Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53579F7EF42911EF84B109A4762E951A.roa
File: 53579F7EF42911EF84B109A4762E951A.roa (raw, json)
Hash identifier: yAbxMOLeQr/J+VbTLgLJqZA8a4DlfofKUqvIIn5CXzE=
Subject key identifier: 5F:73:DA:CC:52:24:45:69:32:8A:C5:D5:C8:CA:6E:B5:3C:27:95:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53579F7EF42911EF84B109A4762E951A.roa
Signing time: Wed 26 Feb 2025 10:06:20 +0000
ROA not before: Wed 26 Feb 2025 10:06:17 +0000
ROA not after: Thu 19 Feb 2026 10:06:17 +0000
asID: 984
IP address blocks: 156.252.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78024 (0x130c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:06:17 2025 GMT
Not After : Feb 19 10:06:17 2026 GMT
Subject: CN=67bee79c-98e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:33:7d:9f:4f:61:65:cf:45:af:32:20:fb:9a:
f8:95:12:4a:ab:24:ef:a8:28:86:bf:2b:01:f9:a7:
ec:37:71:02:0f:86:59:10:80:d4:de:f8:52:ee:43:
79:74:00:3e:14:01:f4:43:c7:24:1b:30:0e:eb:df:
b3:b2:c7:49:db:52:a6:cf:50:95:a1:1c:e8:45:56:
38:a1:ec:ab:e1:18:77:fb:f2:e5:f1:eb:ef:6d:f5:
89:bb:87:63:d0:a7:ba:2c:9b:e3:5a:fc:ca:ab:cf:
b8:11:f1:b0:75:f7:96:5c:a6:fe:20:f5:72:7a:aa:
14:8d:0c:82:14:12:06:a9:f4:6b:59:19:a7:ca:d9:
16:fc:94:82:c8:c2:55:fe:c7:52:62:c8:c7:d8:16:
21:ee:50:f1:eb:cf:fb:2a:cd:63:3d:36:27:db:1c:
6d:b9:b6:05:01:ad:9f:2d:9f:2a:99:42:32:a9:e1:
81:8e:1a:b6:ed:22:cd:5e:7d:b1:75:de:c5:11:51:
3c:58:76:b7:b6:d9:b9:e5:77:a3:c5:61:d5:2c:46:
ee:e3:05:9f:50:30:18:ee:35:a6:fb:98:65:bc:7e:
61:10:0d:d9:c7:19:5c:6f:89:ce:34:45:16:bc:3e:
12:bf:20:50:1c:a8:f3:e6:3e:c2:d1:27:90:10:47:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:73:DA:CC:52:24:45:69:32:8A:C5:D5:C8:CA:6E:B5:3C:27:95:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53579F7EF42911EF84B109A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.77.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:df:5d:65:e0:1c:d8:44:15:e1:6b:9c:a6:a2:fe:e5:92:49:
a8:0c:a9:ed:dc:6a:87:af:22:7f:5a:87:07:8f:a6:60:5f:49:
ae:75:fa:8f:34:9f:e0:3d:20:79:f0:b9:f5:0e:8c:70:ba:19:
5f:78:47:56:c4:88:e2:a8:a9:18:1d:e7:ea:22:b1:4a:8b:ab:
c2:47:8a:45:7b:16:91:1e:9d:36:88:93:81:42:eb:35:4b:1e:
72:bf:0a:23:37:7a:35:af:d4:6d:2c:f5:47:91:0d:86:2b:ce:
c6:d3:d2:29:64:42:e2:08:3f:f5:95:b8:50:7b:a1:95:a9:2a:
79:c5:02:bf:dc:91:f0:f7:eb:69:57:09:35:3c:11:f8:19:a3:
5d:90:37:3e:d5:d7:3c:52:4a:25:8f:e7:07:a7:96:6f:75:76:
03:1c:69:cb:43:bd:7d:15:e2:e1:66:3c:3b:4d:df:59:f2:6c:
9b:4e:ab:96:e4:c1:73:f4:44:03:c7:aa:e9:d3:e1:ac:68:e2:
72:20:92:4a:98:2b:49:7b:d1:9a:58:12:df:b0:25:e4:0e:d2:
54:65:a0:9e:2e:87:5d:d4:7b:3c:7a:04:b6:be:64:a8:f7:9d:
14:86:04:cb:99:f0:64:48:05:ec:98:f0:89:71:d4:4f:f8:6d:
91:d0:42:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:25 2025 by rpki-client