Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3E627D0F44B11EF9E5A9899762E951A.roa
File: B3E627D0F44B11EF9E5A9899762E951A.roa (raw, json)
Hash identifier: f4dOsluRTQJpqXbJLAxMquyB5ht44T5UNYiDNWMkHOc=
Subject key identifier: F7:DA:06:DC:A0:D2:F5:9B:48:7E:8C:5F:F2:02:19:DC:89:2E:50:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01339C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3E627D0F44B11EF9E5A9899762E951A.roa
Signing time: Wed 26 Feb 2025 14:12:25 +0000
ROA not before: Wed 26 Feb 2025 14:12:21 +0000
ROA not after: Thu 19 Feb 2026 14:12:21 +0000
asID: 984
IP address blocks: 156.252.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78748 (0x1339c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:12:21 2025 GMT
Not After : Feb 19 14:12:21 2026 GMT
Subject: CN=67bf2149-01c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f0:1e:6f:ff:90:b5:3a:5d:68:b1:1d:59:0d:
cf:05:ca:46:81:c5:88:84:93:39:f9:b7:c2:97:99:
40:56:5e:f2:cb:9f:53:a0:0f:13:41:00:05:5d:ce:
62:58:aa:ac:df:bf:01:96:bd:e7:79:3c:d5:b5:b4:
60:f6:87:fe:f7:09:14:c8:7e:70:10:7d:95:65:65:
28:fb:73:d7:e9:41:d5:09:78:ea:2e:a0:92:36:76:
50:90:17:da:b8:bd:45:6d:78:ad:10:5c:df:85:c6:
56:be:ae:71:df:b8:73:27:19:dd:a2:90:fe:c8:43:
18:5f:c1:52:dc:e4:7e:ec:8f:4c:34:e4:58:df:67:
38:a9:b9:59:df:04:15:e2:24:38:8c:6c:3f:48:6b:
54:d0:21:2c:96:67:01:e5:a3:66:5e:8d:10:a6:a7:
0d:bc:29:e9:32:86:87:7f:92:8c:b7:f0:8d:e0:c1:
8d:58:90:37:3d:75:0a:22:b4:0c:9f:59:27:1e:77:
87:d3:7b:c6:f9:44:20:41:7c:dd:5f:54:ef:cd:ed:
18:ed:a9:58:c9:8e:34:a4:78:58:87:0e:71:3d:b8:
16:bc:3d:32:bd:c0:40:60:cb:35:87:ea:1f:37:a4:
04:df:8d:03:bd:c7:d8:38:86:e3:8d:5c:9f:7c:10:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DA:06:DC:A0:D2:F5:9B:48:7E:8C:5F:F2:02:19:DC:89:2E:50:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3E627D0F44B11EF9E5A9899762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.186.0/24
Signature Algorithm: sha256WithRSAEncryption
26:5b:dc:4c:8a:59:11:50:73:5b:16:0e:b3:21:36:47:7a:3a:
ab:be:21:7b:e9:9a:50:2d:c2:8e:dd:61:a5:16:e0:9b:ea:89:
56:a7:be:c7:b4:5e:d4:c6:20:8c:ee:8c:36:3b:7b:1b:a5:35:
94:6e:5d:b7:d8:ba:86:6f:4a:1a:d7:66:63:3a:9b:22:83:55:
ea:64:18:24:4a:1f:0f:28:a6:95:ce:4e:18:dc:56:a4:7b:66:
d0:27:f4:a1:c0:d3:46:b6:fb:8d:6c:03:bf:c8:78:84:0f:96:
68:88:7d:f4:f3:69:88:d4:51:39:f6:24:3e:a4:44:22:03:41:
51:33:9b:33:f8:1a:a0:3e:07:fa:b7:4f:6c:fe:da:de:44:5b:
c5:db:85:44:60:11:54:ff:14:22:09:ae:6d:4a:b9:f2:e6:57:
7b:26:75:5e:31:5e:56:11:9d:15:99:aa:56:5a:b1:91:98:7b:
77:d6:0f:16:de:ff:35:c6:8a:cb:df:e0:e8:84:d4:9d:4d:71:
7b:da:4b:a2:c1:da:6f:42:de:46:aa:cc:9f:5d:60:f2:f6:30:
f4:69:52:8a:6c:94:2e:8c:74:b2:57:7f:e8:cf:b4:e0:2e:08:
b9:9b:d7:a2:4c:8b:aa:b6:b5:db:e9:82:20:ba:6e:7e:f6:a1:
a6:75:a4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:32 2025 by rpki-client