Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBFBC39EF60F11EFBF2682BD762E951A.roa
File: EBFBC39EF60F11EFBF2682BD762E951A.roa (raw, json)
Hash identifier: EM24phufqBRpvp76902B7/zqTG0br39DFEaOPoiIGMg=
Subject key identifier: 44:B2:E3:B6:0E:0E:6A:01:B8:D1:35:E7:41:7B:A8:4D:AC:CA:87:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F2A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBFBC39EF60F11EFBF2682BD762E951A.roa
Signing time: Fri 28 Feb 2025 20:09:32 +0000
ROA not before: Fri 28 Feb 2025 20:09:28 +0000
ROA not after: Sun 30 Mar 2025 20:09:28 +0000
asID: 203020
IP address blocks: 156.253.206.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81706 (0x13f2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 20:09:28 2025 GMT
Not After : Mar 30 20:09:28 2025 GMT
Subject: CN=67c217fb-7d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:62:a0:dd:98:a9:13:7a:f2:35:28:cc:c5:
86:da:26:8c:25:b2:83:26:a2:63:01:3d:9d:fd:0b:
25:a8:c6:3a:c3:e1:71:1b:f7:d7:16:b7:f2:21:56:
a1:a6:6d:0d:29:64:47:7e:2e:ef:32:4a:cc:49:f6:
9c:b9:40:b9:df:74:4d:e5:ce:06:05:72:4e:da:bc:
d5:6d:41:04:9e:10:b4:5e:da:76:8f:bc:b0:bb:29:
98:c9:a1:95:b1:c4:cf:04:55:a2:56:0f:25:08:3e:
e6:cd:93:29:9c:58:d8:a6:32:42:db:4a:ce:d4:55:
c1:ee:93:87:6a:44:46:fe:e4:bb:ef:f4:23:69:ad:
10:ca:8c:c9:62:a9:e6:91:a2:59:b0:c0:e2:d2:e7:
ce:1c:f6:2e:a3:ad:06:54:ca:11:bb:3f:54:80:7a:
68:a7:b0:e7:66:7c:38:95:99:18:18:df:cb:37:c2:
cd:7c:80:43:8e:b3:9c:b0:38:87:f8:25:a0:74:ce:
2f:2d:5b:66:cb:d1:dd:ce:64:3f:0b:c2:30:6a:69:
a9:a9:f8:72:98:54:39:8b:da:8d:23:5b:38:a4:4f:
51:47:0e:85:05:dd:ee:ef:2b:97:9a:6d:4a:3a:29:
da:a7:68:10:73:cb:18:5e:10:9a:df:f5:8c:e6:ac:
c9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B2:E3:B6:0E:0E:6A:01:B8:D1:35:E7:41:7B:A8:4D:AC:CA:87:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBFBC39EF60F11EFBF2682BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.206.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:7f:f7:09:9c:1f:be:3c:26:3c:92:7f:1b:55:a4:a4:1f:02:
89:d0:aa:2f:13:5a:f5:89:95:82:38:aa:09:35:59:b5:90:78:
7a:ec:05:66:93:67:db:cc:d5:e7:aa:d7:3d:31:10:5d:f7:09:
36:35:80:6c:2e:73:f0:33:b3:ae:7f:b8:a1:5c:7d:b6:2b:03:
1b:2b:33:29:54:09:d1:16:4f:41:4e:bd:ac:30:2d:df:dc:e2:
b2:6e:f9:5b:72:96:55:f4:76:04:15:56:95:da:83:53:52:a8:
4c:dc:77:4a:cc:6e:95:6a:28:d4:8e:49:96:85:61:60:d8:e3:
63:59:d4:c4:41:a7:51:0d:14:be:c7:ff:a7:25:94:fb:c4:27:
8d:49:60:51:fc:59:7c:54:eb:22:e3:b6:39:67:16:35:e1:42:
fa:fe:0d:0c:d4:c2:36:e0:44:3d:ba:81:81:b3:52:68:0b:a0:
b9:a1:a7:38:d8:21:94:88:15:30:57:cd:5c:1a:78:0b:4a:20:
0f:b9:95:b4:ca:2f:e5:cc:43:14:67:1b:a8:b6:a5:5f:4e:5b:
47:70:52:a3:c4:04:5e:6a:d0:0a:af:2e:fe:43:a0:6e:d2:fd:
95:65:f3:43:1d:63:a2:94:4c:16:5b:e6:79:42:23:6d:2b:73:
9c:c5:75:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:08:36 2025 by rpki-client