Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E33B1526F43811EF8774E893762E951A.roa
File: E33B1526F43811EF8774E893762E951A.roa (raw, json)
Hash identifier: rtrOuCcQkFA3bbb+7Ttttas0nuMHkO9mUcKVJnG2QZo=
Subject key identifier: 57:F8:FD:13:C1:8D:15:6F:B0:74:FD:E8:D7:F9:B3:77:80:E9:C1:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01320B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E33B1526F43811EF8774E893762E951A.roa
Signing time: Wed 26 Feb 2025 11:57:44 +0000
ROA not before: Wed 26 Feb 2025 11:57:40 +0000
ROA not after: Thu 19 Feb 2026 11:57:40 +0000
asID: 984
IP address blocks: 156.252.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78347 (0x1320b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:57:40 2025 GMT
Not After : Feb 19 11:57:40 2026 GMT
Subject: CN=67bf01b8-5346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:18:e8:a9:fe:c5:d5:17:43:bb:2a:7f:a6:
49:b1:dc:d2:ae:24:0c:44:b7:43:dd:cb:73:bc:f9:
23:3c:c3:0b:6e:b9:95:08:25:b0:27:31:ba:01:b2:
8f:31:d7:5f:b6:da:27:aa:34:21:b6:36:1c:12:bd:
a9:31:e5:51:a5:3e:04:76:db:3c:ab:82:b4:6d:fd:
12:69:cd:dd:2f:6c:12:34:f1:c7:30:f1:b7:7d:cc:
a5:5b:48:fb:78:7e:69:fc:2d:a9:70:f5:74:3d:38:
25:8e:5d:fa:3b:13:48:50:4a:ea:57:73:72:14:44:
d6:db:0c:da:a1:1a:37:42:ca:2e:8d:d5:17:75:37:
bf:4f:66:f2:52:9c:04:60:33:fc:23:04:91:9d:3b:
5b:af:27:e7:ba:4b:45:f1:e0:97:38:8d:3d:2f:e1:
ff:62:7a:0b:41:08:27:bf:dc:ed:75:36:c5:b4:48:
f5:93:8c:24:ae:28:61:cd:70:86:ae:06:bd:18:b7:
48:fd:0b:75:d2:f9:9a:76:46:74:0e:a4:55:24:61:
58:f4:38:ea:3a:a1:fe:fa:f2:1b:9d:41:d7:54:21:
d2:bf:da:0b:61:af:21:9e:99:4a:75:22:0d:6f:3a:
f0:c5:11:e4:9d:95:d7:63:0c:d5:e2:da:f3:81:db:
a4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F8:FD:13:C1:8D:15:6F:B0:74:FD:E8:D7:F9:B3:77:80:E9:C1:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E33B1526F43811EF8774E893762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.127.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:7d:b1:6b:e0:50:f8:a5:b8:8b:8a:5c:98:ef:87:5a:1a:cf:
94:7f:6b:73:af:86:bb:7d:5b:9b:5c:4d:c0:48:f9:e0:a5:37:
c3:14:90:c3:87:46:53:b9:2e:53:af:4c:7f:12:2b:3a:53:e2:
85:10:3e:66:12:01:43:d4:a9:5f:69:65:f0:7f:37:29:c4:cb:
8f:9c:f6:02:24:5c:d0:2c:87:df:c9:76:4c:9b:6f:20:25:da:
02:38:5a:55:69:66:cb:47:d4:16:8b:87:78:73:86:d0:b8:96:
71:ea:65:eb:ca:db:ed:54:3c:e3:4f:14:7f:93:d2:b9:b8:4d:
a3:02:6e:a0:08:88:b1:ea:f1:12:97:61:55:6b:6d:b4:61:c8:
5c:c1:37:5f:d9:9d:d8:20:f8:53:ce:b1:96:24:71:18:80:54:
19:3e:cb:8b:85:33:87:17:b2:71:04:15:45:a6:68:ba:b5:d6:
2f:93:f9:00:61:8f:10:6d:4a:02:f9:88:c7:63:4c:77:a8:59:
c8:cf:a6:73:98:fb:4c:2c:dc:55:98:3f:d7:7a:a5:2e:54:74:
c9:ad:09:32:8a:11:23:55:3f:63:ee:8b:be:93:8d:31:63:d0:
51:a9:e8:58:ee:dc:16:1b:81:87:12:a3:c1:eb:bd:50:4d:3f:
6d:4e:7b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:23 2025 by rpki-client