Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA644E4CF46611EFBC8DCC57762E951A.roa
File: FA644E4CF46611EFBC8DCC57762E951A.roa (raw, json)
Hash identifier: qFdzJk4ycJ9/vufNqJw1K7NoZ3/FWHSWljxfAD4U3Fo=
Subject key identifier: 05:97:F7:7D:16:FC:8B:40:CE:0F:61:62:48:D2:BC:EB:7D:D6:F2:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013596
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA644E4CF46611EFBC8DCC57762E951A.roa
Signing time: Wed 26 Feb 2025 17:27:40 +0000
ROA not before: Wed 26 Feb 2025 17:27:36 +0000
ROA not after: Thu 19 Feb 2026 17:27:36 +0000
asID: 984
IP address blocks: 156.245.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79254 (0x13596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:27:36 2025 GMT
Not After : Feb 19 17:27:36 2026 GMT
Subject: CN=67bf4f0c-c9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:75:42:3e:9f:32:88:9b:af:01:06:85:11:
2a:b6:9d:33:ec:3f:ad:fc:e1:fc:58:42:6b:51:dc:
73:12:e9:be:fe:29:13:2b:0d:10:aa:78:1c:c7:b9:
52:ef:07:77:49:62:e1:15:6b:b6:c1:ae:63:6f:e7:
70:b3:6e:3d:99:97:a1:b3:a4:ec:3c:a8:2b:17:89:
56:76:76:5e:7f:86:26:46:29:66:3d:27:85:22:53:
ac:68:88:b3:7b:98:5c:4d:87:c9:d1:01:7a:8a:00:
b9:0f:ad:5c:e6:a4:40:f4:df:2d:d1:af:3e:3e:10:
a6:13:8b:6f:33:6b:75:e7:11:b1:26:14:29:54:7e:
76:09:57:6e:dd:01:f2:d2:46:87:96:e9:c9:57:83:
2c:80:4f:c8:83:37:0f:95:dd:90:c6:52:54:83:21:
fa:69:f2:8b:f1:c5:70:cf:27:4d:e7:02:20:63:c2:
00:c9:b4:32:0e:f8:0d:b8:d6:28:87:b0:e8:e6:6a:
3b:12:47:3d:39:0e:5b:61:00:f6:ef:11:c1:da:92:
2d:f1:2e:6c:bd:b2:db:cd:f4:0b:42:9b:8e:23:79:
a4:25:c7:ce:10:68:ac:38:68:c5:86:ec:dc:47:b9:
28:51:f8:1d:64:c6:af:a5:e2:7d:4c:f3:5c:a9:7f:
60:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:97:F7:7D:16:FC:8B:40:CE:0F:61:62:48:D2:BC:EB:7D:D6:F2:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA644E4CF46611EFBC8DCC57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.85.0/24
Signature Algorithm: sha256WithRSAEncryption
89:06:c8:2d:5c:4b:7c:bd:ba:31:50:df:b0:96:3c:93:89:b6:
52:15:c1:9f:5e:87:36:3f:0e:45:7c:0e:be:42:c9:7d:78:14:
d3:db:38:c5:97:92:f3:39:bd:73:0a:eb:df:18:ad:c8:28:76:
e9:2d:33:ac:e6:65:27:fa:b4:6e:74:64:1c:98:4b:d0:9a:92:
82:44:e5:65:02:bd:b8:f7:05:09:bb:44:8f:c3:13:bb:5b:43:
7d:83:d5:78:f5:36:3c:c9:8e:c9:b4:02:4f:9c:27:0b:17:f5:
cd:39:53:b2:1d:89:ca:3a:36:1f:82:2b:8e:82:5e:84:21:ff:
bb:9c:cf:ae:10:ef:5c:8e:38:66:d0:5e:76:81:e8:08:8a:c4:
1d:98:87:da:2d:de:ea:5d:4c:4c:f9:69:61:c3:07:b9:93:fb:
b9:19:35:33:6d:ec:42:98:92:b2:2e:08:a1:62:68:6e:e5:f9:
fb:aa:7c:9d:93:2d:cb:fb:37:7b:03:a7:f9:ff:20:f4:71:4c:
3b:53:f1:b0:d7:d0:9e:ff:c4:bc:75:ce:5e:89:a9:9b:ab:91:
0c:d2:30:b4:54:fe:b6:a1:3e:c5:de:c0:4c:24:b9:79:73:93:
23:5a:8a:49:a2:52:5e:68:bc:3f:c8:f4:50:e0:9e:a8:5e:e3:
56:73:80:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:53:57 2025 by rpki-client