Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/918FE166F46011EFACEEB8A9762E951A.roa
File: 918FE166F46011EFACEEB8A9762E951A.roa (raw, json)
Hash identifier: ivQzO0KTDXKVOTR4tgHSlB0SNdNga09wG3eK1A6BjYw=
Subject key identifier: 76:BE:63:F7:90:26:AB:BB:E2:AB:BB:43:3D:A7:98:56:20:59:10:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0134F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/918FE166F46011EFACEEB8A9762E951A.roa
Signing time: Wed 26 Feb 2025 16:41:47 +0000
ROA not before: Wed 26 Feb 2025 16:41:43 +0000
ROA not after: Thu 19 Feb 2026 16:41:43 +0000
asID: 984
IP address blocks: 156.252.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79091 (0x134f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:41:43 2025 GMT
Not After : Feb 19 16:41:43 2026 GMT
Subject: CN=67bf444b-e1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:26:54:03:aa:ae:dd:03:24:ef:a4:85:d0:
ef:62:04:4e:b3:1f:c2:1b:ac:ca:d1:51:50:e4:5f:
6d:32:f3:99:8e:56:1c:34:84:2e:71:ee:a2:45:db:
12:7a:86:fd:d8:18:51:4c:b8:0a:3e:cc:c0:8e:37:
00:ff:04:ab:e2:22:1f:fc:a1:39:1c:c0:5c:38:34:
be:58:56:ee:86:01:0e:e5:bb:02:41:c9:03:38:c9:
34:8d:fd:8f:80:6e:e8:1b:3f:5c:56:54:e2:57:53:
9b:72:50:40:40:72:ac:2c:76:c4:59:60:14:65:c4:
71:b2:05:e6:55:72:7a:22:60:98:4c:82:a5:cc:f8:
73:44:54:a8:c8:fd:b8:15:73:ea:3b:5c:6e:d7:08:
7c:ce:d6:3f:c2:e5:55:b9:f5:b7:39:cd:19:38:db:
80:f2:2d:82:4f:c7:7d:8a:73:0d:8c:92:2c:db:d5:
ed:2a:64:7c:78:df:17:7d:0f:23:34:c8:0c:b8:ba:
eb:15:91:4b:0d:d1:fb:ac:9b:d0:4a:dc:88:c7:a7:
ef:2d:d6:f2:11:e4:af:55:0b:9b:2f:41:f2:bf:5a:
b3:2d:e7:ff:f8:5c:86:52:ef:2e:3d:3c:2e:06:99:
77:0e:13:6d:91:8e:59:f1:b8:1a:05:62:4f:c5:bd:
02:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BE:63:F7:90:26:AB:BB:E2:AB:BB:43:3D:A7:98:56:20:59:10:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/918FE166F46011EFACEEB8A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.248.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d2:b6:50:49:e7:f7:e5:42:b8:62:f6:1e:e1:b6:1a:a2:76:
7d:0d:a3:3d:10:9e:38:b8:ca:40:36:5b:6a:c5:e5:84:b6:47:
1b:92:31:16:71:2a:46:b1:c5:a4:cf:74:ca:8b:22:4c:cc:83:
64:9e:cf:95:14:bc:10:cd:72:96:d8:28:8a:74:92:26:1a:a2:
44:71:fe:08:60:e9:e7:9c:f4:00:28:c6:43:c9:5d:a1:fd:cb:
cb:32:c5:db:fb:40:40:aa:6d:1f:1f:56:ea:1c:27:c2:d4:de:
c3:18:b3:15:28:6c:75:37:92:c4:c8:70:1d:82:eb:8f:cc:2e:
d1:e6:de:41:46:a0:ca:95:95:2a:68:11:0d:ac:a1:e1:fb:36:
d6:cd:f2:0a:ff:59:36:91:70:73:9f:8f:1a:a7:6b:8c:7e:48:
06:cc:59:70:3e:0c:b8:c1:e0:98:ae:36:b0:81:04:be:0b:07:
db:58:2f:27:6c:eb:9e:c7:db:07:a0:63:32:1f:25:09:b0:de:
10:72:46:dc:9e:63:fa:8a:c5:81:19:57:53:99:da:e3:ad:5e:
ff:b9:fb:b8:1d:79:af:78:fd:9c:da:b1:08:be:db:35:1e:30:
6d:d4:60:48:02:b9:5f:f6:ab:2e:7d:ee:49:c0:27:3a:89:6a:
77:7d:0c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:35 2025 by rpki-client