Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8D1805AF46011EF8F819FAB762E951A.roa
File: F8D1805AF46011EF8F819FAB762E951A.roa (raw, json)
Hash identifier: bEgpTBeiM8Db4jOC5RUFw4lGpZQtqRSuGjt1dOv9XfE=
Subject key identifier: 42:70:ED:3F:27:87:37:A9:7E:E1:CE:20:61:80:95:FF:67:E0:99:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013502
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8D1805AF46011EF8F819FAB762E951A.roa
Signing time: Wed 26 Feb 2025 16:44:40 +0000
ROA not before: Wed 26 Feb 2025 16:44:36 +0000
ROA not after: Thu 19 Feb 2026 16:44:36 +0000
asID: 984
IP address blocks: 156.245.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79106 (0x13502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:44:36 2025 GMT
Not After : Feb 19 16:44:36 2026 GMT
Subject: CN=67bf44f8-2a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:62:02:c7:5d:39:64:37:cf:a0:5b:23:9e:
6e:0a:c1:27:0f:d6:c3:f0:f1:4b:f4:a9:2c:e4:3d:
97:2e:42:23:bc:d7:45:41:d7:4b:86:33:ad:35:66:
c5:71:fc:31:ee:4a:0c:f1:2a:24:a2:19:49:c3:8d:
11:d9:e1:25:b5:ab:31:f7:f7:56:75:f2:2c:73:8c:
2f:f3:3c:87:80:99:79:d4:06:b4:48:de:0a:d4:78:
ed:eb:5f:56:c5:c5:0f:cb:3d:80:04:76:95:18:db:
c3:fe:b6:4c:51:d0:5e:93:55:b0:33:0a:89:9c:6b:
09:c1:d8:dd:cb:bb:58:ee:0a:0d:4e:2b:7e:8c:c2:
cb:80:16:73:7e:6c:3f:b5:0f:02:a8:97:39:57:e7:
cc:07:4d:19:26:9c:1e:2e:bc:4e:e9:a4:52:9a:77:
b3:76:7c:0b:66:4f:39:89:01:76:ae:12:30:fe:9a:
aa:de:c6:6b:c1:a1:07:b0:cc:b3:1b:29:a1:86:5b:
b4:9a:2c:e2:43:fe:40:0c:e4:cb:b7:eb:72:dd:91:
03:e5:f9:12:ad:45:07:37:fa:3c:bd:bd:d4:a3:f6:
c1:99:d8:1b:42:02:d8:aa:93:20:ab:27:2a:98:be:
09:51:86:a8:fe:db:8d:21:46:09:d9:8d:81:10:4d:
36:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:70:ED:3F:27:87:37:A9:7E:E1:CE:20:61:80:95:FF:67:E0:99:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8D1805AF46011EF8F819FAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.66.0/24
Signature Algorithm: sha256WithRSAEncryption
38:dc:dd:a9:3f:b0:d1:88:33:67:89:ed:d7:63:89:9e:7b:b0:
20:2b:1d:2b:78:0a:a5:0b:6d:0a:9c:70:69:47:b1:07:29:c5:
47:33:8d:a0:c7:67:a5:fe:01:3b:89:3b:cb:a5:d9:3c:2a:75:
3e:0b:45:13:65:8e:43:ab:a6:2f:88:70:d4:3f:23:41:a3:e5:
eb:2f:6d:4a:9d:84:8f:64:40:ac:6e:51:7a:09:39:14:a5:0d:
11:1a:78:5b:56:ff:21:4d:db:dc:1b:d4:08:e2:3c:6c:d8:ff:
90:da:d5:38:72:bb:8a:94:bc:57:53:ad:88:b6:1c:3b:b3:7b:
90:0f:24:25:3d:aa:c0:12:42:ab:86:3b:2d:f0:b6:06:3f:fa:
dc:12:a5:86:56:75:a7:6a:ac:dc:f4:a4:80:c2:f6:92:5c:4f:
3a:f9:3f:77:b1:a1:18:e9:75:62:de:02:7f:0a:67:7f:bb:88:
7f:59:dd:01:fa:6b:a8:70:5e:86:a9:ec:6d:44:5c:ae:5b:25:
2e:e1:05:44:4b:d0:1f:e7:42:85:53:c6:11:cc:f6:21:c5:dc:
5a:56:03:11:5c:0d:b5:e0:3e:22:5d:dd:e3:0e:6a:4c:8d:47:
81:ac:f6:14:05:54:79:64:b0:24:b6:bb:10:d6:ae:95:25:2e:
47:50:ba:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:02 2025 by rpki-client