Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD296288F42B11EF961C43B6762E951A.roa
File: AD296288F42B11EF961C43B6762E951A.roa (raw, json)
Hash identifier: Qgvoy1fdFxjd5/FS+7J/2246a67647Gp4FhkgyZGPdE=
Subject key identifier: 2E:82:20:A6:84:41:F0:E4:90:A6:E5:10:4F:2F:B7:75:E1:7F:CD:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD296288F42B11EF961C43B6762E951A.roa
Signing time: Wed 26 Feb 2025 10:23:10 +0000
ROA not before: Wed 26 Feb 2025 10:23:06 +0000
ROA not after: Thu 19 Feb 2026 10:23:06 +0000
asID: 328608
IP address blocks: 156.255.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78075 (0x130fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:23:06 2025 GMT
Not After : Feb 19 10:23:06 2026 GMT
Subject: CN=67beeb8e-769e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:ea:c6:10:c5:9d:2c:58:26:df:7f:d9:d6:
b7:f7:34:89:1a:94:a7:e2:30:cc:58:04:7d:48:fe:
7b:70:ce:ff:b7:1d:51:2f:c2:fb:24:15:70:eb:d5:
e8:4f:94:f0:d2:05:6d:11:81:b7:23:a4:4d:58:20:
9e:2a:ec:3f:e2:70:f8:99:39:36:60:0a:a4:7b:3a:
14:ca:8a:cc:a6:80:54:1d:b2:9a:7d:f2:56:f2:fc:
e7:a4:96:af:e7:22:03:74:b0:5d:6f:83:49:6e:62:
c8:eb:6f:29:0f:68:f7:d1:79:06:31:93:fe:0e:97:
4b:52:5e:f4:91:c9:d9:b8:8f:e9:7b:74:ad:6c:32:
90:54:2f:3e:5b:e3:25:9f:2f:f4:6d:03:83:00:e9:
82:89:ab:b8:86:90:b5:19:d4:fc:1d:1c:34:a3:b9:
d9:c2:d3:fe:ad:1c:48:f7:22:0d:68:a5:53:81:1c:
c0:d3:db:70:de:39:74:f0:b9:65:e0:ef:9d:9a:ba:
84:78:dc:e7:08:2c:ed:31:c2:d8:ad:0f:c3:56:0b:
84:36:3f:a7:3a:d6:89:9b:25:a1:5a:8b:1e:c0:16:
14:b9:5a:ad:bc:c5:f3:b9:ef:f6:2b:e0:94:57:50:
dd:7d:da:e6:35:9d:6b:0f:df:27:30:76:a1:c1:76:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:82:20:A6:84:41:F0:E4:90:A6:E5:10:4F:2F:B7:75:E1:7F:CD:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD296288F42B11EF961C43B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.78.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:6a:14:2a:13:f5:b6:50:19:61:0e:24:28:54:3c:c3:2e:56:
6c:e5:1a:ae:f6:3c:bd:3d:18:8b:23:73:19:83:da:34:7b:d4:
04:f8:07:c9:fb:27:40:5c:da:bc:53:bc:af:aa:8d:80:b7:de:
af:a4:16:70:6c:19:d7:80:e9:39:0f:80:e3:f2:18:9c:f0:31:
ca:d3:05:e4:84:23:6f:80:35:d0:9a:4c:8d:5a:3f:e1:9c:cc:
e8:ef:05:d5:06:91:46:95:b3:08:d3:7d:0d:e4:fa:0a:99:84:
26:77:aa:91:99:8d:57:04:44:42:ba:6f:6e:80:b2:24:f3:d2:
af:24:7d:a8:12:8d:12:f4:ac:d7:14:2a:b2:60:20:93:da:76:
61:03:23:53:84:46:f2:6f:18:68:21:b9:94:3e:aa:90:05:9c:
08:88:c0:b6:1e:f8:da:a8:1e:ce:af:eb:f1:24:e9:77:69:67:
f1:a7:b4:b0:dc:39:68:ef:f4:3a:8d:9a:2b:b4:31:a9:db:e2:
ab:a1:73:27:60:e5:0b:d0:09:1d:b6:80:20:6c:18:2c:b4:f0:
4e:3f:48:a3:1f:c0:9a:aa:29:d7:3f:bf:81:00:ed:b5:2f:9e:
be:6f:09:7f:a1:23:e1:e2:5f:48:29:8d:63:30:7a:b2:e5:6b:
87:52:a7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:39 2025 by rpki-client