Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FA54148F44811EFBF90F881762E951A.roa
File: 7FA54148F44811EFBF90F881762E951A.roa (raw, json)
Hash identifier: tLSkM6isZAP3dGbT/XQtaWBDPaixMpq5GluMy1twqv0=
Subject key identifier: 10:2E:6D:46:24:52:F5:F5:3F:E3:83:F8:E8:36:4F:15:19:DC:B1:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013363
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FA54148F44811EFBF90F881762E951A.roa
Signing time: Wed 26 Feb 2025 13:49:29 +0000
ROA not before: Wed 26 Feb 2025 13:49:25 +0000
ROA not after: Thu 19 Feb 2026 13:49:25 +0000
asID: 984
IP address blocks: 156.252.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78691 (0x13363)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:49:25 2025 GMT
Not After : Feb 19 13:49:25 2026 GMT
Subject: CN=67bf1be9-3d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:63:07:57:5c:99:f6:6e:72:64:ea:c3:81:06:
b3:8c:14:08:a2:16:10:f7:c0:06:c2:2c:2b:00:47:
32:36:db:e4:70:5e:03:f6:68:46:38:28:71:9f:04:
33:89:99:a9:a6:1b:30:f5:c8:77:46:41:26:53:a1:
28:d2:52:34:8b:79:b9:e2:8a:0a:af:c8:ee:52:a6:
cd:e7:9e:26:51:c5:4d:08:0d:e3:8e:20:bd:1c:45:
c2:10:8e:47:78:16:e1:cf:00:a1:43:09:38:f4:50:
07:9b:ca:8f:8c:8e:bb:72:ff:52:9b:5e:13:44:23:
39:41:3e:40:a2:b4:06:3e:08:b6:de:8e:5c:89:7e:
2c:43:3d:58:58:2f:a8:d9:d6:83:0e:d6:61:94:61:
a4:13:cf:43:58:77:ca:ba:19:e1:e3:b6:25:be:a3:
23:5d:11:b1:a1:60:da:8d:76:cf:53:d8:f3:10:f1:
17:ef:12:08:ac:ab:5d:7c:e9:85:7a:d2:30:29:9e:
69:c1:58:81:08:66:63:83:31:a8:a6:87:ca:0d:5f:
66:23:1c:87:97:3a:f9:d6:24:4d:69:18:ae:ee:68:
e5:e7:24:6a:11:16:21:cd:ab:e1:1a:16:97:9e:5b:
42:94:28:11:45:c0:ea:f0:ab:46:99:de:ee:7d:c3:
98:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2E:6D:46:24:52:F5:F5:3F:E3:83:F8:E8:36:4F:15:19:DC:B1:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FA54148F44811EFBF90F881762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.177.0/24
Signature Algorithm: sha256WithRSAEncryption
78:65:d2:69:1d:f2:4b:83:9a:e4:74:42:0b:45:71:37:29:df:
22:2c:a1:58:5f:13:5f:ba:cc:7e:7e:ff:b1:a1:2b:63:e7:b3:
46:26:d8:c6:af:ae:a2:5b:13:bf:22:a5:26:21:dd:6f:7c:09:
98:85:80:dd:1e:e3:eb:f2:cd:2b:70:26:d0:f0:c3:0c:63:5a:
64:f0:09:a9:f8:c1:18:bc:19:0f:ef:fe:db:5b:de:47:26:3b:
16:e0:f4:e3:48:e5:91:3d:14:ca:e6:8f:f2:7f:4c:e8:5a:c5:
dd:12:ca:8f:3b:a4:3f:61:b5:00:db:1f:ae:28:e8:51:13:6c:
08:34:30:d5:9d:36:de:d7:18:79:62:d9:34:d1:d6:6d:b8:aa:
b1:57:7f:e5:f4:d9:41:97:46:e4:7b:ba:04:b2:19:97:73:1e:
34:0f:bf:df:6d:28:46:18:09:92:90:75:e7:60:47:57:7b:a5:
f5:22:b3:7b:23:7e:7d:74:eb:c1:8f:3a:a2:1e:39:4f:c0:43:
03:21:82:aa:dc:3a:b1:e1:ac:a3:7e:09:96:0c:45:05:df:07:
4f:b3:74:80:5b:df:74:b6:b7:a9:a7:23:5f:86:5d:5c:bf:70:
a7:4d:23:b9:1b:8f:0f:a0:0a:ae:a4:fd:fc:fc:30:bd:22:f9:
ae:19:cf:d1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATNjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTM0OTI1WhcNMjYwMjE5MTM0OTI1WjAYMRYw
FAYDVQQDEw02N2JmMWJlOS0zZDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy2MHV1yZ9m5yZOrDgQazjBQIohYQ98AGwiwrAEcyNtvkcF4D9mhGOChx
nwQziZmpphsw9ch3RkEmU6Eo0lI0i3m54ooKr8juUqbN554mUcVNCA3jjiC9HEXC
EI5HeBbhzwChQwk49FAHm8qPjI67cv9Sm14TRCM5QT5AorQGPgi23o5ciX4sQz1Y
WC+o2daDDtZhlGGkE89DWHfKuhnh47YlvqMjXRGxoWDajXbPU9jzEPEX7xIIrKtd
fOmFetIwKZ5pwViBCGZjgzGopofKDV9mIxyHlzr51iRNaRiu7mjl5yRqERYhzavh
GhaXnltClCgRRcDq8KtGmd7ufcOY4wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBAu
bUYkUvX1P+OD+Og2TxUZ3LHJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RkE1NDE0OEY0NDgxMUVGQkY5MEY4ODE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPyxMA0GCSqGSIb3DQEBCwUA
A4IBAQB4ZdJpHfJLg5rkdEILRXE3Kd8iLKFYXxNfusx+fv+xoStj57NGJtjGr66i
WxO/IqUmId1vfAmYhYDdHuPr8s0rcCbQ8MMMY1pk8Amp+MEYvBkP7/7bW95HJjsW
4PTjSOWRPRTK5o/yf0zoWsXdEsqPO6Q/YbUA2x+uKOhRE2wINDDVnTbe1xh5Ytk0
0dZtuKqxV3/l9NlBl0bke7oEshmXcx40D7/fbShGGAmSkHXnYEdXe6X1IrN7I359
dOvBjzqiHjlPwEMDIYKq3Dqx4ayjfgmWDEUF3wdPs3SAW990treppyNfhl1cv3Cn
TSO5G48PoAqupP38/DC9IvmuGc/R
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:30 2025 by rpki-client