Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B23043AF46411EF8DB38D45762E951A.roa
File: 8B23043AF46411EF8DB38D45762E951A.roa (raw, json)
Hash identifier: SEhB3DZiMc0ZLCaRiaLtJueeAiGIcWAHg3ywTG/A6eU=
Subject key identifier: 40:C2:67:E6:14:D6:04:EF:7F:5A:4B:10:A5:55:CD:8A:0E:C4:6A:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013565
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B23043AF46411EF8DB38D45762E951A.roa
Signing time: Wed 26 Feb 2025 17:10:14 +0000
ROA not before: Wed 26 Feb 2025 17:10:10 +0000
ROA not after: Thu 19 Feb 2026 17:10:10 +0000
asID: 984
IP address blocks: 156.245.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79205 (0x13565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:10:10 2025 GMT
Not After : Feb 19 17:10:10 2026 GMT
Subject: CN=67bf4af6-7b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:09:0a:5c:7c:d2:c3:3b:c9:e8:9d:21:70:
85:5d:a9:63:7a:14:b5:ea:6b:e6:ab:ba:a4:f3:b9:
3e:20:6c:bb:f6:32:68:d8:ea:ba:de:da:74:95:82:
dc:1a:88:e6:47:43:b3:71:9e:93:d8:9b:a6:c2:d4:
99:8f:02:59:2b:4a:fc:dd:01:f7:59:0e:bb:fd:35:
68:8f:c0:9e:1c:44:ad:bd:23:6d:b3:6f:d2:1f:37:
e9:99:72:9a:a2:20:3d:c2:b9:1d:bb:fa:0e:9a:63:
22:ef:fe:70:97:10:3d:52:82:f2:9f:08:1b:51:70:
27:f6:43:d0:60:dd:c3:bd:72:20:be:4e:db:9a:67:
7a:80:d4:e2:a2:ff:4e:cc:b3:e8:90:bb:7f:ca:df:
38:86:47:f7:93:f4:a0:c9:b1:9c:c5:22:7c:97:0c:
1b:78:34:52:47:32:aa:54:97:d6:a5:df:a8:84:ce:
d9:d8:77:95:95:da:ae:3e:5e:15:8e:4d:85:69:5a:
75:db:c9:50:b8:a3:34:8e:f0:f4:60:f5:35:2f:38:
88:06:7c:0f:66:c6:97:65:9b:3d:5e:79:91:21:72:
d1:35:3d:80:bc:30:db:57:38:0d:9f:3a:d5:3c:e1:
73:30:f8:19:7e:46:6d:15:b9:89:fe:c6:a5:d4:10:
08:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C2:67:E6:14:D6:04:EF:7F:5A:4B:10:A5:55:CD:8A:0E:C4:6A:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B23043AF46411EF8DB38D45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.78.0/24
Signature Algorithm: sha256WithRSAEncryption
97:fe:72:6f:1e:a4:c7:36:3c:d6:c4:b5:06:ec:0a:81:f7:3e:
b0:7f:ab:3d:49:5a:e9:84:a6:c2:cf:cd:8b:bf:ed:2d:2b:72:
cd:34:32:6e:a6:ec:dd:3b:ca:c5:57:7d:9b:1b:c0:78:d4:37:
e6:6e:92:42:95:c2:51:0f:81:1d:a4:56:6d:d0:36:ea:e7:4a:
97:be:24:8f:87:37:3a:98:da:4f:3a:f3:0a:03:66:4e:f9:ef:
b4:b7:71:18:73:12:d1:3e:02:29:45:5e:6d:72:15:9e:7c:95:
ab:d4:62:f3:a6:4c:fe:67:70:3f:24:80:ac:89:f2:5b:cf:58:
47:08:f2:e0:69:4d:19:8b:dd:a3:34:15:d6:57:fa:30:31:f2:
37:fc:b3:2d:f7:72:88:0d:29:36:0b:4e:d7:33:52:5b:c6:85:
d4:4a:88:8d:7e:de:bf:93:17:38:71:5a:53:d1:f1:71:ac:42:
09:1e:75:fb:d7:15:0a:5a:59:69:d9:8a:a3:16:71:5c:c1:d4:
84:3f:c9:8e:e5:62:a9:ee:33:6f:0d:8f:e9:dc:a3:12:ff:21:
d2:15:40:1e:9a:fc:68:11:f4:8a:dc:10:4f:da:98:90:1c:2f:
e2:fe:a8:57:ae:81:77:99:12:7c:4a:40:91:50:cc:b8:2e:dc:
83:f3:cb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:56 2025 by rpki-client