Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D541004AF45411EFB608345A762E951A.roa
File: D541004AF45411EFB608345A762E951A.roa (raw, json)
Hash identifier: AquXSG4z0MXcAjbA4wTcPGsciG4A/yPuMZDrlGXS/k0=
Subject key identifier: CF:99:C4:99:D9:BF:25:AF:9E:D5:CC:29:29:8E:AC:72:69:9E:AA:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01342F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D541004AF45411EFB608345A762E951A.roa
Signing time: Wed 26 Feb 2025 15:17:46 +0000
ROA not before: Wed 26 Feb 2025 15:17:43 +0000
ROA not after: Thu 19 Feb 2026 15:17:43 +0000
asID: 984
IP address blocks: 156.252.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78895 (0x1342f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 15:17:43 2025 GMT
Not After : Feb 19 15:17:43 2026 GMT
Subject: CN=67bf309a-1954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2d:95:70:85:9d:c6:35:2a:8d:ec:18:cd:7c:
0e:49:51:48:ad:41:50:aa:b3:fa:b5:4e:d7:da:9b:
30:c2:6d:db:37:51:5f:da:eb:4f:c7:1d:d8:0c:83:
68:f3:8c:cc:57:94:ac:ae:d6:65:e4:d9:b8:fd:2f:
f4:1d:97:5c:50:85:e3:13:df:b8:d9:5b:bc:c9:87:
e0:3c:af:ba:c7:25:b9:eb:8a:03:54:ca:b7:32:2e:
84:04:cb:ac:10:1b:1e:94:08:db:dc:2b:58:35:cb:
05:cb:77:32:7a:49:5d:f0:cb:ef:ba:e1:fb:72:2b:
1c:fe:05:15:1d:0e:e9:98:06:4e:34:b0:f8:d2:b6:
c2:f6:4c:12:70:3d:4e:98:0d:b6:f5:be:dd:ea:8b:
7e:00:ba:5e:26:5b:9d:2d:9a:9d:27:01:a6:17:39:
a4:3b:f6:3a:26:8c:5a:6c:84:ad:f8:0b:db:85:59:
5e:44:f5:30:7d:e8:f6:5c:91:cb:3d:f3:8f:b4:62:
b2:99:9f:e3:90:e8:4f:2f:36:ae:e3:d2:82:21:af:
b9:71:1d:d8:2e:82:a0:45:8b:de:db:c2:7a:c1:d7:
b6:6f:ef:55:4e:9b:7c:41:53:5a:14:05:b0:4d:c1:
24:88:85:cb:c8:43:43:7b:62:b2:ec:58:54:a7:06:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:99:C4:99:D9:BF:25:AF:9E:D5:CC:29:29:8E:AC:72:69:9E:AA:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D541004AF45411EFB608345A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.210.0/24
Signature Algorithm: sha256WithRSAEncryption
96:48:de:1c:4b:69:b4:bd:1d:c6:69:de:3f:8d:f9:55:1e:1d:
f6:34:87:b4:50:19:c3:04:69:fd:f4:7e:58:9d:f5:a7:60:71:
a4:29:9a:4f:37:82:3c:eb:b1:df:da:08:2e:e2:6a:9e:65:89:
33:a3:6a:7b:ba:d5:5b:1d:7c:b8:d6:37:a1:a3:a9:42:9a:de:
fe:fc:d7:a8:99:7a:ce:5d:af:89:c6:d8:49:b5:1e:7d:c5:a4:
50:43:ed:87:5a:40:76:57:71:67:2e:a2:e5:18:0b:69:ae:b9:
7c:77:9f:31:bc:03:7a:ff:4a:15:8d:8a:57:e9:5d:ed:a3:8b:
5e:2b:7b:4c:97:c6:47:d9:1a:0e:2f:62:91:8a:e4:e6:bf:00:
c5:c4:9d:24:63:d5:f3:08:77:53:f9:ea:16:50:43:fe:5c:81:
14:42:9c:6d:ce:5f:2d:c9:81:55:35:5c:84:cb:59:8e:48:36:
5a:ac:7e:80:de:6f:47:f4:27:2e:59:04:2d:dd:3d:52:a7:06:
5c:34:50:22:ee:70:f0:89:77:e5:79:15:f7:dc:be:02:c6:54:
c3:a7:e8:c2:3f:06:3e:13:6f:a5:e6:de:11:a7:99:21:20:3e:
73:9f:0a:ef:77:66:5e:b5:49:2c:68:3e:90:c7:5c:6e:77:00:
e5:e8:5c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:42 2025 by rpki-client