Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAC29C4AF48E11EF9ADE2569762E951A.roa
File: FAC29C4AF48E11EF9ADE2569762E951A.roa (raw, json)
Hash identifier: 2G5/JkT0+52Bv258h0c5urBEHDZHhDY+Oz1eESFg9K8=
Subject key identifier: EA:33:AA:66:07:B8:78:C2:99:31:34:A3:8B:88:C9:92:65:E9:A6:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013819
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAC29C4AF48E11EF9ADE2569762E951A.roa
Signing time: Wed 26 Feb 2025 22:14:00 +0000
ROA not before: Wed 26 Feb 2025 22:13:56 +0000
ROA not after: Thu 19 Feb 2026 22:13:56 +0000
asID: 984
IP address blocks: 156.232.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79897 (0x13819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 22:13:56 2025 GMT
Not After : Feb 19 22:13:56 2026 GMT
Subject: CN=67bf9228-1beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:e3:24:4c:91:88:a6:8b:2b:43:f9:fa:55:
9f:8b:98:cd:68:bf:50:2f:14:b7:b9:ca:47:f7:44:
89:40:39:65:aa:00:48:ac:11:fe:39:b1:55:f8:36:
9b:9d:35:65:74:b2:ac:85:8d:a2:f1:1f:05:75:8d:
8a:4e:18:e4:b2:3b:0a:a7:cb:99:5f:3b:b0:38:7b:
3b:4c:9f:ff:0c:77:e9:cb:c0:15:f9:2a:ae:07:50:
1b:cf:26:97:06:85:70:95:ad:1f:c6:ea:1f:94:7b:
92:6f:61:f9:e1:1a:1c:22:78:c2:bf:8d:1c:f2:3c:
85:46:ba:5f:1c:36:65:24:98:31:51:13:76:ba:8c:
38:dd:db:c9:58:be:39:ed:05:96:e6:7a:b9:cc:44:
25:28:9c:3d:27:5c:23:4e:d7:43:a2:71:58:1f:0a:
67:72:0b:63:ae:6d:e7:6e:12:77:82:ec:4e:3d:fe:
a1:58:d1:39:58:4f:f1:25:2f:d0:64:4a:7f:4e:d0:
d2:7b:d4:34:6e:dd:9b:20:5a:2d:85:99:49:ba:8c:
0b:3c:c3:0c:68:7f:d2:8d:da:34:57:7e:df:90:13:
98:5d:4a:fa:c6:5f:0a:39:ec:6c:81:63:87:95:a5:
13:cc:42:85:7c:09:f4:d6:4c:24:c1:4f:bb:d6:a6:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:33:AA:66:07:B8:78:C2:99:31:34:A3:8B:88:C9:92:65:E9:A6:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAC29C4AF48E11EF9ADE2569762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.44.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d2:62:07:cb:44:69:23:10:32:ee:05:14:4c:31:21:5e:03:
d1:cb:b8:86:ce:95:05:ed:19:b9:6d:7e:2e:f7:b9:9a:96:5a:
fc:f5:ef:21:00:42:df:3f:27:d5:a3:2f:20:69:21:aa:d3:ed:
42:34:96:ef:36:9a:f9:bc:b8:90:43:6c:52:30:40:e3:09:3d:
9c:a1:88:4d:99:a8:cb:0c:fc:50:a7:43:67:83:c2:45:8c:7a:
f6:07:eb:76:9e:be:14:55:4b:e1:96:dc:e4:00:8a:32:60:ed:
73:fc:d9:00:c0:40:50:ea:bd:5d:42:d6:53:52:4d:dc:11:1d:
52:ae:96:5e:06:46:4f:28:16:71:63:92:c0:e4:cd:d7:5b:1e:
ee:d6:f8:ac:47:46:b9:97:00:98:30:8b:12:0a:ef:ef:ce:d9:
f3:1b:22:70:1d:03:5c:03:ba:86:ac:e4:87:ec:70:04:ad:27:
e1:eb:59:b8:6e:44:5b:ef:da:03:6e:10:d6:cb:f4:8e:2c:4e:
35:de:0e:a4:9e:c9:f4:31:4f:6d:4b:f9:e6:ea:f8:e3:84:25:
a4:97:2e:69:ef:54:81:3b:72:18:59:11:6c:39:a4:6e:76:ed:
76:10:8b:31:5b:70:34:ee:d9:af:bf:b0:6a:aa:3b:8a:f6:82:
5b:c7:6f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:40 2025 by rpki-client