Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCE91CD400C211F0AB90DB58762E951A.roa
File: FCE91CD400C211F0AB90DB58762E951A.roa (raw, json)
Hash identifier: GijmMnk9why37RxCe32z+NIOFm637b2W7Y8cYjWEEM4=
Subject key identifier: A4:DE:41:E4:E5:78:92:F1:2D:56:EC:DA:C8:1E:F1:69:44:E8:1E:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCE91CD400C211F0AB90DB58762E951A.roa
Signing time: Fri 14 Mar 2025 10:56:32 +0000
ROA not before: Fri 14 Mar 2025 10:56:27 +0000
ROA not after: Tue 08 Apr 2025 10:56:27 +0000
asID: 206283
IP address blocks: 156.238.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83450 (0x145fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 14 10:56:27 2025 GMT
Not After : Apr 8 10:56:27 2025 GMT
Subject: CN=67d40b5f-ff58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:2d:9e:69:3d:9c:a9:f3:4e:40:d1:92:18:
6c:5e:d9:9d:e0:ee:cd:ca:4a:3d:9a:af:76:86:b8:
34:0e:26:69:eb:ef:c6:a4:31:c5:33:2a:25:70:7d:
68:9f:81:ca:09:07:1f:8e:8a:56:a7:72:20:79:59:
1f:7a:49:49:3b:55:2a:bd:79:73:cd:cd:66:e2:9a:
73:9e:fa:d5:a0:ec:1c:fb:4d:fb:a6:16:f9:16:76:
65:0c:63:b0:d3:47:23:ff:df:e0:89:0d:58:94:48:
88:74:00:5c:e3:1f:d3:de:51:9e:ac:19:81:39:01:
14:8b:19:89:a2:c0:14:ad:a7:43:42:05:72:26:d5:
45:04:93:3b:83:cd:eb:e2:f2:d6:e7:5a:17:63:af:
d7:02:24:06:12:9a:a5:0f:24:7c:f4:6e:39:00:73:
e6:7b:3b:c2:f2:98:e9:7d:f1:fd:47:8f:a3:70:72:
90:c0:b1:66:c4:84:87:d7:71:b1:80:4e:97:03:5a:
25:36:ff:91:1b:25:26:17:db:b1:bb:45:1c:47:4d:
13:89:75:6c:1a:76:ba:a9:92:d7:72:fd:54:aa:65:
7b:0d:19:b5:2e:6e:d7:ed:8a:86:d5:41:75:8e:1a:
b4:57:2f:b0:27:c3:14:1b:cc:91:89:91:e7:46:6b:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DE:41:E4:E5:78:92:F1:2D:56:EC:DA:C8:1E:F1:69:44:E8:1E:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCE91CD400C211F0AB90DB58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.85.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:6d:f6:ff:e4:f4:36:15:16:22:34:62:88:71:ca:3d:dc:0c:
0a:6a:04:52:0e:32:e4:d7:7d:25:6d:e0:de:d3:a8:75:01:16:
be:3a:9f:08:f5:a4:2a:af:4c:b8:df:71:e1:b4:84:61:f6:af:
95:56:d7:0d:42:03:d5:ba:b1:f8:2d:21:7b:6c:30:8c:d0:d9:
86:eb:05:b5:f0:60:e6:37:89:35:9a:1f:ce:a7:32:72:4b:4b:
59:bb:38:09:1d:1f:00:47:f5:0a:09:1a:30:d6:be:33:e3:8d:
03:66:a7:9d:f9:7b:0b:0c:c0:61:b4:a7:99:f7:b9:18:9c:3f:
18:29:e5:74:62:f1:d6:7e:00:9a:78:5c:de:93:66:a1:62:68:
a3:72:d0:d6:09:f5:1a:d5:5d:64:09:7e:5e:34:91:5c:9b:19:
96:63:5f:49:ff:90:1f:81:0b:48:3e:be:25:54:dc:df:a9:06:
0b:63:ed:38:de:28:67:f9:0e:2f:67:1b:5b:45:3e:9f:eb:32:
43:ea:08:62:ca:b9:c5:e7:72:4a:f7:15:e1:27:ff:a3:5c:dc:
80:91:ce:0d:8b:19:19:d6:18:99:f5:50:cf:d6:f5:99:34:86:
78:3b:4c:c9:94:0a:f2:c2:78:da:a6:c0:bc:e2:da:6c:a3:1a:
14:08:fc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:05 2025 by rpki-client