Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0A0A006F42A11EF8A3046AF762E951A.roa
File: D0A0A006F42A11EF8A3046AF762E951A.roa (raw, json)
Hash identifier: Wh83Dwy2swdV4vSczcKf6sjp/HRNFtx5hOVkYU78cQs=
Subject key identifier: 62:0B:9B:5C:3C:19:3F:2E:B5:9A:C2:34:6D:7B:79:B7:96:3F:87:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0A0A006F42A11EF8A3046AF762E951A.roa
Signing time: Wed 26 Feb 2025 10:17:00 +0000
ROA not before: Wed 26 Feb 2025 10:16:56 +0000
ROA not after: Thu 19 Feb 2026 10:16:56 +0000
asID: 984
IP address blocks: 156.252.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78053 (0x130e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:16:56 2025 GMT
Not After : Feb 19 10:16:56 2026 GMT
Subject: CN=67beea1c-b373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:c4:c8:42:99:5f:9d:e9:10:c4:ef:e6:3c:
67:ad:df:23:be:b8:08:d1:f0:26:d9:53:7e:ec:45:
d0:01:35:e3:b6:70:1d:9d:9f:77:9f:0b:13:e7:14:
3e:95:f4:11:c6:33:39:66:5c:48:e0:81:15:0a:e8:
72:04:ba:a4:33:2d:dd:95:18:89:0f:6b:3c:5a:e4:
9b:37:c3:45:7a:53:65:f2:70:f5:0f:d8:f2:0e:ca:
e9:44:3e:88:bc:d3:5a:05:50:ef:a1:57:1d:bb:3f:
9f:2f:04:fe:5c:ad:0e:c9:61:72:b8:dd:d6:4c:cf:
b0:4d:b5:64:b7:76:cf:79:ca:56:e2:91:0a:bf:5f:
08:24:94:81:5c:11:cd:4c:a6:74:3f:41:f6:a2:17:
12:a3:70:7d:13:1a:33:f3:07:3b:2d:a1:13:cf:b4:
23:22:0e:4d:31:2c:b3:10:28:66:aa:2e:71:32:5e:
30:df:c1:a8:ba:4a:3a:dc:88:25:c5:3d:43:80:93:
1c:3f:ca:66:88:3e:e7:18:62:09:30:a9:98:0e:0f:
67:f7:28:93:0b:bf:e4:a8:8b:93:99:4c:fb:d8:6a:
1f:f7:49:dc:e0:2a:79:48:db:d4:1c:18:db:bb:e9:
02:f7:41:e1:37:7e:93:fe:09:91:59:3a:66:b6:49:
f8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0B:9B:5C:3C:19:3F:2E:B5:9A:C2:34:6D:7B:79:B7:96:3F:87:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0A0A006F42A11EF8A3046AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.82.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:d6:49:db:88:10:ea:8b:2b:d0:b3:5c:14:99:05:4d:a2:2a:
4b:f9:f6:29:c3:90:a7:32:68:d0:d5:e4:94:f9:a4:57:a8:59:
b0:df:12:da:3a:0b:d3:cf:fc:fa:25:a6:81:79:ec:54:23:20:
a1:74:85:b9:1b:33:59:00:87:26:37:58:46:11:05:a8:7b:dc:
5e:77:63:fa:dd:04:3d:7f:5c:40:5f:06:c9:07:83:ba:ba:0e:
8d:8c:e0:61:b9:a9:5b:7d:6c:81:46:63:db:fa:81:49:b1:98:
3e:02:69:7a:79:d6:3c:dd:e3:55:d6:ce:06:66:4d:5b:04:7c:
ea:ec:ff:2b:39:dd:ac:4e:e8:b4:88:d4:ca:9e:65:91:fe:db:
b0:b8:65:3e:ad:6c:ea:23:e4:3d:4d:c5:b3:a8:50:b8:24:83:
d7:a7:d5:29:05:50:23:27:f0:68:a4:41:ab:2a:44:10:37:33:
1c:39:78:60:51:05:1a:34:58:36:03:d0:e3:2c:5a:9b:73:4f:
de:24:a1:94:53:77:5a:f1:e0:cc:69:12:ee:a5:ca:d4:88:0c:
dc:3f:ed:bc:d8:f4:bc:92:3c:ee:3f:47:47:90:b4:33:a3:c7:
38:dd:18:c0:62:66:b4:e5:89:51:f0:83:12:be:7d:55:24:44:
47:ea:9e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:00 2025 by rpki-client