Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D213A956088911F086859366762E951A.roa
File: D213A956088911F086859366762E951A.roa (raw, json)
Hash identifier: KoSxpAgEbH5nkZyuYNSt0CxLGWigcWC5a9mY3o6hNN8=
Subject key identifier: CD:10:2D:0B:BB:92:E0:C7:22:3F:3F:FF:F6:C9:FE:73:25:82:0D:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D213A956088911F086859366762E951A.roa
Signing time: Mon 24 Mar 2025 08:27:28 +0000
ROA not before: Mon 24 Mar 2025 08:27:24 +0000
ROA not after: Tue 29 Apr 2025 08:27:24 +0000
asID: 20473
IP address blocks: 156.231.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83930 (0x147da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 24 08:27:24 2025 GMT
Not After : Apr 29 08:27:24 2025 GMT
Subject: CN=67e11770-5656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:79:98:b8:fe:54:58:14:15:30:00:ed:6f:7d:
3c:75:77:50:8c:a4:6b:8f:83:79:7e:81:29:76:42:
f2:9e:3a:f4:e9:6d:1a:e1:8e:e0:48:eb:a5:10:dc:
d6:4b:20:5a:ad:a8:5c:af:d0:00:0a:c1:e3:d3:ec:
18:62:88:b7:e5:0a:e1:d4:dc:cc:3c:94:15:95:3e:
f0:60:30:5a:84:94:61:b1:d0:92:b4:e1:af:ef:34:
0b:ad:14:94:cd:af:1e:97:6b:1f:02:d2:99:6e:57:
f6:53:e4:18:f0:65:f8:4c:a6:d8:41:7a:40:ca:8d:
e0:e7:4c:48:f1:c2:76:7f:9e:7a:23:81:6c:08:c4:
00:3f:c3:65:ef:de:84:87:f3:2f:82:95:88:10:25:
86:bd:0d:a3:94:f6:22:37:a4:0a:8e:68:be:14:54:
b4:44:2c:39:d9:c9:6a:66:b8:49:48:81:76:08:b1:
69:e1:44:f0:38:41:6f:4e:33:61:e2:86:17:45:db:
83:c9:71:84:b7:54:07:6e:f5:cb:0f:2d:d3:fd:f6:
08:70:6d:99:bf:a2:55:2d:b1:30:5d:40:e4:cd:bf:
a1:60:55:76:c3:c9:05:fa:8d:29:7e:2e:26:1b:70:
0f:e8:d4:a5:3e:b2:6f:92:61:42:b4:7a:67:2b:65:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:10:2D:0B:BB:92:E0:C7:22:3F:3F:FF:F6:C9:FE:73:25:82:0D:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D213A956088911F086859366762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.165.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:90:e4:ea:e7:ff:a4:7e:cb:7e:b6:ef:48:68:69:12:3c:37:
08:ae:de:3c:49:e7:9f:6d:c4:9c:3d:b0:2b:53:06:bd:4f:1a:
56:01:49:84:f3:3b:a5:db:fa:39:e2:29:86:b8:1d:44:86:88:
27:50:e2:e5:a2:57:dd:3b:e3:32:ed:7e:ac:a3:b2:07:e8:db:
ee:fe:66:60:c6:64:b7:9d:92:00:6f:57:3b:71:d5:7c:04:7b:
e0:8e:6b:37:d3:cc:49:10:92:f9:91:82:d4:c1:d5:83:76:c1:
26:30:ac:a2:39:ad:c2:33:6c:f2:95:5f:52:7a:11:2a:5a:41:
d0:8c:10:71:8f:e6:dd:62:8b:e6:cb:25:8b:2d:d7:32:fb:ea:
31:87:cd:1c:2f:ad:99:bf:76:4d:be:85:a3:cc:af:d2:1b:b9:
73:b9:f0:48:f8:20:0b:51:e3:90:9b:ff:ed:21:4f:d2:6f:d3:
d2:ec:72:ab:3a:44:67:a9:50:85:71:3c:51:82:fb:4f:62:8a:
c7:23:7b:b8:8c:c3:3b:16:a9:09:99:52:e0:81:a6:30:57:ca:
70:2e:5b:12:b4:0d:5b:fa:a9:0e:cf:01:fd:c7:d4:d5:5d:45:
f8:29:2c:11:33:06:c5:d0:fd:86:eb:d8:67:25:8e:7f:80:6e:
61:ff:60:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:58 2025 by rpki-client