Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1316E6EF4A111EF8F06CD66762E951A.roa
File: A1316E6EF4A111EF8F06CD66762E951A.roa (raw, json)
Hash identifier: sYmpxOCNwqRW4/8yYmjFavLIy0/1w5ln5JECKwOHnk4=
Subject key identifier: 7A:BA:0D:20:D5:2B:C9:13:75:03:F1:BA:6A:0E:62:8C:67:F9:D7:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013871
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1316E6EF4A111EF8F06CD66762E951A.roa
Signing time: Thu 27 Feb 2025 00:27:30 +0000
ROA not before: Thu 27 Feb 2025 00:00:26 +0000
ROA not after: Thu 19 Feb 2026 00:00:26 +0000
asID: 984
IP address blocks: 156.232.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79985 (0x13871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:26 2025 GMT
Not After : Feb 19 00:00:26 2026 GMT
Subject: CN=67bfb172-dd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:44:c7:09:fd:7b:f2:74:36:00:74:f0:83:
a3:0d:34:f9:cb:e1:f4:67:bd:36:5b:cc:d7:ad:68:
c0:0f:b7:2c:97:6c:0e:a9:84:d0:dd:4e:12:cb:07:
25:79:b3:c2:f1:ca:20:39:e8:4c:d9:6f:a5:7d:fe:
74:16:8e:97:38:b7:15:2b:7a:be:84:7a:bf:4d:0a:
7e:1c:a7:cf:d3:3b:5e:1a:8c:e6:35:9e:8a:66:3d:
c9:ad:60:f6:f4:d1:f5:16:24:40:9c:dd:d5:fa:52:
db:50:d7:0e:5f:8e:b2:d9:36:0e:65:f7:a0:f2:cb:
42:4d:29:9b:c4:69:27:8e:7b:6e:06:0f:0b:b1:1e:
d6:00:8a:ba:5e:d4:f0:04:be:6a:15:f6:c5:a1:30:
9b:d4:73:a4:c0:0f:e0:e5:06:67:ad:9f:84:cd:42:
3c:c8:d7:08:46:dd:e6:78:95:f2:80:46:51:ed:3f:
ef:05:1f:d7:a4:61:50:17:5b:43:0f:44:3a:b8:34:
8d:64:02:e5:3d:1b:91:b5:5e:42:53:1e:cc:ce:8d:
3b:e9:07:df:24:f2:49:cc:b7:eb:f3:4d:bc:41:7a:
d6:42:95:1d:46:a6:4c:e6:b3:f9:f0:c5:a9:86:64:
ab:34:d2:7e:be:78:88:bf:76:ac:0b:b2:f8:1a:8c:
4a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BA:0D:20:D5:2B:C9:13:75:03:F1:BA:6A:0E:62:8C:67:F9:D7:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1316E6EF4A111EF8F06CD66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.65.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:10:d2:c1:2b:7d:8f:65:36:fd:b6:42:d7:c5:de:83:dd:e7:
6e:36:bb:7c:f0:2c:d1:a9:60:cd:a7:cb:4c:7f:fe:c5:3e:3b:
d3:4d:fe:73:b8:c0:33:d1:20:ba:2d:43:89:79:47:5d:83:a1:
ee:6c:0d:0e:2a:6e:3c:a2:58:a2:32:64:05:b7:22:2a:91:e5:
94:d1:9b:62:13:aa:0c:11:36:0b:b4:8d:54:0b:f1:c1:70:90:
8d:3b:47:2f:d8:27:71:ef:37:7c:6c:d3:0b:c1:f1:fa:4d:28:
c9:d2:59:b9:3a:9f:fe:24:b7:65:3d:0a:7a:42:22:ee:00:3b:
fb:89:52:0a:6e:e8:75:79:c1:d3:78:b2:63:c7:19:10:5b:23:
3b:cf:82:38:7e:9c:c8:68:11:18:a5:22:53:7c:d0:cb:6d:0f:
f0:0d:09:3c:af:1a:50:78:94:ef:24:cc:eb:46:03:07:03:93:
06:6d:66:6b:15:c2:d1:48:d7:b1:c1:00:38:a0:e5:c6:e5:3c:
09:b3:96:be:3f:86:26:d3:de:82:9c:2d:f1:c6:36:f9:c1:43:
b1:5d:d8:29:ca:10:6f:39:41:ff:6a:d2:79:9e:da:65:2e:ba:
ff:18:e2:5f:54:74:52:c9:44:b2:75:b6:a2:60:b0:48:5a:03:
ca:ef:04:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:08:57 2025 by rpki-client