Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81B2D914F47511EF831B61BA762E951A.roa
File: 81B2D914F47511EF831B61BA762E951A.roa (raw, json)
Hash identifier: 5aF/vGJdresJExsx6yj3C/hN0f8cV/lM7ExjJfUYrMg=
Subject key identifier: 95:97:87:73:CE:3B:ED:4F:AA:7B:12:75:14:7C:15:8E:C5:AB:CD:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0136E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81B2D914F47511EF831B61BA762E951A.roa
Signing time: Wed 26 Feb 2025 19:11:40 +0000
ROA not before: Wed 26 Feb 2025 19:11:36 +0000
ROA not after: Thu 19 Feb 2026 19:11:36 +0000
asID: 984
IP address blocks: 156.247.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79585 (0x136e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:11:36 2025 GMT
Not After : Feb 19 19:11:36 2026 GMT
Subject: CN=67bf676b-e259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:a2:99:a6:3f:e6:ff:53:22:23:15:c6:d0:
f9:96:ad:98:d2:03:a8:ba:45:43:bf:ec:3b:0d:ac:
5a:e0:e1:86:6f:51:1b:7c:e5:91:7f:13:e5:98:c8:
77:2f:e6:0a:4c:cf:cd:bd:66:06:8b:c3:82:d1:6a:
d6:fb:56:0a:3b:d8:46:d5:5f:65:0c:f0:17:28:d2:
39:69:b6:7b:8d:2f:3c:29:d5:de:85:bb:95:b5:1a:
dc:7a:5c:64:8d:e5:61:fb:fb:dd:33:d1:47:ca:d1:
74:7e:be:c6:8d:0b:ec:d1:94:5b:78:27:6b:d6:dc:
4c:95:a4:cc:c4:5b:0a:4f:60:86:37:c0:a5:78:db:
ec:94:a8:5f:c7:25:c7:e1:b2:a6:40:99:c1:b5:b7:
0c:9d:16:b6:ee:5f:0a:c1:d6:68:39:84:1f:7f:fd:
fc:f2:cf:10:c7:69:fc:9b:4d:f1:a9:13:77:39:f9:
2c:84:2e:a9:3b:86:1e:8e:d1:58:1b:7f:94:c4:24:
30:6d:30:dd:b2:30:97:73:d0:da:e2:01:27:a1:4f:
0a:a9:8a:8f:9a:7a:e8:99:8e:1f:cf:a8:8d:ae:c9:
3d:ba:45:10:80:68:10:0d:9f:90:5d:0c:3d:bc:e8:
6b:4d:c3:70:1d:fa:bd:ec:06:f6:6d:9f:a5:24:aa:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:97:87:73:CE:3B:ED:4F:AA:7B:12:75:14:7C:15:8E:C5:AB:CD:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81B2D914F47511EF831B61BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.19.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:cb:07:a7:51:e4:87:7b:b4:97:b6:36:28:ca:d6:bf:d5:87:
5f:e5:7e:cc:a3:56:12:a9:43:82:fb:01:e6:bb:45:b7:45:2d:
8e:c1:22:d6:34:35:b3:0f:ff:41:bd:83:0e:c8:84:0c:40:2e:
2f:7a:6c:be:65:04:d0:16:f8:f1:0f:09:d5:79:ca:c4:0c:0d:
0e:a4:8b:f4:e4:76:0c:38:97:20:7d:65:b1:61:8e:85:6c:8e:
5c:77:4a:7b:e5:68:a5:9d:79:b5:9d:a4:1d:ae:61:20:c3:8c:
ac:c8:53:91:dd:86:ea:b0:8a:e6:06:7e:63:a9:dc:a1:40:e8:
99:cb:f9:59:ec:eb:52:9e:1e:d5:50:1b:04:12:99:f9:44:a1:
8d:f9:d9:ba:40:1f:fa:4f:92:e4:ee:2b:ca:42:6d:81:c2:b4:
02:05:55:df:47:4d:33:84:09:d1:e0:f4:8f:5f:51:b7:c2:2e:
8e:b6:aa:e4:a4:89:43:a5:32:d0:c5:41:ad:ee:08:8c:d4:46:
51:18:58:61:ef:93:f1:4a:ca:c9:33:ba:d9:be:27:66:2b:d5:
0d:d1:6f:25:cb:27:05:45:b8:25:a1:62:ce:e5:e4:9f:dd:8a:
75:bf:b3:3f:de:e5:37:9b:90:3a:2c:d0:2e:3d:51:29:20:e2:
95:aa:2e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:06 2025 by rpki-client