Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7F93E6AF45211EF81EDEB4B762E951A.roa
File: F7F93E6AF45211EF81EDEB4B762E951A.roa (raw, json)
Hash identifier: fhdm9RKk6kKnc67xTaN6eEYKGvbUx9fHVkVGwvCHDJA=
Subject key identifier: C9:F9:B6:20:13:F3:FB:FF:B8:88:4D:D4:EA:99:BC:7B:B6:E1:1F:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013412
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7F93E6AF45211EF81EDEB4B762E951A.roa
Signing time: Wed 26 Feb 2025 15:04:26 +0000
ROA not before: Wed 26 Feb 2025 15:04:22 +0000
ROA not after: Thu 19 Feb 2026 15:04:22 +0000
asID: 984
IP address blocks: 156.231.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78866 (0x13412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 15:04:22 2025 GMT
Not After : Feb 19 15:04:22 2026 GMT
Subject: CN=67bf2d7a-aafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:6f:f4:61:e7:97:be:eb:fc:1b:bf:d7:0d:
fd:fe:a8:52:08:56:3f:75:f2:67:b0:3e:62:e0:64:
6b:54:92:f8:8d:99:c0:e2:a3:10:8b:35:48:e2:51:
29:91:53:6f:96:59:6e:39:b6:9a:51:a8:a5:3b:c0:
21:95:be:ce:e0:bf:80:cb:33:e7:01:f7:4e:f9:1a:
2d:02:b2:3c:c4:3a:14:24:9b:9c:86:1e:8d:33:69:
dd:df:f5:66:ac:ae:c9:e4:b4:db:ed:c7:46:77:ee:
db:46:7f:83:8a:82:f4:b4:67:8a:b9:67:d9:26:42:
12:90:6f:3c:5b:c2:7c:70:2b:9f:c0:15:af:0a:0d:
d2:eb:48:72:77:cb:34:2f:d9:1c:ec:fe:65:1f:0b:
66:de:84:65:da:7d:fd:b2:cc:af:03:24:b7:35:b4:
2e:3e:e7:43:3e:73:94:a4:9d:f2:fe:5a:64:fa:dc:
6a:74:a5:0b:0c:6b:a6:ac:88:d0:10:28:cf:43:44:
67:2c:6b:e9:41:16:c4:9c:ed:e3:c8:9d:02:8a:da:
7c:3f:cc:17:77:44:2c:de:3f:2e:15:6a:dd:33:7e:
97:c9:05:e4:da:b5:c0:a3:13:bd:28:4f:83:95:46:
4e:96:9d:f0:40:dd:e9:3e:44:f6:d4:4b:bf:38:d3:
c8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F9:B6:20:13:F3:FB:FF:B8:88:4D:D4:EA:99:BC:7B:B6:E1:1F:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7F93E6AF45211EF81EDEB4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.201.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:a2:f6:cf:40:a1:60:04:db:ae:40:16:f5:cc:d8:e2:c5:e6:
0b:1e:34:49:a3:2d:fc:ad:27:f5:2a:d3:28:b7:83:c9:a9:00:
ec:4d:b0:80:d7:4b:bf:51:53:fc:8f:fe:58:b2:c7:5e:69:5c:
d6:e6:b5:23:75:33:15:86:9a:10:44:dd:80:cf:31:05:bb:86:
ee:c6:03:cf:1a:9e:20:63:8a:46:e7:08:6c:a9:23:89:90:27:
bf:9d:f6:0a:2b:38:9a:5c:17:ae:dc:cd:69:93:bb:ab:cb:53:
ad:81:ce:b2:b5:6e:5c:4f:4b:76:27:0d:15:da:3a:ee:a6:7b:
3a:35:9d:bc:c2:dc:9a:44:f4:a9:4b:43:ba:8a:86:2d:cf:5a:
43:8d:1a:ab:60:4f:6f:e3:51:cc:ba:24:b1:74:43:58:a4:ff:
8f:91:4f:72:ac:45:1b:b9:15:6e:21:b2:50:14:cd:22:c4:99:
b2:b5:13:62:e9:da:28:e8:76:77:9e:50:c4:3c:87:3b:0c:1a:
31:62:5c:c8:ba:bd:5a:74:1e:ae:22:b4:e4:f2:3e:43:1f:e3:
d7:f8:a0:4c:1b:37:a0:a4:0b:7d:6a:1a:20:e2:06:2e:78:6c:
e3:06:7c:60:fe:53:0d:dd:aa:6d:43:28:52:7a:48:5e:32:a6:
86:a2:a6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:38 2025 by rpki-client