Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB1F1156F42511EFB88AEA8D762E951A.roa
File: EB1F1156F42511EFB88AEA8D762E951A.roa (raw, json)
Hash identifier: QH0L7RdgvNKqc9iH18GjLafN2ljxRltAMaGA3CyceG4=
Subject key identifier: 34:EA:67:58:DA:7C:CF:AE:87:E8:82:C4:F3:32:80:75:61:BB:99:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013092
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB1F1156F42511EFB88AEA8D762E951A.roa
Signing time: Wed 26 Feb 2025 09:41:57 +0000
ROA not before: Wed 26 Feb 2025 09:41:53 +0000
ROA not after: Thu 19 Feb 2026 09:41:53 +0000
asID: 984
IP address blocks: 156.230.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77970 (0x13092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:41:53 2025 GMT
Not After : Feb 19 09:41:53 2026 GMT
Subject: CN=67bee1e5-1995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:8d:dc:d3:97:8d:8a:0a:af:ff:5c:21:cf:
40:9e:62:d5:2a:3d:5c:d2:b5:28:be:01:a7:c2:db:
00:bd:18:bf:ba:44:c1:7b:41:8a:11:51:0d:f2:7c:
96:ac:f2:08:bd:46:84:81:13:61:9a:68:ca:a8:28:
e7:e0:44:d8:e0:e3:7e:bf:de:0f:9a:5d:d9:66:a4:
15:9b:6f:dc:28:cc:fd:d2:bc:7c:53:d2:4f:93:b5:
21:63:c3:ea:ed:5c:10:8c:b0:04:2a:b1:3b:77:be:
e8:51:63:d1:f1:60:ab:51:39:74:2a:85:dc:ae:c7:
c1:b6:57:5f:37:d0:bf:a5:e1:cb:fd:05:27:6d:79:
0e:dc:37:5f:7b:72:f8:72:01:c4:fc:50:8d:db:9c:
46:70:94:87:0e:18:be:d8:6e:d3:a3:09:6d:75:92:
98:4e:73:b9:68:a8:68:2b:46:bc:2a:8c:ac:be:74:
06:7b:dc:2f:c2:20:c0:43:d7:cc:5c:c7:a3:13:b2:
ad:32:6e:c6:bc:ed:12:95:97:54:b9:91:20:c5:2e:
e7:fc:d8:bb:d3:2a:9a:93:cd:0b:bf:c3:75:9c:99:
77:90:09:da:be:36:39:65:55:8a:0c:06:53:6d:12:
4d:f0:de:5c:2b:03:3b:83:0f:cb:b7:7b:17:64:9a:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EA:67:58:DA:7C:CF:AE:87:E8:82:C4:F3:32:80:75:61:BB:99:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB1F1156F42511EFB88AEA8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.52.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8b:63:f9:7e:25:70:1f:df:6f:95:a3:54:32:fd:cb:85:2b:
e7:fd:83:96:7d:84:2b:ba:8c:52:ea:e1:46:d1:61:be:a5:b6:
91:ab:0b:1b:d1:81:22:4a:c1:b7:b4:ae:49:fd:72:fb:7e:a2:
2d:0c:79:50:9e:7e:cc:00:ba:7b:4e:36:68:78:a5:7e:36:ce:
23:87:90:4c:c1:83:e0:8a:c2:b3:58:40:fa:41:58:0b:7a:12:
cc:28:45:53:61:88:ed:7f:85:09:23:ec:b8:42:3b:9f:57:2b:
55:38:cd:01:ed:6a:dc:04:1c:f8:d3:8c:b1:b4:3c:29:85:40:
aa:d8:8d:7f:04:9e:b1:2b:bb:bf:44:e4:4f:76:a0:7d:3c:44:
c0:4e:0f:4e:2f:ad:84:36:fd:b0:7c:c7:bc:6b:7d:15:03:60:
8c:50:11:e7:38:27:d2:6f:66:94:7f:e0:e1:2b:32:ab:bf:10:
55:66:a1:25:78:4c:2e:36:a0:8e:b4:c5:5a:4d:2b:2d:3e:1b:
8b:0b:a8:c6:2b:00:7e:a5:56:1d:a8:db:18:70:4b:63:6d:35:
9c:bc:39:ea:44:11:19:52:b6:43:0a:70:03:7c:4e:85:be:65:
bf:a2:30:d5:d9:99:48:9e:34:9f:5d:e5:c0:6d:6e:bb:fe:a3:
0c:cf:50:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:44 2025 by rpki-client