Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FD7C7BEF44911EFA50E6A87762E951A.roa
File: 4FD7C7BEF44911EFA50E6A87762E951A.roa (raw, json)
Hash identifier: GT4i5NtvpbHmkFuUr5zwg9ViffIy/l5HUelpsPRE9BA=
Subject key identifier: 74:13:A3:D1:13:F3:67:F8:95:39:D4:55:A8:76:D5:B3:22:1C:CA:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013370
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FD7C7BEF44911EFA50E6A87762E951A.roa
Signing time: Wed 26 Feb 2025 13:55:18 +0000
ROA not before: Wed 26 Feb 2025 13:55:14 +0000
ROA not after: Thu 19 Feb 2026 13:55:14 +0000
asID: 984
IP address blocks: 156.252.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78704 (0x13370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:55:14 2025 GMT
Not After : Feb 19 13:55:14 2026 GMT
Subject: CN=67bf1d46-de61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:bd:a6:53:a6:5c:19:b5:76:38:60:be:d7:
3c:d6:3d:6d:e4:79:35:cf:b9:a1:d7:67:cb:4e:c2:
61:5a:59:b7:75:a5:ee:08:f4:24:e8:be:aa:27:16:
94:82:4c:94:22:11:68:81:9f:7b:c8:7a:a3:42:dc:
a2:1a:a9:ce:ff:5f:90:b2:f5:86:ec:92:7e:95:e3:
e7:21:56:41:fb:ed:ab:1d:42:73:7c:d3:7f:68:10:
6b:a8:75:c2:6f:87:e2:ee:9e:fc:ef:66:94:03:ac:
bd:e6:47:4e:af:fe:9e:d2:45:35:83:5d:36:e3:1d:
05:9c:e3:7f:12:1c:d5:37:73:0b:63:dd:36:72:de:
d1:2d:92:f2:25:a2:47:91:5b:72:ad:92:6a:1b:41:
8a:59:32:11:e2:81:98:b2:67:f6:f4:f6:3d:d8:d5:
f4:03:7a:17:37:24:56:50:e9:58:e1:02:5d:9b:5d:
3b:c0:6c:b9:35:ae:64:1b:0e:7a:1f:2b:bd:dd:03:
10:26:20:e9:5e:23:5e:cb:0c:84:7e:1a:61:6c:7d:
0c:20:e3:c6:c7:a2:66:96:06:13:df:4b:bd:b6:13:
70:f0:b4:9e:05:0b:c4:b0:29:b7:69:ce:03:cb:f4:
8a:f5:73:8c:44:d8:30:7f:0f:db:ff:f0:62:f0:91:
54:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:13:A3:D1:13:F3:67:F8:95:39:D4:55:A8:76:D5:B3:22:1C:CA:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FD7C7BEF44911EFA50E6A87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.179.0/24
Signature Algorithm: sha256WithRSAEncryption
16:15:4a:41:e0:04:93:d7:54:48:4f:17:df:7f:00:d7:26:60:
05:92:b1:0f:95:8d:84:1e:b2:93:bb:33:c2:a6:03:55:8a:c7:
9a:6b:e6:73:bc:74:d2:05:0a:8c:27:fb:7b:ec:ec:45:4e:cc:
11:92:66:6b:40:82:cf:f3:e7:b3:c2:6b:43:39:a2:de:7e:5d:
15:e2:b4:84:e4:e4:c2:4b:dc:10:79:6f:fa:56:d9:ca:a7:f9:
27:ed:ec:c3:49:17:51:25:f3:6b:a0:a0:84:39:ef:55:0e:ce:
bc:ab:96:ee:57:93:f7:ea:fe:99:ae:e5:97:f5:4a:89:8e:72:
85:39:09:97:f0:09:a5:25:00:2e:02:5f:d2:31:34:9a:df:14:
07:8f:2b:93:5c:ea:6e:0a:ea:87:6f:2e:06:2a:33:f6:00:96:
ef:ef:48:8b:0d:6a:b9:6d:96:bf:62:59:3b:a6:e3:c4:0a:64:
50:5c:db:65:e3:f2:64:07:2d:0e:46:cf:61:83:41:73:fb:7e:
09:39:cc:ce:6c:89:80:10:b3:ed:a8:e7:d3:2f:9e:5f:9d:b1:
0c:56:fd:ac:5a:b8:12:a5:8c:44:e4:9a:25:c4:be:13:12:f9:
6a:22:a3:9f:15:47:7a:03:42:37:42:82:dc:5d:38:f0:5f:20:
04:c8:ff:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:02 2025 by rpki-client