Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E5DF544F46B11EFACD7FB74762E951A.roa
File: 9E5DF544F46B11EFACD7FB74762E951A.roa (raw, json)
Hash identifier: jTTTYyDsHE0VbGxo1rz7nccNyz3flqm3z4xGJi8BT8U=
Subject key identifier: F3:E4:FB:62:46:5C:7B:AB:1C:3D:8E:50:1E:7D:6C:AF:A6:44:43:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01360B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E5DF544F46B11EFACD7FB74762E951A.roa
Signing time: Wed 26 Feb 2025 18:00:53 +0000
ROA not before: Wed 26 Feb 2025 18:00:49 +0000
ROA not after: Thu 19 Feb 2026 18:00:49 +0000
asID: 984
IP address blocks: 156.245.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79371 (0x1360b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:00:49 2025 GMT
Not After : Feb 19 18:00:49 2026 GMT
Subject: CN=67bf56d5-31c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:d0:e2:97:c0:bc:19:c7:9b:6b:54:26:3e:
22:04:6b:53:e5:f5:10:8e:0e:b8:d7:84:65:a4:14:
d0:fe:f2:b3:68:25:44:03:23:0f:bf:5c:0f:42:ee:
e5:a2:2f:9f:3d:fd:ab:8a:ac:4d:c1:9d:2d:62:ec:
89:22:32:11:f3:b6:5c:34:b6:d6:25:70:ab:8b:eb:
8b:c3:43:62:78:b4:76:e6:96:42:f4:42:30:bb:d9:
7f:55:e6:bb:7c:74:11:4e:57:6b:be:a4:de:a3:ef:
b9:e3:5a:80:27:8f:3f:58:1f:d0:cf:8a:7f:a5:10:
89:4c:ef:8a:5c:15:4f:a6:35:12:27:ac:58:74:e0:
da:db:7b:0d:cf:af:dc:eb:fa:3d:89:82:c9:c1:fa:
78:39:03:10:ec:a2:27:c3:a7:65:c0:c9:96:0c:c5:
20:12:55:ec:12:28:ca:57:af:92:94:80:1f:1e:d6:
00:5e:26:2b:b5:0e:e4:a3:c3:7c:8a:ad:90:cf:63:
c0:73:11:7c:6a:a9:fb:7c:80:b2:4d:e4:a0:aa:d6:
68:06:95:ea:19:13:bf:af:4d:b1:50:0b:e1:0d:6d:
30:0d:76:8f:23:36:7c:3a:80:cb:cc:5b:5f:41:e0:
b4:98:7b:d3:3f:92:d8:28:94:ce:9f:31:7a:d0:ed:
97:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E4:FB:62:46:5C:7B:AB:1C:3D:8E:50:1E:7D:6C:AF:A6:44:43:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E5DF544F46B11EFACD7FB74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.100.0/24
Signature Algorithm: sha256WithRSAEncryption
24:0e:fc:5a:6c:29:7b:80:e3:77:02:72:ec:bf:ce:bb:af:5d:
5a:51:2d:1e:11:ae:6f:c5:b0:ac:3d:be:2b:79:bd:1a:20:ec:
06:dc:fa:7e:b9:90:5c:e5:3b:6e:19:2f:1d:0f:49:ca:76:db:
21:6d:de:2e:5a:ba:72:cc:90:cd:57:c9:69:7a:dc:7e:ec:d7:
a4:0c:ac:ed:19:03:46:8b:5d:a6:c5:b2:77:ef:fe:b0:3b:f6:
b8:b3:5a:74:60:1f:f3:13:ad:1b:e6:29:a9:d2:19:8e:7b:16:
9f:a7:7b:32:1c:89:a5:0f:44:1a:9e:31:b6:8d:64:f9:a8:97:
cf:6a:a4:18:8d:3e:fe:89:4a:a5:a1:74:73:9f:40:c2:c4:07:
02:56:c6:be:22:9e:c0:56:79:af:fa:41:fa:e7:41:ea:04:6a:
3d:1f:79:d8:75:02:b9:ff:03:d4:79:77:5c:01:12:aa:13:8d:
f5:50:a3:39:0d:66:f1:7e:41:9a:09:a9:ae:e3:e8:d7:d5:fd:
70:d6:e7:3d:a5:ea:e3:c0:dc:0d:5e:4a:18:34:bf:96:c1:c4:
b5:8d:cf:0a:b9:78:85:51:5c:a1:db:66:72:86:61:65:2f:1f:
b8:4c:97:fb:64:de:13:77:f9:29:c6:a7:5d:7f:a4:61:c7:e8:
73:ab:97:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:03 2025 by rpki-client