Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D34B69FEF45611EF9ED50E68762E951A.roa
File: D34B69FEF45611EF9ED50E68762E951A.roa (raw, json)
Hash identifier: mMJ6zTK8/KW8mI5xW1zRH0Kk4sGgkhLEbpnYk1vsfBc=
Subject key identifier: 33:87:C1:13:97:74:92:49:AB:AA:18:81:3F:36:45:50:4A:EB:BF:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01344F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D34B69FEF45611EF9ED50E68762E951A.roa
Signing time: Wed 26 Feb 2025 15:32:02 +0000
ROA not before: Wed 26 Feb 2025 15:31:59 +0000
ROA not after: Thu 19 Feb 2026 15:31:59 +0000
asID: 984
IP address blocks: 156.231.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78927 (0x1344f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 15:31:59 2025 GMT
Not After : Feb 19 15:31:59 2026 GMT
Subject: CN=67bf33f2-551b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9a:22:7e:b7:a3:69:e7:76:69:4f:a4:cc:1e:
47:11:89:c4:bf:59:47:45:b4:73:57:a1:83:e0:71:
d8:8a:63:75:46:8c:cb:e7:e8:cf:51:e0:61:3d:ac:
76:52:39:96:90:34:a5:cc:91:e1:5b:a3:f5:0e:ea:
ab:8a:ec:d3:ed:8d:02:2a:89:32:15:9a:82:47:13:
cd:0b:dc:25:41:e4:36:5b:5f:39:7b:01:97:f5:30:
3d:77:1a:7c:be:a6:31:b5:b6:ea:c0:bc:a9:41:08:
dc:7b:0a:58:8f:3e:25:87:06:47:41:e9:bd:b2:63:
82:7e:f5:db:9f:f4:4e:c6:39:d4:77:01:f0:29:b5:
f8:bd:1c:8e:51:59:78:c1:12:5d:c3:f1:12:b6:85:
22:23:03:e4:ee:8a:46:e8:6d:b8:e3:35:c9:4c:ad:
56:67:f6:b1:8c:74:a2:10:1e:78:7f:1b:60:33:e9:
02:44:d0:f4:a4:c5:d7:18:c9:8c:d5:5d:6d:6e:fb:
16:9f:81:42:8d:80:25:35:87:98:38:fb:f5:0f:ee:
25:4e:6c:51:f2:12:0e:a5:ef:37:08:45:e4:c9:3a:
95:6d:d3:9d:66:84:b9:4f:10:82:50:13:2b:a8:da:
25:c1:65:fd:a3:02:39:3e:05:40:89:3f:20:14:f4:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:87:C1:13:97:74:92:49:AB:AA:18:81:3F:36:45:50:4A:EB:BF:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D34B69FEF45611EF9ED50E68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.212.0/24
Signature Algorithm: sha256WithRSAEncryption
45:78:b8:b6:3e:5e:a1:c9:2f:b2:bd:30:cc:9f:fd:9a:a0:42:
b0:d0:de:88:e0:21:35:71:d1:0a:9d:92:46:e4:df:04:dd:b7:
af:1e:c2:ac:5a:a5:a4:cc:68:3e:2f:45:70:42:ed:90:e9:d6:
83:47:fb:92:f0:39:25:1a:00:14:c7:82:06:6b:db:8f:ab:97:
11:d4:c9:36:18:f4:cc:8f:fc:d3:3b:4c:f2:e2:fe:e2:0e:1b:
f3:6c:fe:20:b2:89:06:b6:63:c5:4d:ba:bf:6b:87:62:ac:6c:
ed:c0:d1:5b:2f:bc:52:c5:f5:92:5f:b7:54:4a:60:9b:1d:87:
94:fc:2c:1e:42:a2:41:f0:c8:3e:30:9f:7b:e9:02:c8:c2:37:
35:d2:ee:c5:6f:76:7a:2d:f2:01:2c:43:c9:7a:a3:c2:21:b2:
7d:57:f2:8b:6a:1d:d7:19:d0:c2:84:84:5d:8e:66:98:cd:2e:
32:fe:bc:c3:b8:ad:44:a9:7d:e2:23:2e:71:00:69:83:1e:9b:
b3:75:5e:bd:49:f4:55:e9:2b:da:0b:bc:da:be:ba:35:14:ff:
db:d9:63:91:87:1d:43:25:0f:30:de:35:8b:c4:a9:30:fd:ad:
ac:3e:b6:11:68:06:12:61:09:63:68:c6:46:33:ee:90:62:41:
99:25:8b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:52 2025 by rpki-client