Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2453A2BCDFE411EFB3EB7274762E951A.roa
File: 2453A2BCDFE411EFB3EB7274762E951A.roa (raw, json)
Hash identifier: LcgQDdSrBjfKQ6JiOPg0+hYc7zC23WHUYvtdEg7CUX8=
Subject key identifier: 3F:DC:40:C7:16:6B:7B:C8:E3:BC:A6:58:23:AA:E4:48:87:10:33:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01160A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2453A2BCDFE411EFB3EB7274762E951A.roa
Signing time: Fri 31 Jan 2025 15:00:43 +0000
ROA not before: Fri 31 Jan 2025 15:00:39 +0000
ROA not after: Mon 12 Jan 2026 15:00:39 +0000
asID: 209242
IP address blocks: 156.238.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71178 (0x1160a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Jan 12 15:00:39 2026 GMT
Subject: CN=679ce59b-e169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:3d:60:6f:40:24:3b:42:2c:28:9a:9c:81:
23:21:50:d6:31:7a:9d:87:38:f8:f2:12:8e:40:c0:
64:cd:e2:76:b2:10:9b:aa:7e:14:56:b6:1b:16:2d:
ef:23:82:8a:4d:c3:1d:c0:16:9e:a1:be:0e:d6:8c:
d6:b4:8c:72:56:43:7b:51:26:0c:68:0c:50:00:3c:
77:46:64:81:2b:35:c0:48:d3:a2:f6:66:46:6b:3d:
0a:9b:22:1e:9b:b3:ee:a1:ce:84:37:47:73:4f:6c:
5b:88:4f:19:d2:b6:75:7d:5c:a1:48:a6:35:b9:a7:
f9:fb:3a:37:b7:c9:91:03:dc:aa:f4:39:76:a8:f4:
b4:e6:c3:21:db:89:42:55:2e:0b:c9:ca:1c:da:83:
73:80:15:19:13:69:30:73:7a:79:76:c1:42:52:ee:
10:49:bd:13:09:d9:b3:32:c7:b0:00:55:a0:dd:f1:
ec:a6:a3:0d:e1:31:a5:2b:24:de:27:3f:1a:e5:a6:
52:ca:5e:8f:aa:98:24:25:75:a0:f7:4a:19:a1:1f:
5c:b1:94:08:cf:a4:30:02:2e:b0:14:d4:75:4b:aa:
55:91:25:7d:8a:99:64:fc:08:68:07:63:0f:c0:d1:
ed:48:63:ec:b1:fc:11:81:6d:0d:be:3d:19:48:27:
f3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DC:40:C7:16:6B:7B:C8:E3:BC:A6:58:23:AA:E4:48:87:10:33:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2453A2BCDFE411EFB3EB7274762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:59:57:b4:25:fc:bc:fa:ad:48:bc:b2:d9:62:b2:02:fe:3c:
f5:e9:43:15:59:46:ee:7f:7d:06:88:cb:e2:71:fd:88:98:0e:
b1:2c:d9:7e:37:3f:1f:41:d3:1c:e9:73:bc:f4:45:21:4b:91:
eb:10:7a:05:99:73:6c:9f:a2:3c:e4:a1:07:2f:fb:56:5f:94:
3a:a6:d2:3c:51:bb:0e:e6:37:c9:cf:e8:ff:cc:f2:a3:7a:f1:
48:de:1e:c7:15:f5:bf:d9:0f:55:d3:e3:19:6b:18:9a:9b:2b:
48:fc:d2:2c:36:cb:37:99:d3:ca:6d:08:e3:2b:d5:dd:52:ee:
31:aa:44:0c:60:63:4c:87:eb:d6:f5:2e:0b:3d:af:4a:19:80:
ee:b4:2c:90:10:09:50:35:81:b5:4b:af:4b:6c:e1:31:82:9d:
91:e3:37:af:d7:36:8a:87:ca:57:e1:13:34:d5:d2:1d:a8:bf:
d8:bc:a4:39:76:75:1b:a7:20:93:9d:d1:b7:75:f2:e0:8f:d7:
9c:63:e4:2d:8b:38:1b:41:66:77:c7:93:4f:83:e1:08:94:db:
6b:31:82:7f:ad:61:de:c9:76:ca:3f:1c:10:ea:84:e0:ef:5b:
a0:d8:03:7b:1a:e8:07:4c:d1:ed:22:ef:d4:67:6b:0f:16:61:
dc:8d:ed:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:29 2025 by rpki-client