Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3CAE59CF47D11EF805E8373762E951A.roa
File: B3CAE59CF47D11EF805E8373762E951A.roa (raw, json)
Hash identifier: UiRJ5MSsbOpCZT9oD9+PBCeHaROelDhCTXa1YdmfQQk=
Subject key identifier: B3:C2:7A:66:D0:76:CC:83:02:1E:20:DE:7E:61:93:76:FB:83:D9:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013765
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3CAE59CF47D11EF805E8373762E951A.roa
Signing time: Wed 26 Feb 2025 20:10:20 +0000
ROA not before: Wed 26 Feb 2025 20:10:16 +0000
ROA not after: Thu 19 Feb 2026 20:10:16 +0000
asID: 984
IP address blocks: 156.247.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79717 (0x13765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 20:10:16 2025 GMT
Not After : Feb 19 20:10:16 2026 GMT
Subject: CN=67bf752c-b04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7d:c2:24:04:90:29:97:04:14:a6:7d:18:75:
be:69:89:03:0f:0e:0a:bc:56:da:e3:b7:3a:ce:b4:
32:d6:b1:cd:bc:c0:c3:82:27:25:c0:22:61:f3:01:
5e:61:19:c0:7a:1a:c1:22:d8:63:56:5e:c2:6b:e5:
c3:3d:7d:70:8d:6d:42:4b:04:03:a2:8b:1a:4e:48:
ef:6e:a5:6d:cf:70:12:50:97:96:a9:00:1d:60:ce:
8f:0b:9d:70:d2:79:76:05:ff:6f:a9:37:fc:ed:92:
7b:30:73:dd:34:24:f4:80:11:83:11:28:e1:e1:3b:
79:10:93:88:0c:c8:35:e3:c8:b0:4c:90:36:8f:6e:
b5:cf:24:d3:b6:dc:cd:b1:21:df:c0:6c:72:fd:75:
e0:f0:5c:b7:19:4b:05:34:4a:66:d9:ef:13:93:98:
5e:6d:6a:c1:d0:79:14:cf:00:79:bf:a6:c1:83:5e:
12:2a:be:ca:d0:18:4e:e4:77:ca:15:59:6d:6c:2e:
0d:0b:0e:94:df:2f:00:4e:02:65:e8:3c:84:85:91:
a5:f0:f0:e5:b6:c1:3d:2a:fc:d9:bb:be:8e:50:ac:
d0:dd:1d:af:3f:61:85:93:11:3b:59:47:2a:31:d1:
98:8a:00:5c:be:c1:f5:5b:17:56:ae:74:57:4d:43:
60:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C2:7A:66:D0:76:CC:83:02:1E:20:DE:7E:61:93:76:FB:83:D9:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3CAE59CF47D11EF805E8373762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.47.0/24
Signature Algorithm: sha256WithRSAEncryption
31:6b:74:7b:4b:d4:b8:96:75:2f:d7:55:c6:c3:c8:bd:90:22:
d4:0f:7f:d3:28:af:d2:c3:56:33:5e:bc:46:d0:a2:de:ec:d1:
08:e1:ca:a7:b7:1c:c0:59:1b:bd:8a:c1:96:5a:ba:47:7b:c4:
07:63:88:56:09:e3:1a:aa:08:3c:61:e7:cd:0e:03:c0:06:65:
9a:c1:33:aa:21:d0:a0:1c:88:d3:5e:5e:57:38:9b:80:fd:83:
4a:84:97:65:2c:21:61:ae:93:b8:00:6b:f3:50:ca:55:32:17:
3b:b0:02:69:0a:76:47:de:f4:20:7c:cc:cf:c9:54:e9:0e:94:
de:36:88:9b:f6:e5:81:6e:52:7d:3f:1d:36:0b:93:85:17:7f:
36:8a:fe:f0:4e:6c:c9:84:0b:36:0c:fc:52:9a:a4:f1:a5:c6:
99:1f:2d:b2:74:61:46:da:39:6d:19:41:01:a8:4d:20:fd:2a:
db:11:22:ef:c8:53:76:e5:89:57:40:5b:8c:50:1e:d1:cb:88:
4c:06:b0:02:bb:03:06:b6:95:cc:2b:a1:77:1f:cc:ad:7b:88:
21:a1:ca:0a:b8:3d:06:c2:4a:49:1e:be:c3:ee:f8:52:c4:32:
85:db:88:46:52:2c:f0:24:fe:07:06:1a:ce:0a:65:a5:4d:70:
6f:67:b6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:43 2025 by rpki-client