Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B2840EAF43E11EF9A6C3CBA762E951A.roa
File: 5B2840EAF43E11EF9A6C3CBA762E951A.roa (raw, json)
Hash identifier: eafL2NvZ3dgcWRuvkZ4DtwT8L0LCU6qYlJZ5PjDmBP4=
Subject key identifier: 6E:C3:96:51:04:1F:1B:4E:12:A3:98:BA:DF:17:BD:3D:76:90:88:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013291
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B2840EAF43E11EF9A6C3CBA762E951A.roa
Signing time: Wed 26 Feb 2025 12:36:53 +0000
ROA not before: Wed 26 Feb 2025 12:36:49 +0000
ROA not after: Thu 19 Feb 2026 12:36:49 +0000
asID: 984
IP address blocks: 156.252.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78481 (0x13291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:36:49 2025 GMT
Not After : Feb 19 12:36:49 2026 GMT
Subject: CN=67bf0ae5-5c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:dd:f7:47:fa:f4:09:2d:85:6d:fb:6d:14:
b5:51:1c:34:aa:b6:78:6b:52:e6:30:1e:a0:71:d4:
71:ce:de:ab:ef:2a:dd:8d:da:be:3f:0a:1c:72:95:
f9:78:5f:97:7a:c4:b8:f3:11:55:e1:b0:92:08:85:
a6:12:40:70:bd:82:73:99:b8:d2:0d:05:4a:4a:69:
75:6d:2d:d9:9c:70:20:f2:5e:0f:de:84:16:a1:71:
73:e9:f8:38:f7:ee:44:c0:3f:3b:df:15:27:3e:56:
a3:23:2d:4d:5e:92:d5:2a:33:1f:e8:96:92:39:57:
73:07:d5:e5:58:67:7b:5b:ff:91:1a:5d:11:8f:38:
ad:4c:00:0c:9f:9c:b9:d3:ac:0c:2f:c5:c8:d3:77:
5c:44:a7:8a:f1:e5:55:06:73:f6:f9:90:08:3e:75:
58:7e:10:99:f4:9d:e6:ab:23:79:f2:80:f3:47:54:
81:eb:99:49:b1:5a:bd:46:4c:ba:d4:f3:b3:46:d9:
dd:5b:64:3e:f1:d6:bf:1b:4e:c6:51:05:11:cd:fd:
06:47:a0:96:96:42:0b:0e:1d:52:e7:84:3f:cd:44:
c3:39:c8:96:26:c6:13:31:63:89:db:bc:20:a1:9a:
75:53:2a:58:37:ee:38:be:1c:29:b4:ff:e8:be:cb:
7a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C3:96:51:04:1F:1B:4E:12:A3:98:BA:DF:17:BD:3D:76:90:88:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B2840EAF43E11EF9A6C3CBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.146.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:41:68:71:45:0e:e6:2e:e3:27:d4:9e:1f:82:cd:ab:9c:a1:
ff:5b:30:19:b1:11:9d:bf:d5:f1:6f:37:f9:82:f5:f0:4a:53:
f6:de:71:3f:7f:a3:21:91:e6:ea:a3:db:a2:93:c5:67:6b:4c:
0e:3f:d5:ab:c9:82:cb:36:cb:97:c3:01:07:d0:f4:93:ff:62:
84:3f:f9:df:34:5f:44:d5:34:39:cf:8e:b7:34:1d:16:74:f8:
e3:82:2f:c1:63:e0:77:89:cf:fd:c3:67:d5:35:2d:49:74:05:
98:53:f5:b5:48:83:8e:ab:c2:fa:a5:a6:9a:44:f6:cc:35:83:
0a:72:7c:eb:4b:70:f3:f0:65:a6:08:b0:82:bb:6c:f8:63:86:
fe:11:f3:fc:50:00:ad:fb:ca:2e:34:d3:32:55:9e:d2:cb:ee:
9d:c1:ca:9b:55:ab:3f:f9:76:68:e2:ab:a1:c0:a4:fc:f6:4d:
01:f7:f5:0c:e4:c9:a5:f1:c6:0b:4d:a0:8a:bf:3e:28:62:22:
0a:37:79:cc:2e:56:29:81:0c:a0:8a:51:79:ef:99:c6:f0:e6:
d7:ef:21:55:1c:45:0f:ed:45:64:18:2a:66:58:1d:3c:fb:af:
d4:a9:ea:78:f6:95:9c:78:5d:35:af:02:df:be:69:cd:9c:d1:
9d:62:c9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:00 2025 by rpki-client