Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D22CA80023511F0A11B25A9762E951A.roa
File: 7D22CA80023511F0A11B25A9762E951A.roa (raw, json)
Hash identifier: wmnHn4tzbt7+vEH1xtdCJXE9aG1MbKTVK0Tej1rzcG8=
Subject key identifier: B1:A4:B5:2E:DB:C7:64:DB:7B:52:95:A8:74:F6:94:72:2C:79:1F:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014659
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D22CA80023511F0A11B25A9762E951A.roa
Signing time: Sun 16 Mar 2025 07:08:40 +0000
ROA not before: Sun 16 Mar 2025 07:08:36 +0000
ROA not after: Tue 22 Apr 2025 07:08:36 +0000
asID: 214834
IP address blocks: 156.253.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83545 (0x14659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 16 07:08:36 2025 GMT
Not After : Apr 22 07:08:36 2025 GMT
Subject: CN=67d678f8-212c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:b2:e6:90:b9:bc:bb:d6:af:7d:66:d1:f4:
f9:d2:cc:c3:39:71:0e:f3:0b:ca:77:06:5a:f0:c8:
d1:40:cb:22:26:32:ed:1d:6a:26:98:a7:6f:c1:47:
fa:cf:57:e0:65:45:6d:8a:6e:f0:7d:7b:51:d7:ba:
5b:f2:dd:1f:78:71:36:f5:d8:bd:0a:8b:07:74:b5:
c5:1e:17:ad:1a:39:c8:1c:c7:df:3c:0a:85:80:94:
63:f8:fe:ed:80:5a:22:3b:60:94:c0:1a:86:52:f4:
ef:a0:67:79:2b:36:74:e0:a9:ed:3b:c2:6e:37:d5:
2e:3a:71:68:4d:34:6d:ae:c4:00:f9:88:fe:d3:d4:
ee:bc:ce:10:d3:41:4f:69:bd:24:9d:36:71:78:ff:
8b:d4:56:74:78:cf:86:a7:93:21:9f:0c:cd:61:53:
cb:61:63:6b:9b:7f:a9:9f:0e:8c:3f:ba:e8:fd:e3:
2f:44:b9:66:50:7e:4d:5d:cc:01:73:71:8b:09:af:
3b:a7:36:66:69:aa:05:f4:b2:28:a9:7a:45:a6:94:
c4:a6:9f:d5:88:f7:c8:21:a1:81:45:f2:30:d8:0b:
ca:2c:67:52:01:4f:b4:97:63:49:75:97:05:b6:8a:
85:23:dc:4b:1a:13:f5:b6:f8:ee:58:08:bc:64:fe:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A4:B5:2E:DB:C7:64:DB:7B:52:95:A8:74:F6:94:72:2C:79:1F:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D22CA80023511F0A11B25A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.230.0/24
Signature Algorithm: sha256WithRSAEncryption
30:0a:7c:67:ac:dc:c4:3e:fd:76:8e:2a:e1:9b:cd:f8:ee:a9:
fb:fe:d6:85:33:53:ac:de:9c:33:23:e4:7b:9c:7e:36:fa:f7:
92:d3:45:82:06:ed:89:cd:9a:00:40:06:63:77:b9:a3:ab:e5:
dd:e2:08:70:c3:10:8e:8f:29:4b:e6:2e:a6:36:25:a7:b9:a0:
78:7d:18:f5:f6:4b:7d:2e:53:42:c6:7e:31:c2:7d:db:39:8d:
4c:5e:ff:43:b6:18:ae:a8:1e:12:ad:a3:ea:08:c9:01:a5:8c:
11:ca:88:fe:c4:3b:dc:17:54:d5:27:f4:d2:45:02:63:4f:93:
83:9d:05:19:92:20:78:0a:87:37:72:10:7c:a1:fa:39:2f:c5:
de:89:4b:46:ac:f9:1a:2f:1a:e0:44:ea:94:fe:3e:59:83:86:
f6:44:6d:90:29:40:fe:f7:42:ef:54:ba:72:82:51:7c:35:3d:
88:1a:f0:ea:92:31:b0:ad:93:11:03:65:d4:00:5b:a7:a4:aa:
52:57:1d:e9:9d:a6:07:5d:7f:07:6b:16:1a:cc:d1:0b:db:69:
c8:02:da:56:e7:5d:90:9e:90:86:da:e9:6c:fb:08:be:ab:e9:
82:85:df:65:f7:cb:1a:2f:a0:67:06:f6:2f:8c:6f:e4:f6:c1:
7f:e4:2e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:36 2025 by rpki-client