5a:fb:76:bf:2c:
9c:f8:71:f7:bf:69:fb:e6:6b:94:8f:e6:4a:7b:84:ad:50:6d:
94:90:0e:a6:b3:e0:67:9c:55:86:7b:2d:ff:74:ff:78:ea:15:
e4:93:6d:07:65:d4:bb:06:a1:40:06:c2:a8:5b:04:a7:79:7b:
50:48:e9:50:ce:c0:5a:0c:68:83:42:e6:a5:29:95:63:8d:30:
7b:de:3a:5f:67:e1:ba:91:ef:16:57:5f:46:f8:be:88:1e:25:
3b:2a:f4:b6:11:59:12:1d:57:c1:a0:38:d4:09:cf:35:16:d2:
fe:40:fd:9e:8e:ec:46:8e:30:fd:57:1f:10:a4:f7:51:89:77:
68:b3:9f:eb:7f:7b:31:8b:8b:1d:f1:6d:05:93:f2:55:52:d0:
ae:20:68:29:df:9d:2a:5d:5f:21:fd:81:5c:f2:5c:5a:de:51:
85:16:dd:38:c9:1c:94:87:10:66:81:ec:91:be:1b:91:51:1c:
21:24:d7:71:0e:06:66:c7:e2:1e:d6:64:46:d9:09:a6:91:a5:
61:2d:b5:d9:b5:9f:3f:f1:97:31:4b:b5:ad:58:60:46:66:af:
13:c0:70:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:37 2025 by rpki-client