Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56304136F46C11EF9C3CD77A762E951A.roa
File: 56304136F46C11EF9C3CD77A762E951A.roa (raw, json)
Hash identifier: 0Ke/wwFBVwNKGtmwE85vMOQPRhf9LSDUIQF7qEkU+zg=
Subject key identifier: A1:D8:1D:0B:D1:0B:49:E6:A6:B0:99:74:D5:55:2D:44:FE:26:C1:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01361C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56304136F46C11EF9C3CD77A762E951A.roa
Signing time: Wed 26 Feb 2025 18:06:01 +0000
ROA not before: Wed 26 Feb 2025 18:05:58 +0000
ROA not after: Thu 19 Feb 2026 18:05:58 +0000
asID: 984
IP address blocks: 156.245.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79388 (0x1361c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:05:58 2025 GMT
Not After : Feb 19 18:05:58 2026 GMT
Subject: CN=67bf5809-6330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d3:d4:a5:3a:7a:47:8c:b6:06:e2:e3:ac:51:
3b:78:1f:bb:d8:5e:99:98:ca:f7:35:5f:ba:3e:a7:
d2:d7:08:59:80:87:16:4f:d4:d2:bb:ae:1c:d6:fc:
e7:1e:94:5e:bb:26:c0:69:82:ff:2b:8d:6c:ba:c1:
8e:21:bd:d2:3e:95:c6:6d:48:09:33:97:95:ba:ce:
86:7f:d1:c0:1b:a1:c3:18:72:97:2a:f0:4f:25:44:
3d:d1:b6:38:c0:de:bc:53:50:7f:94:6c:61:71:f4:
bb:0f:f4:d2:cb:6f:b8:26:05:cb:48:5e:5d:c1:6f:
aa:aa:3c:cd:81:9d:4d:7b:96:51:a2:10:8d:21:51:
ca:27:ea:27:30:a2:d3:fe:77:74:b5:08:2a:3b:b2:
30:c1:c0:0f:23:95:7b:ba:08:42:d0:a6:dc:11:85:
39:8d:c3:fc:e6:4b:37:77:c2:bb:ff:66:d9:82:77:
f8:98:ea:df:32:ea:31:98:ae:75:99:16:6b:b7:8c:
e3:09:cf:2c:4a:c8:e5:48:f6:f4:90:50:a3:d6:8f:
3f:b2:7d:2b:6d:c8:4b:b0:ad:ad:f7:c6:26:cb:cd:
56:ad:21:98:9c:35:b9:51:a6:f8:5b:9b:8c:10:16:
4e:1a:39:d2:a5:bf:a6:f1:95:8c:67:20:4a:7e:dc:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D8:1D:0B:D1:0B:49:E6:A6:B0:99:74:D5:55:2D:44:FE:26:C1:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56304136F46C11EF9C3CD77A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.102.0/24
Signature Algorithm: sha256WithRSAEncryption
39:0c:9e:8b:15:93:38:8f:85:8e:15:2a:79:90:fe:b6:57:3e:
67:d7:23:f3:f6:9f:aa:3e:e5:22:3c:52:e6:a0:ec:35:9f:3f:
25:26:f3:50:78:97:2a:90:2b:36:1f:dc:31:dd:22:86:16:2f:
43:39:51:d4:cd:a2:26:1b:45:24:a6:0a:38:8e:7c:4d:cc:26:
5e:03:65:c2:bd:e5:70:0d:16:d0:61:ec:4b:fd:76:a3:02:6e:
c1:a9:1a:1e:47:6d:16:80:2d:53:26:17:b3:0e:b5:07:98:1b:
02:fa:0d:fc:50:6a:d2:a4:ad:d7:84:24:9e:80:c3:56:42:6f:
b4:4f:e5:7d:e0:17:e6:1a:ff:63:1f:a3:4c:99:eb:ad:9a:25:
a6:c9:18:80:34:c8:8d:f4:17:97:a5:34:a9:90:8a:6f:6a:fd:
13:08:e8:c2:e4:1f:d9:4e:19:c5:41:c1:8b:fd:fa:42:82:74:
0a:8f:2e:d3:3a:71:3a:4e:b2:0f:90:eb:06:b7:7d:97:aa:47:
b2:a0:ca:10:04:fd:af:78:ab:50:51:a8:e1:5e:ef:d9:83:6c:
f0:9f:19:93:db:09:23:0a:9a:b0:ed:fe:db:42:a3:dc:71:d9:
a8:a9:7c:2f:c5:f8:64:5d:e2:6b:c5:bf:3f:6d:8d:6b:99:83:
1c:24:e6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:30 2025 by rpki-client