Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E0E3AAEF46311EFAEB165BA762E951A.roa
File: 2E0E3AAEF46311EFAEB165BA762E951A.roa (raw, json)
Hash identifier: /tDEbsUkbfoXiioK1Pi/CCnCPIkBAJmGkFSptQzm2PQ=
Subject key identifier: 5C:FF:9B:93:21:0B:94:23:87:FA:4B:DE:56:AF:E3:AC:1C:2E:7E:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01354A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E0E3AAEF46311EFAEB165BA762E951A.roa
Signing time: Wed 26 Feb 2025 17:00:28 +0000
ROA not before: Wed 26 Feb 2025 17:00:25 +0000
ROA not after: Sat 19 Feb 2028 17:00:25 +0000
asID: 17561
IP address blocks: 156.233.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79178 (0x1354a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:00:25 2025 GMT
Not After : Feb 19 17:00:25 2028 GMT
Subject: CN=67bf48ac-1141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:ea:bd:17:b1:c9:16:ef:c7:c6:04:b4:3f:
60:e8:80:e0:b6:c3:3a:30:52:1e:24:07:38:5d:12:
c5:98:7d:6b:a8:b4:58:5d:88:d7:0e:36:6a:0b:f4:
80:76:87:0c:a0:15:a8:72:8c:c6:f9:15:10:b8:d0:
b7:ef:07:1a:23:d5:6e:ab:86:97:19:fa:21:ab:25:
97:1d:f4:81:c5:45:3e:07:81:e1:22:3f:0c:8c:ae:
80:9d:8d:c0:65:55:74:5c:ea:3c:2f:7f:d1:72:89:
b7:17:07:a9:42:0b:1d:b6:cb:6a:52:f0:e5:61:a3:
a0:8a:8e:77:9b:1e:47:ae:05:fa:f6:3f:1e:91:4d:
55:4a:e5:87:7d:09:99:84:86:58:92:97:c9:2c:5f:
56:13:9d:16:c9:06:a0:4e:0a:fa:eb:01:e0:cd:52:
be:aa:05:4c:c6:e7:4c:f7:8a:b0:e3:60:9a:5d:83:
a3:48:44:6f:af:63:ef:ff:e4:84:a3:a7:b3:1e:4a:
55:3b:9f:91:e1:47:a8:ce:ab:30:94:13:ea:f4:81:
3f:c6:53:a9:d8:50:18:fd:f6:c9:70:90:91:34:44:
8b:d2:84:c4:f9:56:cc:1d:22:af:f7:bb:66:5a:b4:
8c:eb:d0:3e:96:7d:f7:84:80:2e:73:6c:64:40:8c:
fd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FF:9B:93:21:0B:94:23:87:FA:4B:DE:56:AF:E3:AC:1C:2E:7E:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E0E3AAEF46311EFAEB165BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.48.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:d4:0b:66:40:a6:6d:cb:fe:e1:04:85:7c:26:18:7b:2b:2d:
62:93:f2:da:8a:fe:e6:89:88:8b:84:e1:22:52:24:64:64:d9:
9b:05:86:c4:7c:80:90:a6:52:24:eb:9f:f4:19:49:80:86:1c:
ab:d6:33:1b:b2:bf:aa:6a:fd:ad:fb:73:a3:d7:0b:b3:03:03:
0f:6b:b5:08:9d:e3:b7:d2:19:fc:29:9d:1d:66:bb:22:e0:d7:
03:62:0f:20:bc:bb:44:bc:b8:e4:a5:4b:1c:aa:5e:70:56:c8:
e2:a2:fd:93:32:ee:19:ea:13:c9:7f:c9:1a:fd:5d:1c:d2:27:
eb:69:fb:3c:75:74:24:fe:b8:71:f0:7c:f4:01:70:ee:9d:82:
61:f5:6b:d6:b5:7c:4c:80:8c:21:e1:7a:33:44:dd:fc:21:2b:
f4:5f:30:2a:4f:34:61:9c:b0:a1:eb:84:a9:ae:24:a2:ec:47:
18:e0:69:ae:df:71:e1:cd:e5:4b:2d:e2:b6:bf:0e:5a:90:e1:
ec:f5:06:1e:4d:94:5d:e3:5d:ea:9c:4f:2d:d3:fe:d0:81:8c:
33:c3:00:65:92:4b:1a:14:77:43:b2:35:c1:8f:9d:3b:2e:6e:
bd:5e:e6:2d:3f:09:27:8b:76:42:b2:ee:9c:79:85:ce:a6:27:
15:7e:4b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:37 2025 by rpki-client