Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CE518BEF42711EF9FF8AD95762E951A.roa
File: 2CE518BEF42711EF9FF8AD95762E951A.roa (raw, json)
Hash identifier: 4nyODBIZOhEfL9c7eyVJadt6Mph3hKgnfORaJYmHhTc=
Subject key identifier: BD:14:68:F1:0D:1C:C5:1A:F2:BF:34:7C:20:ED:D1:0D:28:33:C0:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CE518BEF42711EF9FF8AD95762E951A.roa
Signing time: Wed 26 Feb 2025 09:50:57 +0000
ROA not before: Wed 26 Feb 2025 09:50:53 +0000
ROA not after: Thu 19 Feb 2026 09:50:53 +0000
asID: 984
IP address blocks: 156.252.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77996 (0x130ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:50:53 2025 GMT
Not After : Feb 19 09:50:53 2026 GMT
Subject: CN=67bee400-4a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:40:53:64:f9:5a:9f:05:49:40:64:71:09:11:
3c:03:f8:63:03:aa:c9:b9:26:bb:78:ce:c8:6c:18:
8b:f8:74:a6:e3:3b:18:db:12:2f:12:00:b1:b7:23:
75:76:a9:d5:57:52:d9:55:e3:84:bf:ca:67:0a:16:
a4:f2:e6:9e:82:d3:e1:5e:4f:61:bd:9a:10:e4:ce:
23:c4:f1:ef:e3:1b:ac:10:de:67:21:ea:2a:f0:68:
76:c4:62:65:7d:89:ae:5b:9b:cb:cd:a8:c0:c5:a0:
0c:e3:84:5a:c0:3c:9b:80:18:fa:c3:8e:eb:2a:5a:
f9:29:e7:02:93:83:73:30:49:27:98:4b:3f:a2:d9:
53:0e:ec:cd:e2:2b:21:19:d2:36:58:ff:d7:ff:c9:
01:b4:40:86:5d:09:82:e5:b1:9e:bb:c5:06:8e:d1:
e4:4e:3f:f4:a9:52:a6:5e:11:92:5a:7b:a9:d2:78:
5e:51:f2:02:a1:84:b0:f1:40:a2:99:f1:41:fa:47:
71:b0:cc:b7:57:d4:65:df:95:f4:20:da:23:9d:9e:
f6:47:df:99:36:ee:ab:78:9a:e4:34:77:6b:e2:57:
4b:73:08:d1:a1:2b:35:ad:a9:f9:4d:de:df:46:dd:
1f:5c:bc:cd:b1:3f:5f:d8:06:e2:fd:6b:1e:2c:bd:
5b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:14:68:F1:0D:1C:C5:1A:F2:BF:34:7C:20:ED:D1:0D:28:33:C0:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CE518BEF42711EF9FF8AD95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.71.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0b:c0:fe:d2:ad:32:a2:96:2e:a8:a1:9c:2b:38:cb:bc:4b:
bd:1f:66:ee:5b:de:5f:fb:40:b8:00:6e:35:65:77:4e:a0:52:
54:88:cb:a3:df:d0:da:77:50:94:d9:23:39:13:9b:ee:ff:d3:
9f:19:77:24:ad:5a:71:a6:03:2d:17:a9:fe:b0:fe:d2:dd:80:
e9:10:84:84:fb:1a:bf:ee:37:a3:e2:6b:cb:a8:35:1e:1d:31:
89:4a:82:ec:52:46:28:fb:c8:67:77:50:20:3b:c1:31:4a:f8:
7e:16:fe:97:9c:ae:f1:d2:6b:7e:94:fb:54:05:6e:a7:a2:6f:
83:d6:a8:3b:58:a2:18:2f:10:de:90:a8:76:89:e6:e3:e0:c7:
b5:03:0e:b9:69:2d:33:66:32:b9:f1:53:63:b3:8b:3a:02:62:
81:a5:f4:87:0e:84:43:d6:87:0c:a2:b9:d2:88:d3:28:9d:26:
32:d5:9e:c2:19:c8:b9:49:af:16:f9:13:c6:75:61:01:59:88:
1f:d0:84:35:f9:f7:35:e4:e7:63:7c:53:ab:2d:53:7b:2d:a4:
82:56:48:28:25:69:f6:49:5e:8c:a7:35:1f:0a:a5:3c:57:17:
d2:b5:ca:db:b8:8e:a8:5d:82:2e:75:e2:0c:b0:b4:3b:e9:77:
19:84:04:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:07 2025 by rpki-client