Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/300B4FD6CD4411EF89F64757762E951A.roa
File: 300B4FD6CD4411EF89F64757762E951A.roa (raw, json)
Hash identifier: /9a/7HO/ZO8ISTm8MgsLQf+S3NnSbAeL8G2foqoef50=
Subject key identifier: 1C:D5:76:6B:A6:47:C5:2E:C1:B1:FA:55:EB:A8:1B:D1:86:70:E2:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/300B4FD6CD4411EF89F64757762E951A.roa
Signing time: Tue 07 Jan 2025 22:10:22 +0000
ROA not before: Tue 07 Jan 2025 22:10:18 +0000
ROA not after: Sat 13 Dec 2025 22:10:18 +0000
asID: 984
IP address blocks: 156.243.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65161 (0xfe89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 22:10:18 2025 GMT
Not After : Dec 13 22:10:18 2025 GMT
Subject: CN=677da64e-f82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d9:51:13:96:61:14:56:a2:6e:44:a4:cf:df:
53:a8:fb:da:f5:21:28:de:c9:e7:9e:56:95:b3:ac:
96:5b:03:0e:81:f5:85:32:ae:94:2d:1b:30:dc:a6:
43:1c:9e:f5:99:67:7c:e1:c2:66:e3:bc:cd:11:3d:
c8:fd:ba:36:cb:46:0d:bc:3b:98:6d:2e:de:99:98:
4c:ec:88:e1:a1:9c:67:5f:81:9f:21:0f:c8:d0:09:
4a:54:d4:80:07:36:b1:ef:d7:68:42:df:68:44:de:
4c:dd:a5:49:ca:dd:8b:6c:f8:e2:89:b5:a3:bd:0e:
44:aa:33:70:29:3d:7d:65:c6:9a:e6:52:fb:8e:59:
5d:40:bb:58:61:b4:aa:be:97:5d:4a:d4:52:55:ef:
70:03:a1:1b:1d:0d:04:06:75:5d:ce:69:0f:43:71:
03:dc:eb:ab:4a:d5:97:9b:b7:e1:6e:42:b9:52:1d:
dd:6a:25:6e:4a:44:3a:fa:bb:00:35:eb:71:6c:b1:
e2:dc:f8:43:71:4c:36:00:67:07:5a:b0:f7:71:21:
48:62:f9:a5:2d:72:2c:cc:f4:91:5b:f5:1c:63:c6:
e0:52:77:5a:c9:c0:a9:c3:e4:38:3e:87:44:0e:75:
4f:06:80:ca:ab:11:0c:c5:80:a8:8f:b2:c0:e8:6c:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D5:76:6B:A6:47:C5:2E:C1:B1:FA:55:EB:A8:1B:D1:86:70:E2:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/300B4FD6CD4411EF89F64757762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:f5:9f:16:60:06:61:0c:9f:ca:a8:99:e0:aa:38:a0:1e:48:
38:bd:b8:93:37:3a:2f:e0:87:2a:25:cf:1a:b0:ad:6f:c3:94:
91:bc:0c:d3:83:49:8a:cb:2f:df:51:49:cb:7e:0a:0a:34:21:
ff:c4:33:18:96:36:99:d3:14:f1:fc:48:2d:48:f5:28:6d:4e:
aa:19:60:49:53:d5:c9:ef:e7:6c:cb:4d:f1:ca:1e:75:15:60:
d6:87:84:97:f4:a0:b6:10:a9:6d:ac:ef:87:e1:01:a5:1c:39:
98:59:96:8e:96:11:82:cc:9d:91:d1:63:54:cc:c9:36:95:f4:
7f:cb:48:fd:82:ad:06:7f:76:22:2a:51:ef:c6:2a:c1:52:2e:
7d:57:ab:e0:1c:4a:87:f0:f2:a0:9d:27:e1:29:e0:94:89:94:
0f:e2:09:72:78:79:22:b7:0e:fc:56:50:d0:c9:4a:9c:7c:f9:
72:48:84:24:14:c5:65:8f:8a:c4:7d:8f:01:48:d1:07:8b:1f:
6e:10:aa:5f:99:a9:31:3c:8d:30:4c:b3:07:a7:4b:9f:c8:ae:
e6:83:c8:3b:f6:46:e5:a1:3d:53:d0:f5:c8:79:40:2f:83:d3:
5c:00:3f:1d:2b:0a:79:2e:09:1e:5c:7e:5e:e7:75:db:cf:2c:
74:ff:51:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:41:16 2025 by rpki-client