Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC0D93C4CDB111EF874994A0762E951A.roa
File: FC0D93C4CDB111EF874994A0762E951A.roa (raw, json)
Hash identifier: 9F8FEw6xNTm9PyPaeIeHq9r2z6BDKhUjZZm0NiW07E8=
Subject key identifier: D9:17:EF:91:6E:4C:30:5B:97:75:CE:AB:98:1D:64:B0:F6:65:D4:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010187
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC0D93C4CDB111EF874994A0762E951A.roa
Signing time: Wed 08 Jan 2025 11:16:19 +0000
ROA not before: Wed 08 Jan 2025 11:16:16 +0000
ROA not after: Sat 13 Dec 2025 11:16:16 +0000
asID: 984
IP address blocks: 156.255.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65927 (0x10187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 8 11:16:16 2025 GMT
Not After : Dec 13 11:16:16 2025 GMT
Subject: CN=677e5e83-ac18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:59:3e:61:aa:b4:b9:5b:c1:15:b8:cc:e0:
d1:55:9a:8d:6e:59:61:87:be:9d:7d:50:aa:62:e8:
66:ed:e1:76:25:8e:44:20:e3:82:49:41:bb:fd:04:
9c:01:af:6c:6f:3a:d4:f3:2f:44:73:9e:6e:4b:81:
57:e8:84:29:70:63:f2:75:3d:e1:b2:88:f7:18:5b:
ad:1d:e4:34:f6:49:aa:94:22:8b:b9:7b:f5:9b:0d:
c5:5b:c5:3b:8f:ca:cc:d6:f4:4e:36:c4:7a:f2:e2:
c8:89:46:63:de:87:f3:52:b1:49:d7:1b:f6:4b:a9:
77:e1:5c:23:c8:af:0d:dd:be:a3:b3:13:c4:f0:f5:
7d:59:27:b5:19:c6:0c:5f:ef:13:f6:cd:5d:d5:c8:
42:d8:1d:a6:16:f3:05:11:9d:03:30:6a:bd:cd:dc:
1b:d2:11:d3:19:e5:1b:b3:e2:29:be:09:96:5d:2d:
f9:52:5d:50:d1:94:bb:56:ae:13:be:dc:32:bc:e1:
4a:9c:ec:e1:86:32:e2:9d:76:f1:7b:61:62:a4:89:
d0:81:ff:97:17:c5:ef:f3:eb:41:6a:c0:e5:38:a7:
2d:90:d2:93:88:d0:42:0b:08:aa:8c:6d:d3:38:ce:
2e:ca:ae:06:ec:2f:d8:10:f2:56:26:91:6b:01:75:
ed:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:17:EF:91:6E:4C:30:5B:97:75:CE:AB:98:1D:64:B0:F6:65:D4:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC0D93C4CDB111EF874994A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.79.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:4d:63:a6:dd:82:3d:1f:30:9f:95:ff:ae:5f:2d:6c:1f:04:
b8:37:d3:83:af:9a:56:97:d9:6d:34:c8:42:00:1d:d4:1b:90:
9b:5f:3a:bf:7c:34:1d:17:32:98:02:a3:00:b0:58:ce:d5:9c:
f4:e4:3c:1a:77:39:b2:7c:5a:bd:3e:9a:21:41:e7:18:fe:81:
b8:76:5e:29:9c:42:b4:fc:aa:c6:b4:ca:2e:03:1e:f6:ad:a9:
95:72:0e:fb:74:7d:5d:f4:68:4c:f6:b0:50:61:fc:cc:27:3a:
8c:34:58:a5:87:ca:8e:d4:a7:e4:8c:f8:96:18:08:bb:ff:e9:
3e:c3:ce:c5:1c:e6:f9:e1:be:79:d5:0b:f8:c8:0c:af:fb:50:
ce:9d:49:50:da:0d:53:98:10:32:69:6e:20:27:de:72:3b:9d:
28:b7:4c:9d:79:05:5d:95:46:89:b7:b4:1a:d4:cb:f0:f0:54:
1b:a4:85:5a:0c:07:cd:34:5f:ce:b5:1c:50:6c:e6:52:07:7d:
70:8f:29:d3:6f:03:5f:a3:92:1e:97:9b:06:f2:ca:0a:56:75:
ea:06:b3:ca:e7:51:2e:da:38:61:34:1b:9e:e6:fe:65:71:eb:
8b:f4:1f:fa:73:08:50:90:ff:05:73:45:aa:c0:38:81:8d:8a:
2f:28:d5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:33:35 2025 by rpki-client