Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4019104F2C811EF90D430BD762E951A.roa
File: E4019104F2C811EF90D430BD762E951A.roa (raw, json)
Hash identifier: mr0wKh3WLs0dmfh37Scng1+T8AemzotEYQI/tUcmhwg=
Subject key identifier: AF:DF:E2:6F:BD:D0:BF:F4:5E:C9:7E:AA:30:B1:F0:57:C4:F2:C9:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012C22
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4019104F2C811EF90D430BD762E951A.roa
Signing time: Mon 24 Feb 2025 16:03:30 +0000
ROA not before: Mon 24 Feb 2025 16:03:27 +0000
ROA not after: Wed 26 Mar 2025 16:03:27 +0000
asID: 214536
IP address blocks: 156.231.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76834 (0x12c22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 24 16:03:27 2025 GMT
Not After : Mar 26 16:03:27 2025 GMT
Subject: CN=67bc9852-bdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:79:da:fe:b0:9a:ec:b7:06:d2:31:a7:b5:
f2:59:f7:e1:a7:91:a2:de:f7:df:43:d6:7e:f8:ad:
c5:35:7a:64:14:d0:28:47:16:16:76:ce:6e:7b:0d:
12:c7:7a:0c:8b:dd:b2:5e:16:16:21:78:60:27:9f:
cc:2e:2f:e1:47:6c:ed:32:0d:61:87:c7:70:d4:1d:
87:88:b0:73:57:ff:fa:da:3e:8f:97:38:83:26:66:
3b:70:92:cb:33:83:bf:3c:5f:19:68:50:9a:e8:8a:
58:ad:0d:63:af:3c:eb:88:fc:ba:7c:c6:81:ca:6e:
1e:0f:eb:73:fb:97:ed:73:b9:be:a0:8b:bc:69:a7:
a3:b1:01:47:26:aa:ae:e0:01:b1:35:e7:20:72:66:
f3:09:98:89:36:1a:db:ff:07:51:81:c3:5a:a0:d1:
78:8c:58:76:f4:f6:40:ad:c9:e5:ae:f9:ca:70:62:
61:30:03:51:b3:1d:50:e4:43:bd:b8:d2:1a:e7:17:
fc:51:2d:55:4d:07:5e:2c:e5:b2:63:09:8f:5b:14:
ec:8c:75:0e:41:30:c2:36:f0:cc:b6:2e:f6:02:1c:
1f:7e:7a:3e:ca:5f:b7:ef:9c:16:94:02:f7:9c:36:
72:4e:86:63:14:30:02:2c:8e:2c:5d:d0:7e:11:e3:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DF:E2:6F:BD:D0:BF:F4:5E:C9:7E:AA:30:B1:F0:57:C4:F2:C9:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4019104F2C811EF90D430BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.103.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:b3:a0:24:7a:84:92:3f:02:44:d5:a3:ff:a8:77:7e:c9:85:
ed:84:a2:e3:ab:8f:99:b8:fd:52:d4:35:f6:4e:27:1d:63:54:
03:bd:60:e9:5a:bc:00:a3:a0:a3:e7:b8:fa:ad:0f:2b:65:37:
c0:42:ba:94:f6:4c:f8:2f:ff:48:9e:0f:73:28:30:fb:9a:43:
28:91:59:ea:e0:c5:47:44:bf:bf:c2:ae:fc:04:1c:02:e7:0e:
85:52:3c:3a:6b:b2:b8:e4:7f:94:c6:66:4c:fd:5b:6b:76:28:
0b:21:e3:88:92:83:33:9c:7f:9b:7a:d1:07:29:f6:08:f1:3d:
56:7e:6d:da:ac:45:8f:01:65:bd:41:cd:18:10:c0:55:2d:88:
4a:ed:e7:07:9a:5f:f7:4d:14:ab:e2:8c:66:73:e3:bd:3e:53:
6b:d1:01:af:8d:f8:71:48:91:6d:69:f2:c3:3f:24:4f:b2:da:
a3:e2:a8:e7:43:43:25:ae:42:4b:55:d1:ed:da:9e:45:91:fc:
9b:2f:dd:ca:42:f1:94:d9:60:26:3a:e1:c4:49:b5:32:f0:de:
91:f7:20:bc:ca:fd:31:83:6d:df:6f:b6:00:d7:47:4d:f9:28:
b7:53:24:2f:09:10:ca:88:cd:e0:f3:d6:3d:61:9c:6b:f0:72:
a1:f4:5d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:14:14 2025 by rpki-client