Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAFFEB4EF44F11EF9D8D9FB6762E951A.roa
File: EAFFEB4EF44F11EF9D8D9FB6762E951A.roa (raw, json)
Hash identifier: 3CmUEgIt8LFxAx82F7JLcDt9+BEef1zTFf3O0CB3Dq8=
Subject key identifier: 51:8F:B7:6D:58:4C:83:F9:68:E7:9F:CE:7E:19:16:65:BC:B7:53:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0133E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAFFEB4EF44F11EF9D8D9FB6762E951A.roa
Signing time: Wed 26 Feb 2025 14:42:35 +0000
ROA not before: Wed 26 Feb 2025 14:42:32 +0000
ROA not after: Thu 19 Feb 2026 14:42:32 +0000
asID: 984
IP address blocks: 156.231.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78817 (0x133e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:42:32 2025 GMT
Not After : Feb 19 14:42:32 2026 GMT
Subject: CN=67bf285b-bed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:6b:f6:54:86:de:7a:48:38:a0:a6:1b:5b:
71:9e:b8:d2:90:d1:0d:e9:1e:82:8b:20:34:7c:23:
a2:0d:9a:6d:af:57:e6:d5:1f:4d:23:2a:a3:a4:66:
ac:b9:cd:8f:dc:55:19:21:25:05:67:9b:f1:87:3c:
69:76:d8:a0:b7:29:6b:d8:e2:ad:85:b1:32:3c:39:
2e:74:62:fc:8c:8a:50:9f:33:a8:a5:1d:a0:0f:15:
c5:1f:be:83:f3:b9:d9:53:58:6d:8f:e2:a2:fc:63:
5d:9b:f2:49:ca:08:c9:b8:8e:95:15:75:5d:99:1a:
78:b7:50:e6:c5:ca:9b:87:08:27:06:17:fc:95:4d:
ad:34:54:7a:30:8d:0c:95:59:41:9b:8d:2f:29:2b:
8e:3b:60:86:89:54:b6:7f:68:5e:77:d9:63:a7:7e:
f0:da:82:01:f6:d3:1e:a4:18:04:7b:6a:e4:bb:9a:
10:7b:1e:66:8a:c6:5a:ae:00:ff:f6:d2:74:63:57:
70:01:7c:4d:5d:94:15:c7:4d:8a:ac:c4:62:c6:97:
20:21:1f:75:6e:eb:70:5c:ce:76:18:4b:fc:00:a4:
ed:c6:53:bd:60:5c:d6:6c:e3:7d:0e:88:67:ba:ac:
04:44:a1:b9:14:4b:98:4a:36:98:06:97:70:1e:18:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8F:B7:6D:58:4C:83:F9:68:E7:9F:CE:7E:19:16:65:BC:B7:53:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAFFEB4EF44F11EF9D8D9FB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.192.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:91:91:9b:6d:4b:02:ee:89:85:71:9b:5a:77:59:12:81:34:
6b:9c:44:10:17:8a:83:67:bf:17:24:40:e9:f6:e4:86:51:ea:
46:a9:38:de:96:f8:f0:2c:a7:e3:a3:7a:d5:98:bb:ed:75:29:
62:3a:7f:4c:93:50:88:e0:c8:53:5c:46:b3:fd:c9:61:48:74:
0f:e6:e5:f7:f7:a6:5a:6c:46:2c:e4:64:0b:ec:c4:d9:58:a2:
1f:2f:5d:d8:aa:be:5b:15:8e:e1:3c:bb:46:96:6f:3a:c6:c9:
03:09:10:32:78:dd:96:b5:8c:7b:e7:ef:e4:d3:16:fc:c2:d6:
2b:c3:4c:07:99:6b:77:60:c3:32:c8:2c:43:52:90:73:1b:e0:
4c:87:6a:8c:27:82:c5:76:06:18:c2:17:1b:ca:47:5f:ee:02:
f6:46:d6:25:78:32:bf:2b:aa:da:67:3a:0f:16:81:a9:b5:1e:
93:9f:2d:2b:fd:5d:5f:ee:0d:a6:bf:70:7c:be:dd:2a:22:f4:
a4:34:50:88:15:60:66:45:fa:70:d9:ab:fc:61:14:ad:d1:89:
25:42:0c:0d:59:49:07:f2:a0:1d:15:9f:ed:39:0d:a4:34:0c:
b6:52:9b:0f:ed:57:d4:f8:f2:b4:33:5a:56:b6:3b:3f:9f:6c:
33:d7:76:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:01 2025 by rpki-client