Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/978A5DE6F44511EF98A28F6D762E951A.roa
File: 978A5DE6F44511EF98A28F6D762E951A.roa (raw, json)
Hash identifier: /jhWlB4PWexjqJlyMrp9558aizbn+x3SbOhfjx+V0UA=
Subject key identifier: DC:E8:25:43:C6:47:6D:AE:D6:92:E2:08:31:7C:7F:71:CC:B0:FB:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013326
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/978A5DE6F44511EF98A28F6D762E951A.roa
Signing time: Wed 26 Feb 2025 13:28:40 +0000
ROA not before: Wed 26 Feb 2025 13:28:37 +0000
ROA not after: Thu 19 Feb 2026 13:28:37 +0000
asID: 984
IP address blocks: 156.231.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78630 (0x13326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:28:37 2025 GMT
Not After : Feb 19 13:28:37 2026 GMT
Subject: CN=67bf1708-3b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:cb:d1:71:fd:d0:2b:7a:7f:6b:51:2d:38:
10:13:70:28:d5:46:c1:10:b2:0d:ad:6f:ff:80:44:
88:73:40:c6:d4:c5:3d:4b:bb:98:45:13:f7:7c:6e:
3b:ae:40:34:0b:ed:de:2d:f5:c6:88:a9:45:80:dd:
e0:07:04:7d:ac:cc:88:64:24:ec:60:7e:2d:89:d7:
04:4d:a2:ed:76:d1:44:59:32:89:cf:7b:98:46:e3:
13:0e:d6:4e:8b:a0:6e:53:5b:97:9a:35:da:cb:d3:
73:eb:43:50:03:36:36:6a:4a:bb:79:49:79:f7:b3:
c4:2b:20:b6:57:d5:cf:6c:50:0d:f1:5d:ea:ed:9f:
80:32:14:b3:f3:61:17:5d:69:02:b7:e8:c6:28:79:
f4:71:58:bc:c5:a5:07:9d:ec:ff:9b:71:7b:30:0c:
5f:8c:ea:0d:f7:75:47:ae:9c:8b:31:e7:00:34:6e:
02:68:f3:9a:10:de:b3:0d:69:6b:e5:cb:7c:12:11:
76:c3:4b:05:f5:a7:91:58:be:5b:69:4c:55:4a:cd:
29:4e:73:99:d5:43:4f:94:bc:a4:95:9a:9d:8d:17:
91:2a:16:7c:2c:03:b2:b8:13:33:f0:e1:e9:44:a5:
76:24:dc:01:29:62:00:71:2a:c0:e5:71:44:a7:a6:
21:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E8:25:43:C6:47:6D:AE:D6:92:E2:08:31:7C:7F:71:CC:B0:FB:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/978A5DE6F44511EF98A28F6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.100.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:f5:99:bd:39:b8:e3:07:59:2c:3f:e1:80:64:9d:25:47:68:
ea:0f:d0:18:f5:d6:13:2c:03:3d:fd:3b:4b:6d:52:fb:c8:5c:
f3:b5:2e:32:a6:05:fa:ad:5c:ff:ff:63:37:a8:6d:b3:34:45:
e3:d5:38:42:ed:49:a4:6d:5b:31:2e:73:0a:2d:15:f3:cd:a0:
10:d7:ff:3a:83:15:21:51:bc:2f:2d:09:c4:0c:47:cd:c0:67:
7d:83:d3:fa:a1:d7:ce:73:94:a2:c6:92:da:e0:53:2d:76:8f:
aa:87:33:27:36:cc:08:12:b6:d9:31:db:00:7b:f2:2b:bc:7e:
39:23:c5:3c:57:83:81:76:50:9a:d9:7e:49:b4:47:7c:fa:cf:
6a:3d:0b:65:f7:b8:d4:41:f5:f0:e9:7d:c0:98:de:3f:d9:c6:
54:24:09:47:8c:2e:2a:8f:bf:fb:c6:6e:9e:fc:64:9f:92:19:
6b:b3:07:de:ea:b0:18:ea:04:7a:e4:db:d6:c2:d9:9c:2f:9d:
14:b0:67:cb:c7:74:ea:fa:04:b7:b3:49:43:fd:c6:42:52:72:
e5:b8:cc:7a:d4:6a:7d:a2:30:d0:ee:49:62:a6:9e:49:b2:b6:
5f:02:d2:f2:8e:02:02:74:ab:97:8a:40:86:ff:ea:06:5a:fb:
ea:63:16:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:43 2025 by rpki-client