Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C2CCFBEF46711EFA73F9558762E951A.roa
File: 5C2CCFBEF46711EFA73F9558762E951A.roa (raw, json)
Hash identifier: Fg8HZNNl1SITEWo8oXP3wZzA8W9YDdJvbsjyIVAS2rc=
Subject key identifier: 0A:12:B3:4E:48:C8:FE:6B:74:8D:21:FB:E3:24:60:56:4B:BF:5F:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01359F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C2CCFBEF46711EFA73F9558762E951A.roa
Signing time: Wed 26 Feb 2025 17:30:24 +0000
ROA not before: Wed 26 Feb 2025 17:30:19 +0000
ROA not after: Thu 19 Feb 2026 17:30:19 +0000
asID: 984
IP address blocks: 156.245.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79263 (0x1359f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:30:19 2025 GMT
Not After : Feb 19 17:30:19 2026 GMT
Subject: CN=67bf4fb0-0fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:b9:e5:33:fd:9d:bb:14:74:b1:6e:72:ec:
85:13:dc:6a:3b:8e:d0:2b:bc:75:9e:2f:49:08:46:
68:ac:00:02:89:ca:3f:17:26:33:63:8c:c4:48:c3:
dc:ad:58:22:0f:68:4a:34:12:b0:c4:75:51:98:d4:
bb:a7:5e:4f:68:89:34:bc:a7:82:2f:b1:f7:23:e1:
f5:2d:29:b0:81:79:13:4c:84:73:dc:3b:7d:ab:16:
53:d1:b8:e9:fc:d6:26:28:a4:92:0a:42:5f:c8:be:
f4:41:1a:62:f8:c4:6a:b6:89:18:a3:02:4b:7d:e4:
31:dc:6f:fb:5c:ed:c0:7a:8d:d8:c6:9e:ee:4e:87:
e9:5e:f9:4e:64:a3:26:dd:32:88:93:a1:d2:0e:58:
32:a2:79:80:01:66:68:eb:a4:78:55:fd:a6:cd:68:
ee:b8:11:20:b7:c4:45:24:55:95:ea:fe:24:c1:47:
40:7d:de:9f:7d:c9:c4:76:6f:fb:cb:9b:6d:5f:c7:
d3:98:0d:12:3d:13:46:a3:f9:28:6e:14:db:86:c5:
7f:78:e6:f2:e5:78:d6:4c:f1:43:aa:39:a8:1f:e8:
b1:ee:12:df:86:c9:94:43:15:88:2c:d0:c7:a1:52:
36:4f:58:9c:2b:c4:66:89:62:ca:91:12:ef:18:56:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:12:B3:4E:48:C8:FE:6B:74:8D:21:FB:E3:24:60:56:4B:BF:5F:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C2CCFBEF46711EFA73F9558762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.86.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e4:7f:2c:e6:5a:bb:20:59:16:47:fe:b3:6b:1f:6b:48:14:
92:6d:5e:fc:c0:a8:c1:d0:d4:49:1f:31:a8:fb:b2:e4:92:24:
ab:63:1d:88:86:4a:c6:f9:8d:71:f0:1e:0b:06:b2:ea:c4:ed:
25:d4:27:71:5d:d1:00:c7:68:3c:2b:97:42:0c:5e:71:08:c6:
d9:11:27:45:d8:3c:61:40:65:1c:9c:ab:f5:cf:70:6d:b5:1f:
5b:ce:43:79:4b:33:df:ae:71:ee:fb:03:f2:2c:63:53:5a:f3:
2a:ad:81:5c:70:83:62:80:bd:b3:55:36:17:85:3f:a0:3c:b8:
5a:50:fb:d7:00:24:c6:c1:4d:12:cc:6c:60:58:5a:16:60:0c:
8a:13:7b:1d:3a:32:96:f5:e6:e8:48:11:d3:26:25:83:ed:f0:
a2:33:38:f5:d7:c7:90:9e:59:f1:5c:47:81:9b:ec:38:a1:12:
92:4a:83:58:0b:ec:eb:b3:aa:c3:5f:8a:54:c8:72:a5:8b:1d:
ff:d1:a0:ac:15:fa:2c:97:c5:09:ab:4e:29:fb:7f:c2:4d:cd:
81:e0:01:c5:52:98:2f:fd:5a:88:8f:7a:ec:3c:d2:17:ac:5e:
09:c4:3f:64:88:3c:09:a2:d1:88:39:a7:52:29:d6:e1:3c:98:
3b:f1:b1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:12 2025 by rpki-client