Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5E8E8DEF42E11EFB8701F4C762E951A.roa
File: E5E8E8DEF42E11EFB8701F4C762E951A.roa (raw, json)
Hash identifier: U0D7tsme4iDiglZrJYhB9fSfow5luRo4YLgWLRFAiIA=
Subject key identifier: 1D:8B:72:53:A8:2A:D0:4C:42:1A:E6:29:30:C2:EF:52:8E:D3:7A:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01315C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5E8E8DEF42E11EFB8701F4C762E951A.roa
Signing time: Wed 26 Feb 2025 10:46:13 +0000
ROA not before: Wed 26 Feb 2025 10:46:10 +0000
ROA not after: Thu 19 Feb 2026 10:46:10 +0000
asID: 984
IP address blocks: 156.245.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78172 (0x1315c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:46:10 2025 GMT
Not After : Feb 19 10:46:10 2026 GMT
Subject: CN=67bef0f5-1221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:8d:67:09:6a:a2:bb:90:dd:d5:e9:18:81:
3f:eb:66:be:5f:18:65:bf:cc:d7:82:27:eb:fc:66:
5a:73:a0:3f:65:96:1c:ad:94:be:94:72:5b:d6:ec:
35:eb:97:6b:f3:c0:0a:98:a9:da:c2:12:da:5c:0b:
10:0f:82:d2:c2:65:5d:e0:55:4d:89:e9:d6:0d:c6:
f9:a9:b6:75:d9:90:bc:8f:84:43:03:55:ac:d6:2a:
ec:fd:69:f0:0f:00:df:18:0a:41:a0:cc:d9:9f:d8:
16:d4:b4:e8:99:1e:27:b9:ae:63:8c:b0:6a:b8:cd:
5b:db:cd:61:96:de:ce:4b:e1:e0:27:df:4c:4e:c9:
4d:e6:ce:7b:bf:21:05:b3:02:9b:69:09:9d:ac:3c:
39:3a:0a:a3:bf:1f:f4:eb:4c:9a:2f:95:19:21:13:
3f:92:ac:a8:ce:c7:2e:25:b2:ca:f9:7a:79:5b:97:
66:f5:17:74:6e:5a:2a:02:e2:39:5c:4b:45:d6:3d:
49:54:c9:1f:a2:ff:87:9b:38:15:e2:e4:19:3e:40:
fa:5b:70:c2:fe:55:63:ac:85:f0:88:b7:6d:c0:1c:
27:71:f6:d3:52:18:7d:16:45:da:1e:a1:0d:2a:0a:
83:56:1b:4f:05:22:c1:ae:bd:54:c9:a5:9f:5c:d1:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8B:72:53:A8:2A:D0:4C:42:1A:E6:29:30:C2:EF:52:8E:D3:7A:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5E8E8DEF42E11EFB8701F4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.141.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ca:6f:f2:f3:53:7c:fc:82:13:13:8c:c3:e4:97:5b:4b:92:
dd:eb:0f:e0:c1:29:d4:89:44:a6:da:41:ed:f7:ab:5e:5f:92:
1b:21:b9:14:7a:b4:7f:eb:5b:48:a7:15:e3:72:b8:b0:c4:97:
8e:ff:41:ae:07:71:69:87:75:e7:34:68:5f:f6:02:18:d4:c3:
3d:b8:91:eb:1a:55:26:3d:35:a2:02:1f:72:77:5a:f2:5e:bd:
0a:e6:7d:f9:23:a1:35:68:54:f5:56:a6:e5:02:76:99:26:b4:
0a:15:01:66:29:ae:4e:3a:26:47:45:92:6c:51:00:a0:3b:c6:
46:0f:fe:aa:ec:af:ee:07:e0:e2:58:4a:7a:57:f4:9b:8e:9f:
82:3d:20:3f:ba:d1:ab:d2:43:ed:09:2c:d4:06:76:04:36:9e:
de:2e:97:92:4a:76:e4:f3:1d:19:56:18:56:47:c7:f1:09:65:
fb:d8:e2:c3:29:e3:a6:9c:00:89:b7:af:3e:13:c9:04:93:88:
6f:0e:2c:4f:ca:ab:b8:e8:b8:40:43:a1:2a:d6:9f:22:e5:71:
aa:dc:e7:b3:82:01:09:55:b8:00:80:9b:4b:a7:8b:12:ef:9a:
62:81:68:94:0c:01:8e:eb:6c:fa:7d:a5:54:66:0f:fa:bd:e4:
77:85:80:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:40 2025 by rpki-client