Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC045E5CF47211EFADB398A9762E951A.roa
File: FC045E5CF47211EFADB398A9762E951A.roa (raw, json)
Hash identifier: htjqPJMyauAjem/UzG+PR+sfzuNNrPA+YJBHoxNIBtA=
Subject key identifier: 58:68:96:75:9D:C0:10:30:BE:0F:5A:68:C9:47:58:31:6D:13:E9:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0136B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC045E5CF47211EFADB398A9762E951A.roa
Signing time: Wed 26 Feb 2025 18:53:37 +0000
ROA not before: Wed 26 Feb 2025 18:53:33 +0000
ROA not after: Thu 19 Feb 2026 18:53:33 +0000
asID: 984
IP address blocks: 156.245.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79541 (0x136b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 18:53:33 2025 GMT
Not After : Feb 19 18:53:33 2026 GMT
Subject: CN=67bf6330-889d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:a6:57:40:a6:78:7b:03:03:68:9a:9e:64:
f2:c3:1b:c8:08:2d:73:35:81:80:15:98:95:2f:b2:
fa:5a:87:89:21:71:dd:e9:b6:52:ad:5c:c0:75:b7:
0d:ac:69:9a:95:45:33:0b:0a:78:00:db:75:7f:c2:
90:bb:7a:54:6e:ea:21:45:b8:a9:7c:db:f6:ab:31:
99:0b:d3:fa:23:bd:e0:92:a7:42:1a:13:cf:f1:e7:
c5:01:5d:91:3d:aa:e3:f7:4d:b1:42:94:ba:52:f8:
98:e6:cc:32:0a:5f:e4:89:b0:98:cf:bd:ff:4c:60:
7c:dc:ef:a8:53:6b:44:3f:c2:61:82:b9:45:c2:a1:
0c:57:d1:b9:65:b0:ad:ba:40:31:c3:3d:6c:5e:93:
4a:7c:7d:cb:51:08:4d:d0:67:c7:9b:b8:56:11:0b:
3c:98:b9:ae:3b:9a:79:72:94:c8:26:00:d6:ca:08:
f1:1b:a3:d1:14:3b:b0:07:82:22:17:c7:ca:bb:5a:
81:79:99:08:a4:64:a0:71:4c:82:4f:83:6a:5d:c4:
36:40:ca:b9:a1:f0:4a:f4:df:92:c5:a9:88:e3:34:
00:34:b4:c4:b8:ca:d4:7b:b4:2b:55:3c:98:25:87:
56:64:ab:9a:2a:ca:a3:9c:ff:55:da:b6:30:49:15:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:68:96:75:9D:C0:10:30:BE:0F:5A:68:C9:47:58:31:6D:13:E9:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC045E5CF47211EFADB398A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:c2:dc:78:a2:94:23:ee:64:6b:6e:d2:55:08:22:a0:fd:56:
c0:73:19:93:b5:da:28:09:f9:69:d6:21:4c:13:8d:70:bc:2b:
4b:33:fb:21:1c:57:75:b8:d7:23:8b:67:f1:22:21:f7:fc:25:
51:a9:39:66:3d:7c:49:19:f2:d9:8e:15:97:9e:27:81:d4:48:
c6:f7:af:74:e2:ca:3f:b1:0c:0a:a1:2d:ff:93:36:6c:18:43:
e1:38:e2:b7:f4:61:bd:f1:32:90:1b:c2:e1:0c:0b:a6:29:7b:
22:e0:7d:96:11:90:98:d1:e3:6a:8d:48:93:b9:b9:bf:b4:f4:
61:6a:23:02:7a:d5:0c:c1:9e:ec:4d:bd:bb:19:db:c0:96:97:
28:12:91:b6:6b:cc:ed:cf:96:a4:f0:ee:83:d3:86:90:75:a8:
61:17:94:71:df:ca:e4:5c:fd:39:df:9a:76:7a:43:cc:07:fa:
e8:74:c4:71:97:7c:42:4f:6a:a7:66:92:c9:b2:53:be:1a:b0:
c4:4d:fe:f4:e1:04:ba:cb:73:d4:c5:79:ff:95:a3:7d:18:77:
42:ed:b2:92:80:3b:88:1a:30:3e:64:97:40:34:16:98:5a:3d:
f2:08:e7:8a:48:a5:0f:63:52:b3:5e:4c:81:a1:01:9f:87:70:
20:d4:70:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:01 2025 by rpki-client