Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95922CE4F46311EFAEE781BE762E951A.roa
File: 95922CE4F46311EFAEE781BE762E951A.roa (raw, json)
Hash identifier: A81i6SSw5Pkl+Tz1idB7IXh+0RtJtJ1Bz/GCPmXOd9M=
Subject key identifier: D7:49:5D:E8:AD:03:FB:E4:0B:C9:01:5A:78:7A:11:26:21:50:06:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013550
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95922CE4F46311EFAEE781BE762E951A.roa
Signing time: Wed 26 Feb 2025 17:03:22 +0000
ROA not before: Wed 26 Feb 2025 17:03:18 +0000
ROA not after: Thu 19 Feb 2026 17:03:18 +0000
asID: 984
IP address blocks: 156.245.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79184 (0x13550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:03:18 2025 GMT
Not After : Feb 19 17:03:18 2026 GMT
Subject: CN=67bf495a-6d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:c5:2c:26:ee:ce:d7:77:3a:8f:bd:f4:46:
26:7d:a4:35:61:7a:79:59:9f:84:9f:20:03:d1:84:
02:80:7d:8e:e5:77:8f:ae:f5:88:e6:c1:e3:f9:71:
30:4d:7b:46:80:77:5d:8e:c2:95:57:c6:7a:3f:b5:
bb:e4:70:d4:31:ed:c3:5e:95:cc:46:2c:97:ae:eb:
76:11:62:fd:dd:2b:0d:b2:b6:92:15:4e:53:04:f8:
af:02:44:4f:4f:e1:b5:7a:4b:bc:f0:75:45:1d:f0:
b6:21:2d:37:fe:fb:af:d2:bc:10:4c:13:8f:b5:32:
17:3b:d4:6d:f2:d5:4b:fb:24:26:8a:4d:99:2e:6a:
e6:7a:20:95:4e:49:f0:66:73:56:08:36:7e:08:0f:
3e:fa:e3:78:a7:1b:85:13:39:26:bd:a9:14:3e:ed:
ee:06:3d:e2:f3:d4:59:1d:10:18:9d:2b:b3:2f:cf:
06:bb:d0:14:95:a4:bd:3b:9f:78:d1:70:7d:3f:70:
7d:af:74:03:0f:87:ab:b1:51:03:eb:f1:c4:f7:ce:
37:53:01:bf:d0:bc:74:b0:bb:70:03:77:ba:20:fc:
5e:1b:b8:8a:f7:02:f5:a3:3e:91:43:e4:dd:18:e2:
21:82:91:54:91:79:8f:94:30:b5:c6:b0:a3:96:31:
b0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:49:5D:E8:AD:03:FB:E4:0B:C9:01:5A:78:7A:11:26:21:50:06:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95922CE4F46311EFAEE781BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.74.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ec:4d:24:e8:f6:e5:31:f6:b6:1b:4b:57:4b:ac:dc:9b:71:
03:2b:80:47:ba:48:80:67:99:27:0c:69:71:84:b9:ce:3e:ff:
8c:45:dc:28:67:0e:43:f4:2a:5d:9b:61:a0:be:17:5e:9a:3c:
9c:4e:fe:bc:f6:c2:66:3e:b8:cd:f8:d4:cb:f7:46:d0:49:ec:
3f:2a:24:a9:49:bc:3d:e6:c1:7f:b7:03:bf:cd:7c:cf:ec:aa:
65:6e:b6:33:31:16:3d:7c:94:d1:0d:4d:69:50:39:d9:04:b1:
65:aa:d4:ed:2b:92:68:36:1d:d8:76:18:09:90:21:35:c8:9c:
73:ef:87:9e:99:87:93:78:b5:1f:55:77:f1:3b:86:c4:ff:ea:
1c:9d:7e:d8:a2:ee:3d:47:1a:2a:7a:22:1d:c4:2e:d3:aa:1b:
4a:b9:07:99:fa:f1:e5:ac:06:f7:20:5c:b8:88:51:f4:d5:81:
f5:56:2f:06:db:5c:41:df:ad:c5:e8:d5:b4:cd:bd:78:1b:25:
19:24:30:f2:5f:5f:8c:30:3e:9d:13:87:14:57:b8:ed:fd:68:
ec:3f:7c:7f:12:47:9a:dd:a9:c0:f6:d7:58:70:91:12:79:b9:
51:9d:33:c2:ba:1f:a2:57:f9:76:c0:ca:87:7b:e6:38:0d:40:
e1:35:2d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:19 2025 by rpki-client