Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5CBAC70F46511EFA677A44E762E951A.roa
File: D5CBAC70F46511EFA677A44E762E951A.roa (raw, json)
Hash identifier: GzRRzDIwkkJtNMkqZbhLoY9lNZxf3o6t9LFgIkgl8HI=
Subject key identifier: D5:D2:2C:4A:C3:E4:72:48:12:E5:23:C7:B0:AC:96:F4:27:D7:ED:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01357B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5CBAC70F46511EFA677A44E762E951A.roa
Signing time: Wed 26 Feb 2025 17:19:29 +0000
ROA not before: Wed 26 Feb 2025 17:19:25 +0000
ROA not after: Thu 19 Feb 2026 17:19:25 +0000
asID: 984
IP address blocks: 156.245.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79227 (0x1357b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:19:25 2025 GMT
Not After : Feb 19 17:19:25 2026 GMT
Subject: CN=67bf4d21-4de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:df:73:aa:4c:9e:90:6e:70:5e:b9:11:eb:
66:60:a3:e4:d9:0d:fa:7b:49:dc:3e:5c:88:fb:d8:
a7:51:76:32:95:ef:6d:19:3e:a1:7f:46:40:9a:bf:
8c:d1:fa:b5:d4:16:af:3f:41:dc:c1:53:6c:8d:4f:
7d:f3:87:87:aa:c1:ba:6a:0b:c1:77:73:0f:b3:d1:
3f:c1:0d:2f:ac:e8:8a:8c:74:27:42:de:49:f4:14:
89:d8:0f:e3:62:17:0f:e5:f6:07:07:b2:36:01:82:
27:46:c5:10:fb:19:6d:00:9a:63:85:80:61:4f:66:
6f:e8:7e:c7:c9:5a:dd:bd:84:e6:a7:14:a9:f1:51:
4b:2b:7c:df:3e:51:27:45:f2:ef:2b:0c:b9:fd:63:
8a:40:fe:4e:bd:6d:4a:7a:a8:51:8d:f0:f9:1f:69:
c5:a5:7b:97:97:6c:98:d4:8c:43:63:4e:d3:93:dc:
e0:f0:da:ad:5f:01:7e:38:d6:06:76:30:63:e4:24:
7c:63:b0:2b:1e:fd:e8:fa:1a:53:09:4e:c9:3a:b1:
67:e4:d9:81:b4:66:2a:77:9d:07:fe:31:13:10:4c:
e0:23:06:76:47:00:d0:25:b4:fa:7c:fd:15:e9:ed:
00:e0:5d:c8:1a:52:eb:8b:1a:9b:9f:5a:a0:cc:b0:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D2:2C:4A:C3:E4:72:48:12:E5:23:C7:B0:AC:96:F4:27:D7:ED:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5CBAC70F46511EFA677A44E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.82.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:0c:99:9f:11:41:4c:44:3d:7d:40:65:7b:db:1b:33:95:fc:
6a:03:02:f5:5f:02:46:94:80:3b:46:bd:47:74:7e:1f:b1:9a:
f5:b8:6a:1f:c8:39:76:20:14:ba:b3:8b:0e:0a:73:70:f7:ca:
92:b6:ed:f2:12:1c:c6:b6:ce:cf:1a:02:49:84:56:41:ac:60:
fd:e1:2e:43:bb:5e:2e:0f:4e:ab:23:97:b2:22:c9:97:7a:9b:
9c:1b:a4:73:26:f8:81:93:c4:e7:65:64:c6:26:92:f1:64:37:
bc:0b:0e:03:ee:a7:48:72:4f:40:ad:b7:56:09:0b:6c:71:f7:
33:c4:3f:bc:65:c2:84:39:93:f7:9f:c4:03:c7:21:cd:23:0f:
ff:5e:c3:38:d6:18:fb:31:da:b5:f8:ac:19:3b:b0:a5:b1:87:
de:b2:de:7d:8d:32:90:8c:64:4b:fe:91:5a:8c:c5:44:72:89:
f4:72:37:9e:e1:ad:91:bc:72:5c:9c:8d:e9:25:73:cf:7c:9c:
ff:b3:91:61:60:e3:16:be:05:36:f0:3d:57:ea:74:aa:e5:bc:
e1:1e:e4:24:fd:38:b5:dd:fd:3c:83:d7:8d:c9:4f:48:26:38:
91:52:7c:a6:2b:83:00:d5:b2:eb:dc:e8:ee:28:3e:50:93:ef:
df:0a:0b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:31 2025 by rpki-client