Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C483A156F4A211EFB014666C762E951A.roa
File: C483A156F4A211EFB014666C762E951A.roa (raw, json)
Hash identifier: D+jno9oja8mb8ux19hMMYZXYWQIXUxh1QhT/7kwTDbw=
Subject key identifier: 7B:BC:E7:C0:AE:BE:17:AD:3D:27:6A:55:D7:D5:DF:8F:5B:A6:CD:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01387D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C483A156F4A211EFB014666C762E951A.roa
Signing time: Thu 27 Feb 2025 00:35:39 +0000
ROA not before: Thu 27 Feb 2025 00:00:35 +0000
ROA not after: Thu 19 Feb 2026 00:00:35 +0000
asID: 984
IP address blocks: 156.232.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79997 (0x1387d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:35 2025 GMT
Not After : Feb 19 00:00:35 2026 GMT
Subject: CN=67bfb35b-5ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:2b:c7:32:92:8b:a6:c7:67:82:e1:f8:a2:
71:88:ad:bb:6e:7f:79:ca:36:f1:1e:d7:6f:96:05:
10:ea:f0:5a:42:cb:21:4c:b0:7e:89:40:da:74:08:
62:e2:8a:f8:84:b0:da:0f:09:50:86:b8:92:7c:b0:
af:5c:f1:0b:90:77:ad:de:a2:20:ba:c6:e7:26:1b:
6d:6c:5c:f8:92:33:56:71:4e:c9:48:0c:bd:19:9f:
4e:87:0d:64:10:32:fb:2d:53:f3:03:37:6a:0f:5a:
3d:1f:ef:2f:27:b9:fb:ea:c4:62:5b:9e:50:6c:c0:
c0:a4:09:d5:08:5b:e6:0e:00:66:00:1b:15:78:93:
48:c1:67:b2:a5:35:ed:74:50:05:c8:97:8f:32:a3:
91:59:3e:d5:30:e6:3e:aa:f9:cc:99:66:62:23:b6:
5c:6e:c6:ea:a1:1e:1e:c4:8f:38:cb:7f:2c:d3:f1:
d7:da:e2:fb:32:ab:d7:a2:0b:fb:79:53:2f:72:34:
b9:67:72:8f:4a:fc:02:41:ad:47:4e:87:6b:2b:f2:
d2:7f:c4:41:cd:d4:1a:23:95:7e:3d:79:75:fb:ac:
c5:a3:ca:18:e4:a6:ee:fd:99:70:98:c7:93:1c:9d:
06:8b:19:31:a3:1f:6b:8a:6f:92:ef:18:cb:e2:c5:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BC:E7:C0:AE:BE:17:AD:3D:27:6A:55:D7:D5:DF:8F:5B:A6:CD:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C483A156F4A211EFB014666C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.68.0/24
Signature Algorithm: sha256WithRSAEncryption
58:fb:48:36:5f:09:89:95:5b:23:9d:9e:f4:a2:bd:e4:8a:02:
cd:98:9c:ce:e5:68:bb:cf:5d:cf:ca:8c:a7:23:a2:e1:6c:c0:
3d:53:8a:7c:93:89:70:c5:db:a5:63:b6:2c:db:36:9f:40:b8:
4b:19:e5:96:c1:76:b4:ae:dd:a8:a4:cc:5d:3f:b2:be:45:73:
0c:34:a6:41:9a:06:02:0b:50:ee:34:18:3c:8b:1e:9d:30:31:
43:2a:e6:a7:44:5e:85:07:3f:38:2a:db:74:f6:88:1f:c4:aa:
cc:dc:1c:98:b3:c6:bb:9c:96:3a:ae:39:ab:50:be:d0:d2:2a:
e5:4a:8d:7b:5c:67:5c:ce:15:d9:eb:eb:ed:66:57:92:5c:b0:
60:4e:26:ce:60:f4:44:08:74:d2:a2:9f:02:e6:77:6f:bb:92:
fa:08:bf:88:f8:7d:1b:7b:a5:d3:98:29:61:36:51:f1:8e:5b:
c9:f0:e9:ed:09:14:71:61:31:8d:dd:42:5f:b9:7b:7d:91:a8:
ff:6a:83:20:2c:14:40:72:cc:d0:78:2c:ff:6e:49:90:9a:61:
76:c6:00:26:a0:8d:79:6c:55:da:3d:f9:58:61:6b:84:c6:ea:
b1:d0:40:a0:6b:0c:4f:6e:b2:23:26:99:7f:1e:29:f0:72:84:
d4:21:f7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:08 2025 by rpki-client