Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BFA58FEF46911EF8E551F66762E951A.roa
File: 3BFA58FEF46911EF8E551F66762E951A.roa (raw, json)
Hash identifier: Umatr8JNf7GjwCaBdOIaUcL8ua8XbS4SyxD3A5emK0w=
Subject key identifier: AD:71:CA:FB:D6:A0:91:3F:CF:00:02:54:88:51:EC:E1:2A:1D:AE:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BFA58FEF46911EF8E551F66762E951A.roa
Signing time: Wed 26 Feb 2025 17:43:49 +0000
ROA not before: Wed 26 Feb 2025 17:43:45 +0000
ROA not after: Thu 19 Feb 2026 17:43:45 +0000
asID: 984
IP address blocks: 156.245.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79307 (0x135cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:43:45 2025 GMT
Not After : Feb 19 17:43:45 2026 GMT
Subject: CN=67bf52d5-29b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:82:36:0f:7f:31:be:c1:09:f9:b7:ac:b3:
d0:fa:1f:1a:70:46:46:43:c6:b5:d8:41:27:c3:fb:
ff:17:8d:51:80:b0:f2:a7:ba:c3:b3:c8:15:78:7b:
94:13:c8:b8:bf:3a:6f:9b:1c:4d:23:8a:3c:e4:e3:
55:c6:54:ae:a2:ad:f4:5e:50:57:a9:08:0d:c4:0f:
98:2c:32:77:61:ee:55:3e:6a:8f:46:9f:dd:f1:d3:
bf:a7:a0:e4:c8:9a:69:3a:a3:72:3d:3c:32:78:c1:
80:3d:dc:05:7d:58:ba:84:39:fd:ce:b8:69:10:fd:
3b:45:bd:7d:fe:bb:57:fd:cf:55:8b:97:11:51:47:
50:1f:11:37:e3:3f:04:19:7c:07:31:5a:98:cb:cd:
7b:8a:a8:88:4d:3e:1f:8d:91:ab:0c:7b:4a:0d:d8:
41:7b:fa:5d:89:3c:a4:36:11:5a:4a:51:1e:c3:82:
3c:75:8a:0d:97:d4:2a:68:dd:dc:67:3b:01:7d:ab:
ae:9e:c0:a4:5b:1a:06:17:2d:68:0f:ec:e2:fb:41:
88:46:5f:89:6f:e0:f6:d8:fc:c8:e6:89:9f:95:81:
50:97:1c:71:04:b5:10:1e:10:79:3d:39:5d:d1:32:
13:08:83:b8:fe:8e:e7:36:35:20:8d:b8:fe:8d:4d:
60:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:71:CA:FB:D6:A0:91:3F:CF:00:02:54:88:51:EC:E1:2A:1D:AE:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BFA58FEF46911EF8E551F66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.92.0/24
Signature Algorithm: sha256WithRSAEncryption
59:4c:9e:d9:4c:94:cf:d6:ea:51:7d:29:3c:59:11:da:ff:8e:
36:be:92:5c:b3:df:92:4a:7e:14:ab:a3:de:ef:82:44:42:ba:
c8:ba:c3:a7:67:cd:08:28:2e:f2:09:f4:14:58:41:ae:00:65:
b0:ee:70:c2:c8:97:90:4e:03:37:dc:d2:9e:49:b7:02:14:3e:
7a:99:95:62:24:47:41:6f:e5:90:ce:19:69:85:5e:5f:50:33:
0f:ad:31:1b:af:b6:1a:8b:80:aa:91:dc:85:d5:87:a7:ba:ba:
56:15:ca:05:6f:3b:c5:73:06:95:7e:c6:17:81:5f:4e:5c:56:
c5:5d:a7:fb:c9:38:a9:82:0c:c4:34:8f:bb:fc:aa:25:d7:f7:
54:19:05:e4:d5:ec:2f:5b:11:dd:38:0d:7e:56:6f:13:34:de:
f1:e2:1c:ca:d3:38:d9:20:00:52:66:a3:cd:3c:ad:b4:38:95:
5a:3a:95:1d:d8:21:c4:9c:b8:0a:29:b8:28:21:42:ed:7f:10:
77:32:71:76:d5:36:f6:46:fb:c7:bc:97:41:cc:23:fd:02:69:
72:b5:c0:a6:e9:fe:1c:35:bb:df:cb:ea:f7:44:56:de:bd:34:
9b:c2:48:5b:83:60:1e:b7:72:e2:0b:16:8b:8c:c0:3f:b2:e1:
28:ff:ad:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:33 2025 by rpki-client