Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/554A15D0F47111EFA7CE8B9F762E951A.roa
File: 554A15D0F47111EFA7CE8B9F762E951A.roa (raw, json)
Hash identifier: KPfFkE2V6LaXmfhxge5TT3n3A0tHKXkovVaOi7VCq7g=
Subject key identifier: E9:1A:8A:B3:DC:A2:A9:17:83:76:F5:BF:F0:D4:80:EA:96:0E:79:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01368B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/554A15D0F47111EFA7CE8B9F762E951A.roa
Signing time: Wed 26 Feb 2025 18:41:47 +0000
ROA not before: Wed 26 Feb 2025 18:41:44 +0000
ROA not after: Thu 19 Feb 2026 18:41:44 +0000
asID: 984
IP address blocks: 156.245.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79499 (0x1368b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:41:44 2025 GMT
Not After : Feb 19 18:41:44 2026 GMT
Subject: CN=67bf606b-a3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:51:6c:ae:52:94:55:8b:20:57:1c:de:ff:d0:
96:cf:a8:21:ac:54:6c:40:6d:42:40:ca:a5:b8:2c:
82:44:f9:fe:76:24:63:1d:05:1c:05:61:d8:2e:0d:
72:71:0d:72:c1:13:c8:7c:70:9a:25:17:bb:c3:bb:
86:c5:29:37:af:50:50:1c:57:12:4d:2d:a2:39:19:
37:a1:7c:e0:a0:7c:05:76:09:0e:44:eb:61:c6:e4:
f8:db:54:f8:0a:26:d2:ca:ae:a0:9c:fd:5f:17:41:
f7:2a:ed:af:d8:8a:86:ef:74:d1:f5:1e:95:df:02:
fa:04:90:d9:0a:ec:f2:48:08:fd:e6:a9:57:92:9c:
b4:cd:1d:71:8e:da:c2:89:fa:35:4b:7e:f0:6a:d4:
7c:35:a6:95:ab:1d:7c:3c:c8:8d:c8:e0:56:6d:f6:
1e:c9:e6:41:38:5f:63:df:45:fb:0d:7b:74:81:9f:
f0:12:57:44:0e:cf:35:e4:6c:49:0c:7f:f0:a2:80:
49:ba:de:7e:e3:8f:47:f4:b7:52:68:70:ad:21:9b:
53:28:50:29:ca:e1:15:2f:27:53:9c:c4:5d:87:79:
57:47:82:00:d1:72:70:13:a0:2f:cd:9d:1b:11:8b:
21:3c:84:64:3f:7d:d1:57:09:4c:81:db:df:cb:b3:
a1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1A:8A:B3:DC:A2:A9:17:83:76:F5:BF:F0:D4:80:EA:96:0E:79:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/554A15D0F47111EFA7CE8B9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.117.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ec:e7:1b:c2:85:d8:2d:e1:5c:ab:33:91:3c:5a:20:bf:a4:
5a:a6:23:44:ca:21:fd:51:b8:cb:da:6b:9b:a3:b6:98:db:72:
e7:90:ce:da:03:87:e5:f0:e1:16:1e:e6:6c:13:ff:82:18:3c:
5c:82:74:15:74:68:f6:db:57:9a:15:15:08:c1:e5:47:af:05:
c0:ff:ec:54:75:b6:1c:90:c9:c2:79:40:1c:5f:95:79:5a:56:
b6:09:45:da:3e:a0:59:17:c5:3c:78:52:d2:9e:ba:79:cd:ec:
92:ea:ef:09:c9:59:14:59:40:18:63:ff:40:4e:4b:cd:c8:fd:
f9:33:42:cc:2b:34:d7:8e:e9:7e:68:fb:6d:32:d2:87:70:92:
3d:3c:04:4d:c4:69:f4:53:c8:6a:cc:f8:24:96:7f:bb:4b:28:
2a:47:1d:4c:52:0f:a7:5f:a6:d7:53:37:80:a8:46:71:e0:6d:
60:51:ec:59:6f:ca:a4:d1:3e:11:fe:04:b0:9e:a4:51:cc:c4:
4b:db:21:9a:d1:b7:09:53:96:6f:3a:2a:28:aa:18:a4:cf:60:
6a:be:31:e3:26:49:3a:a9:a8:d4:31:6c:a1:9b:b9:2b:87:2d:
f2:e9:18:16:22:4d:dc:56:22:b7:44:01:77:e9:c4:cd:8c:4c:
10:c0:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:15 2025 by rpki-client