Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C70D140F42C11EF910811BB762E951A.roa
File: 5C70D140F42C11EF910811BB762E951A.roa (raw, json)
Hash identifier: 4HqbVDLuNaizbqF0uJYMMlG3THIv0b9CHAN4HrKu1bg=
Subject key identifier: 25:10:F7:BA:48:B1:32:B7:43:54:9E:87:36:82:22:19:65:E9:B9:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01310E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C70D140F42C11EF910811BB762E951A.roa
Signing time: Wed 26 Feb 2025 10:28:04 +0000
ROA not before: Wed 26 Feb 2025 10:28:00 +0000
ROA not after: Thu 19 Feb 2026 10:28:00 +0000
asID: 328608
IP address blocks: 156.255.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78094 (0x1310e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:28:00 2025 GMT
Not After : Feb 19 10:28:00 2026 GMT
Subject: CN=67beecb4-05fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3d:e2:01:bf:e5:dd:fb:4d:31:19:d7:e2:24:
82:2b:5d:59:c6:81:30:67:16:b8:d0:04:16:a3:fe:
c1:f0:98:e7:ac:e7:d4:32:75:c9:eb:aa:32:8d:ff:
39:02:11:8d:a5:44:7f:fd:0c:0b:32:88:27:75:4a:
27:c1:a1:11:f2:26:50:5c:93:ab:9c:92:a9:3b:67:
e1:56:f1:8a:24:f0:65:31:2b:37:db:ee:a7:da:1b:
6d:c3:21:d0:dc:04:fd:45:a6:40:6f:e7:12:28:07:
46:15:00:85:96:ad:46:d7:0f:ed:78:6c:fa:2b:7d:
04:21:f4:68:9c:16:8b:4f:02:54:72:1a:38:f8:39:
dd:7a:4a:a7:d4:64:05:de:cf:90:3b:1d:da:78:52:
82:9e:06:d0:b4:0a:07:d7:82:fb:d4:32:6d:05:9b:
93:98:c8:e2:33:31:3d:81:fb:b8:46:c3:13:07:c7:
e4:6a:30:f5:93:05:da:f9:f5:3b:c8:8d:fc:36:47:
fb:b8:81:c1:ee:53:14:7a:be:aa:31:da:94:e5:66:
21:c1:60:a8:03:94:ed:0b:99:b9:e7:87:8a:ce:92:
6a:ba:e4:09:a1:64:ac:b9:5b:ff:3f:a9:78:28:67:
9b:5d:af:09:9b:f9:35:26:3b:95:df:00:f4:6e:b3:
f0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:10:F7:BA:48:B1:32:B7:43:54:9E:87:36:82:22:19:65:E9:B9:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C70D140F42C11EF910811BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.87.0/24
Signature Algorithm: sha256WithRSAEncryption
54:6b:e8:bf:3f:d8:8d:b8:61:4c:a4:07:64:5e:95:72:ef:99:
8e:01:8a:17:36:b6:98:57:68:f3:36:c9:26:38:b3:7b:d5:75:
1c:5f:11:01:03:10:71:e7:c9:8c:fc:89:85:40:48:9c:c3:bd:
fd:0a:bf:02:64:43:70:8b:7b:f0:da:ae:d1:dd:f3:a3:86:e7:
7b:7c:af:cf:0b:db:2d:91:12:e2:e6:04:39:25:35:a3:91:f0:
20:f4:92:7d:7f:35:b6:4a:86:b3:3e:6a:80:95:5e:92:55:f0:
6a:a5:69:96:05:17:58:52:08:04:49:be:5a:89:4a:42:bb:ee:
6f:1e:df:78:8f:f2:9d:27:a6:29:1e:02:d1:ea:92:75:5b:ff:
b5:e0:a4:a2:64:03:28:fa:9e:89:5c:15:73:ac:2f:f7:94:bf:
5d:b7:7b:bf:89:36:3e:aa:53:97:50:2f:e4:17:6d:8e:75:c0:
37:bc:f0:8d:d8:d4:d0:86:98:db:03:3f:3a:3d:09:2c:ce:e6:
c5:80:99:8a:01:f3:64:fe:4b:d9:f1:c3:17:e1:8d:c0:20:51:
8e:fe:ac:9d:2a:a0:3e:c3:eb:25:13:b3:06:09:10:db:1d:16:
d9:7f:16:34:40:24:38:7f:59:6b:43:2a:60:41:cc:e2:79:1d:
ea:78:53:2c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATEOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTAyODAwWhcNMjYwMjE5MTAyODAwWjAYMRYw
FAYDVQQDEw02N2JlZWNiNC0wNWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9D3iAb/l3ftNMRnX4iSCK11ZxoEwZxa40AQWo/7B8JjnrOfUMnXJ66oy
jf85AhGNpUR//QwLMogndUonwaER8iZQXJOrnJKpO2fhVvGKJPBlMSs32+6n2htt
wyHQ3AT9RaZAb+cSKAdGFQCFlq1G1w/teGz6K30EIfRonBaLTwJUcho4+Dndekqn
1GQF3s+QOx3aeFKCngbQtAoH14L71DJtBZuTmMjiMzE9gfu4RsMTB8fkajD1kwXa
+fU7yI38Nkf7uIHB7lMUer6qMdqU5WYhwWCoA5TtC5m554eKzpJquuQJoWSsuVv/
P6l4KGebXa8Jm/k1JjuV3wD0brPw7wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCUQ
97pIsTK3Q1SehzaCIhll6bmQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QzcwRDE0MEY0MkMxMUVGOTEwODExQkI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP9XMA0GCSqGSIb3DQEBCwUA
A4IBAQBUa+i/P9iNuGFMpAdkXpVy75mOAYoXNraYV2jzNskmOLN71XUcXxEBAxBx
58mM/ImFQEicw739Cr8CZENwi3vw2q7R3fOjhud7fK/PC9stkRLi5gQ5JTWjkfAg
9JJ9fzW2SoazPmqAlV6SVfBqpWmWBRdYUggESb5aiUpCu+5vHt94j/KdJ6YpHgLR
6pJ1W/+14KSiZAMo+p6JXBVzrC/3lL9dt3u/iTY+qlOXUC/kF22OdcA3vPCN2NTQ
hpjbAz86PQkszubFgJmKAfNk/kvZ8cMX4Y3AIFGO/qydKqA+w+slE7MGCRDbHRbZ
fxY0QCQ4f1lrQypgQczieR3qeFMs
-----END CERTIFICATE-----
Generated at Fri Apr 11 17:35:45 2025 by rpki-client