Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/955AE786F60A11EFB93B0298762E951A.roa
File: 955AE786F60A11EFB93B0298762E951A.roa (raw, json)
Hash identifier: RSNnRwcH60SJgOh+Om3t9KlSbrXTCmEr5K3drra/a2Q=
Subject key identifier: AB:FB:D1:56:36:6A:F2:52:55:AF:76:B2:BF:40:86:FD:7B:46:82:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F05
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/955AE786F60A11EFB93B0298762E951A.roa
Signing time: Fri 28 Feb 2025 19:31:19 +0000
ROA not before: Fri 28 Feb 2025 19:31:15 +0000
ROA not after: Sun 13 Apr 2025 19:31:15 +0000
asID: 138915
IP address blocks: 156.244.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81669 (0x13f05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 19:31:15 2025 GMT
Not After : Apr 13 19:31:15 2025 GMT
Subject: CN=67c20f07-8e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:78:ce:ee:0a:51:39:67:9a:2a:ad:ef:b9:
57:9b:53:13:26:03:8d:b7:62:c4:33:7f:fd:c1:de:
25:c6:78:1f:2b:b7:73:6b:97:f7:e0:ee:4b:51:40:
ac:9a:97:d2:bf:11:6d:34:1f:1f:19:d3:85:c0:96:
86:0b:a7:26:cb:f9:bd:26:63:da:76:57:89:db:55:
f7:5a:4f:63:d8:30:d9:d5:f3:fb:3b:ad:e1:7f:3f:
cc:a4:78:be:1d:30:1e:18:ae:de:da:5f:cb:61:22:
12:cf:60:66:58:3a:ec:cc:38:d7:c7:4d:b0:bc:fd:
6d:ab:7e:a7:51:34:3d:aa:8c:90:9c:c7:03:98:d5:
b7:48:fc:60:3d:21:b8:26:a4:10:37:15:23:ab:cc:
e9:69:5f:d3:43:d0:49:78:2d:8d:d7:ce:b1:b7:13:
fd:f6:e8:87:10:1e:8e:31:ec:0d:d3:b6:39:22:91:
9b:15:9f:a1:8b:a2:93:cc:bc:58:e8:bf:52:2e:9e:
3a:65:3b:b2:05:17:bf:d0:e0:fb:d6:62:0b:9f:2c:
48:e9:f6:1b:c5:47:04:e4:1b:91:ba:21:0e:bb:ea:
2c:9a:76:e8:5a:90:c9:1d:56:31:f0:bb:0a:56:2a:
f8:1c:62:c2:6e:ea:20:4f:be:d5:2a:bc:e9:77:eb:
0d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FB:D1:56:36:6A:F2:52:55:AF:76:B2:BF:40:86:FD:7B:46:82:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/955AE786F60A11EFB93B0298762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.5.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a3:53:10:8c:a3:df:42:9b:88:fb:09:38:b4:e5:20:fd:69:
3e:34:ef:93:d0:6f:35:28:aa:f1:c4:f4:66:4b:b4:38:2e:e4:
d4:c0:2a:5e:ea:2a:46:7d:d8:c9:50:b6:fe:b1:fb:f7:28:3e:
09:06:32:22:75:23:18:16:fc:a8:b5:d2:c6:2e:62:ea:17:4d:
71:80:5a:68:05:14:e2:83:4c:79:98:cd:b8:17:15:06:69:4c:
2a:5c:3a:92:e6:3c:f3:5a:11:0d:b1:a4:a3:3a:83:c5:8d:e9:
6c:73:48:9d:88:ff:c7:14:16:d7:77:7b:91:35:fc:df:2b:1c:
35:8c:9f:ce:f2:6f:fb:28:fa:30:6f:f0:58:e5:48:a5:17:b1:
9c:ec:49:22:ee:12:38:e5:9c:9c:b4:ae:22:70:4d:79:d9:f8:
16:6a:68:52:d5:96:06:5f:aa:0f:00:83:ef:20:96:98:ec:bb:
3f:6b:5c:37:42:f6:48:3b:bb:dd:47:40:bf:f7:a4:31:86:d0:
b4:e5:1a:58:87:14:38:08:d0:86:65:e8:e8:32:eb:56:b5:59:
a9:b8:91:ee:38:60:e6:91:f3:e1:09:2a:c8:bd:c5:55:95:54:
68:02:74:46:a1:0b:e8:7f:62:0e:17:a6:ad:39:0d:1c:cf:11:
4e:ee:a1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:50 2025 by rpki-client