Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28A2D9FCF46411EF82F27B44762E951A.roa
File: 28A2D9FCF46411EF82F27B44762E951A.roa (raw, json)
Hash identifier: ZN3U3dkQG0CytzBTJdhlTzzCWaEOiqVZcKuSfzgNMys=
Subject key identifier: 78:07:FC:C6:24:FB:CC:C6:BE:9D:9C:51:28:1E:CA:0A:C5:F2:0C:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01355D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28A2D9FCF46411EF82F27B44762E951A.roa
Signing time: Wed 26 Feb 2025 17:07:29 +0000
ROA not before: Wed 26 Feb 2025 17:07:25 +0000
ROA not after: Thu 19 Feb 2026 17:07:25 +0000
asID: 984
IP address blocks: 156.245.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79197 (0x1355d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:07:25 2025 GMT
Not After : Feb 19 17:07:25 2026 GMT
Subject: CN=67bf4a51-6829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:96:f8:bd:9e:d8:f6:89:8e:dd:c2:56:d0:
66:3a:06:f1:7a:a3:ad:b0:98:a0:c0:2a:3f:b9:a9:
d6:b3:3b:e5:03:e3:5b:fd:8b:4c:a2:94:e3:38:1f:
ef:b9:bc:aa:51:83:b5:c9:83:7f:74:68:b7:7c:d3:
8f:ab:cf:03:e2:2a:38:d0:a9:3c:5d:6d:98:a0:07:
99:2a:6a:d2:2f:6f:cf:21:cb:6e:e3:76:c4:56:94:
26:36:42:47:d9:77:e3:0e:90:7d:3e:62:ee:17:41:
a1:a8:57:23:0e:01:54:b3:e7:fe:02:95:f7:cf:96:
f2:08:84:56:34:98:81:cd:04:51:80:e7:97:59:f1:
87:d5:e9:5d:43:e1:50:90:90:d0:7f:f2:d8:1b:d1:
4d:0e:02:1b:ee:b3:5d:0b:20:56:44:ed:3f:b5:23:
50:bc:07:92:c9:be:a8:71:de:d5:6b:bc:7c:78:9b:
00:14:48:e6:3d:c2:30:fa:1c:c3:da:a1:41:81:9c:
f5:4b:89:35:0e:eb:4c:19:13:49:42:ac:50:5c:93:
09:c0:c4:b4:f5:e6:5b:96:01:f7:54:33:ce:df:2e:
4d:f2:44:a8:98:5b:be:09:cf:eb:33:9e:21:b5:3e:
c2:ae:03:b0:41:32:f8:2c:47:a8:26:13:7a:ff:9b:
c6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:07:FC:C6:24:FB:CC:C6:BE:9D:9C:51:28:1E:CA:0A:C5:F2:0C:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28A2D9FCF46411EF82F27B44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.77.0/24
Signature Algorithm: sha256WithRSAEncryption
14:2c:77:24:7d:a6:bf:e1:6f:8c:9b:dc:ec:9f:35:1a:b0:c3:
9c:da:c9:a2:04:df:ac:aa:f9:21:6b:2e:e8:d1:72:96:cb:7d:
9e:73:0f:2b:c5:8d:68:ef:13:cb:2d:c3:f4:14:f3:82:da:f5:
2a:2a:97:07:6c:18:94:88:b5:1e:71:e1:8a:b7:63:a2:99:b7:
e1:40:6a:d1:c4:da:b7:20:39:34:eb:8f:5f:89:5f:c5:6e:54:
31:3f:7d:2d:8d:7b:99:cd:f2:19:ee:a5:96:68:04:06:4f:3e:
65:dd:0b:04:9d:20:4c:1a:78:09:00:8b:d2:b2:d9:04:81:18:
1f:53:54:b8:ef:37:16:8d:b9:8f:91:f3:e2:d6:73:91:93:a1:
ae:25:e8:25:99:47:c3:89:18:69:88:66:1d:9c:04:c4:3e:fe:
b6:77:53:e1:d4:9a:e9:8a:e1:05:f6:da:c4:8f:dd:cf:d8:40:
3b:b2:c7:df:e3:58:e7:d4:4b:74:3b:ac:3a:12:06:76:0f:39:
00:5e:c4:80:e1:c3:53:eb:22:3f:82:ab:56:2b:44:4c:99:bd:
dd:66:38:2d:82:38:46:50:09:bf:a8:4c:b0:d4:f7:01:a7:60:
73:24:bf:ac:de:a8:55:50:4b:21:fa:4a:26:2f:78:de:c3:2d:
3e:54:c1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:31 2025 by rpki-client