Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/985E1DC0F49011EFAE38DD72762E951A.roa
File: 985E1DC0F49011EFAE38DD72762E951A.roa (raw, json)
Hash identifier: xNJB5DrtwptGSnVAhyHICJ5E13pW03Ne4SIe4I4oalQ=
Subject key identifier: EA:4A:99:4F:DA:CE:AC:CA:E7:55:45:FC:31:25:8E:6C:4A:37:4B:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013829
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/985E1DC0F49011EFAE38DD72762E951A.roa
Signing time: Wed 26 Feb 2025 22:25:34 +0000
ROA not before: Wed 26 Feb 2025 22:25:30 +0000
ROA not after: Thu 19 Feb 2026 22:25:30 +0000
asID: 984
IP address blocks: 156.232.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79913 (0x13829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 22:25:30 2025 GMT
Not After : Feb 19 22:25:30 2026 GMT
Subject: CN=67bf94de-13c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:ee:60:58:24:3a:22:16:f3:09:41:f4:a0:
e8:ee:96:5c:5d:ae:ad:3d:39:47:6d:97:cd:07:d3:
39:63:65:cb:60:44:63:ce:83:0f:00:a1:49:cb:fe:
af:23:d5:55:68:17:42:19:fe:3b:55:ac:c3:f6:9c:
92:da:4f:03:6b:29:a2:50:8a:56:d0:06:37:53:f9:
87:41:6c:49:74:bf:93:23:06:9e:1e:be:44:48:3f:
e5:5a:5e:c1:73:17:f8:a0:70:02:f1:65:57:55:98:
bb:1f:ce:6a:f4:fa:7a:94:8c:ab:f9:9b:d9:0b:80:
98:39:35:ca:53:b8:89:b2:74:1b:36:5e:91:ee:02:
0b:c4:91:4d:2c:f9:7b:73:e3:74:75:61:09:cb:77:
60:70:7b:9c:34:9d:39:d6:5c:84:38:34:d9:d6:85:
6c:e3:62:a6:78:02:94:6b:64:d5:2f:f9:fd:5e:9b:
55:1c:6c:79:60:9f:8b:8f:45:06:3f:aa:28:a8:08:
cc:f7:95:b8:f0:ce:aa:27:95:7d:3b:40:fd:76:27:
e5:88:b2:e2:c2:ff:fe:bf:2f:9a:d4:0c:4a:f5:a2:
c3:32:9c:4b:0a:ef:69:66:f3:21:96:c8:27:af:d1:
70:6a:09:37:19:18:a4:69:9b:49:27:f1:ff:c9:f0:
60:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4A:99:4F:DA:CE:AC:CA:E7:55:45:FC:31:25:8E:6C:4A:37:4B:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/985E1DC0F49011EFAE38DD72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.48.0/24
Signature Algorithm: sha256WithRSAEncryption
61:36:93:72:7b:74:a1:c7:ad:85:09:5d:f0:87:f9:c8:cb:a5:
22:1a:7e:98:b3:e0:f0:2a:10:e3:9a:0d:5b:60:55:b3:85:eb:
0f:72:37:4a:b9:f2:dc:18:d0:b0:19:ec:3a:e7:77:20:9f:7f:
60:72:86:85:d1:78:57:a5:00:e0:fe:a0:6e:d8:3f:01:c3:15:
0a:91:a3:1f:dc:55:37:a7:7b:80:b8:1f:a0:e6:51:59:da:27:
0b:8f:61:5c:4a:29:0c:31:e4:10:17:5f:ba:19:6c:5e:cc:ec:
2f:5c:11:0a:9f:6c:9f:a7:d4:47:d2:66:e6:ac:5d:6c:f4:4e:
cb:a2:14:e6:1c:54:a4:23:6d:b6:83:2c:c5:42:b7:01:2d:72:
e8:0f:c3:f1:b7:b5:87:25:ea:6d:42:47:46:15:05:e7:ad:d2:
1b:34:58:27:65:eb:a7:fa:b1:39:f2:82:21:0d:4e:bf:1c:db:
5f:1b:6a:b7:35:d5:55:c0:26:ca:97:d4:d9:ee:08:41:02:e7:
eb:ab:2d:88:ce:0b:9a:45:c5:58:ca:13:69:2a:2d:58:25:20:
0f:dc:d8:af:b1:c0:e3:6f:b1:a0:ee:52:73:00:26:31:2f:23:
0b:a4:7d:37:19:a6:26:a0:b4:a4:6b:2f:8e:c8:6b:4d:cd:3e:
30:59:1d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:38 2025 by rpki-client