Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A15C469EF47811EF9D15A251762E951A.roa
File: A15C469EF47811EF9D15A251762E951A.roa (raw, json)
Hash identifier: B3DPknR7n0UxkPZ2/55tNkG4T0kdkeoV9NjHCCrY33w=
Subject key identifier: 71:BE:43:41:19:A2:A1:83:F5:72:3C:22:EE:16:13:E5:97:78:7D:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013717
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A15C469EF47811EF9D15A251762E951A.roa
Signing time: Wed 26 Feb 2025 19:34:01 +0000
ROA not before: Wed 26 Feb 2025 19:33:58 +0000
ROA not after: Thu 19 Feb 2026 19:33:58 +0000
asID: 984
IP address blocks: 156.247.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79639 (0x13717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:33:58 2025 GMT
Not After : Feb 19 19:33:58 2026 GMT
Subject: CN=67bf6ca9-38f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:5a:9a:84:77:91:cc:a7:00:48:de:96:46:
85:af:1b:43:36:85:8b:9a:97:d9:d5:ea:61:6a:6e:
85:49:3a:20:3c:d0:bc:3a:b5:6a:dd:61:65:c3:8c:
e2:60:5c:08:f3:3e:1e:78:d6:fa:f4:ec:b7:8b:5b:
12:3b:3d:8e:eb:27:d6:7f:47:e6:5c:ce:b4:ed:44:
cf:82:0b:b3:70:d6:87:b1:a6:85:06:8e:5a:55:5d:
4f:29:b2:b6:be:f2:58:f7:09:e7:04:82:db:de:fb:
8e:e0:ae:88:32:61:71:53:ac:d3:df:99:67:7c:f8:
ef:f9:7f:0a:f4:63:e9:e8:33:8f:08:5f:db:f0:8e:
a0:bc:26:60:b7:08:9c:f2:e7:dd:54:de:1f:95:02:
53:11:60:a3:a5:c4:82:40:59:d2:d6:d2:7c:0c:1d:
17:59:10:a3:9c:26:e0:77:26:b7:48:f3:82:ce:ae:
8f:5b:10:82:cc:82:5e:53:56:74:71:e2:45:7f:f5:
f9:9b:ab:db:87:24:ad:3a:c6:cc:64:8e:94:58:cd:
3f:14:b8:6d:2b:c3:44:2a:3e:de:e5:e8:a3:a1:e8:
8a:73:6c:4d:94:de:dc:b3:ea:8d:0d:33:e6:66:f5:
63:25:24:4d:bc:6d:48:2a:d5:47:30:9f:3d:40:5e:
0d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BE:43:41:19:A2:A1:83:F5:72:3C:22:EE:16:13:E5:97:78:7D:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A15C469EF47811EF9D15A251762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.34.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:af:37:79:49:0f:ed:ac:d4:6c:89:83:f4:e3:2f:be:48:ce:
c3:24:bd:c9:13:d6:d5:04:b4:64:b0:a7:23:67:bc:0a:9e:d1:
47:fe:5f:da:68:cf:a7:05:12:b9:ad:c2:c9:d1:f5:7d:a4:25:
0d:f1:02:8e:aa:c4:9f:3d:64:53:8c:87:a4:36:b8:4a:25:e7:
87:14:ed:e1:08:60:6f:3e:0a:d4:81:e1:46:74:a7:3d:87:1e:
06:9f:05:ed:43:15:a2:73:16:db:99:37:c5:0a:2d:28:41:fe:
7f:ac:27:26:9d:80:d2:66:fd:0f:71:a5:4d:9f:e2:d8:b9:cb:
90:56:31:40:4c:6d:d7:58:c4:16:48:2a:71:7e:96:78:ca:00:
77:f1:63:65:cc:e7:73:53:d1:39:d1:54:72:eb:b7:31:07:bb:
54:86:ce:60:85:bf:4d:92:e8:dc:56:d8:1d:1b:9d:12:99:bb:
67:30:5b:9d:09:6c:29:43:6d:e9:0b:ef:66:fd:3f:77:1c:d0:
8c:85:da:a3:d3:e4:87:52:f0:a9:e4:f0:ce:f8:09:fd:e3:01:
6c:4e:c1:28:d6:e6:42:d3:ad:91:e4:c1:9d:9f:29:fb:82:bd:
80:8a:47:6b:29:cb:9f:b0:a2:d9:ab:e6:d8:04:0b:68:87:8b:
d4:e9:e5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:28 2025 by rpki-client