Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE2675BCF43B11EF83449BA7762E951A.roa
File: FE2675BCF43B11EF83449BA7762E951A.roa (raw, json)
Hash identifier: xeL1dCVMfKiDX6BfA4+szCSiE4Y6TQ0hnkTLMysvd3g=
Subject key identifier: 04:F6:5F:4D:21:5B:55:3A:0F:59:15:83:B3:33:F5:89:A9:9A:73:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013258
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE2675BCF43B11EF83449BA7762E951A.roa
Signing time: Wed 26 Feb 2025 12:19:58 +0000
ROA not before: Wed 26 Feb 2025 12:19:54 +0000
ROA not after: Thu 19 Feb 2026 12:19:54 +0000
asID: 984
IP address blocks: 156.252.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78424 (0x13258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 12:19:54 2025 GMT
Not After : Feb 19 12:19:54 2026 GMT
Subject: CN=67bf06ed-e4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:ee:8d:1d:bc:78:54:2a:8a:82:6d:fc:a9:
07:35:cc:e3:9f:01:ec:78:a9:68:39:b5:a8:46:5b:
09:f5:31:d5:05:14:37:8a:99:26:9b:53:24:e0:70:
28:9b:05:4a:63:ca:09:b2:8b:ee:ee:f8:b4:56:88:
97:22:d9:5e:0a:99:22:db:2f:e5:b5:86:93:f7:c0:
c1:bd:3a:b0:09:22:26:1a:fb:6d:15:43:00:26:41:
e7:f6:fb:b2:21:ff:f9:bc:64:12:85:81:8f:c7:f8:
50:f6:da:5a:ec:b4:92:c4:65:9e:8d:19:8b:0f:f7:
12:5b:16:2a:11:42:9a:f7:c6:64:09:d1:94:fc:a9:
f2:db:3c:9b:e3:72:75:22:db:99:90:67:c1:58:f5:
71:3f:d2:e8:a9:95:30:90:f7:a9:4d:37:c5:78:76:
bb:fe:67:6b:08:a4:fd:30:86:09:da:63:ec:ac:9a:
40:d1:d8:42:48:1f:01:67:7e:6c:68:f4:7a:5a:6d:
05:1e:34:be:38:d7:79:a7:cb:8f:78:44:bb:b3:43:
dc:57:28:35:74:e1:f7:81:e0:6f:9c:d2:3c:93:33:
fc:9a:06:fc:ab:ca:2f:bb:b6:c1:95:05:59:69:52:
40:68:a1:d8:98:ca:e1:25:94:74:22:ec:50:3b:1f:
31:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F6:5F:4D:21:5B:55:3A:0F:59:15:83:B3:33:F5:89:A9:9A:73:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE2675BCF43B11EF83449BA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.140.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:38:eb:12:2f:80:43:3e:cc:30:dd:f8:07:21:a1:c8:70:91:
40:75:b8:c9:5a:63:09:b4:0d:ae:9e:a1:8d:2f:8b:5a:02:bf:
5c:ba:5f:d6:74:34:40:b5:16:9e:cc:7c:e6:88:2e:58:b6:a0:
db:9f:c4:7f:7d:b6:07:98:d3:68:c2:79:e5:66:64:fe:93:5d:
09:03:0d:6b:64:06:32:d2:f0:1e:2c:f9:ba:94:82:db:39:47:
dd:ea:a5:9f:99:b4:0c:ff:77:14:50:21:6f:e4:16:a1:cb:2b:
ff:a6:18:2f:a6:93:3a:44:4f:08:8c:d9:67:6d:13:bd:80:a5:
de:8a:86:ef:47:dd:78:f2:7b:99:d2:b2:2e:8d:aa:da:48:06:
dc:6f:01:9f:f5:ea:5e:3c:e8:26:94:c6:8a:67:ed:8e:4e:c4:
d1:04:02:a9:d4:22:af:a3:9b:a8:ed:6b:9a:54:5e:cd:7c:d3:
d0:5c:f4:14:65:36:c6:7b:fa:8a:ef:5b:e6:a2:db:73:16:2a:
85:d7:cd:04:a7:10:2b:01:c3:67:b5:f0:5f:cf:f7:66:55:08:
3f:bd:f4:31:41:2e:a6:f6:bb:33:28:fd:a6:ed:e2:1e:49:bf:
e0:52:b5:20:7e:29:ee:db:23:d8:dc:d9:88:d1:9a:b1:f8:50:
4a:46:ea:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:43 2025 by rpki-client