Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC835638E00211EF8374F543762E951A.roa
File: EC835638E00211EF8374F543762E951A.roa (raw, json)
Hash identifier: Sprk9KD6turrXL3tYSjeWE7I+dY7yZsEoO05myLTU2A=
Subject key identifier: BA:24:2E:24:AA:21:6E:9F:99:E6:CC:E4:54:D9:ED:1A:D0:D3:9D:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0116FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC835638E00211EF8374F543762E951A.roa
Signing time: Fri 31 Jan 2025 18:41:04 +0000
ROA not before: Fri 31 Jan 2025 18:41:00 +0000
ROA not after: Sun 11 Jan 2026 18:41:00 +0000
asID: 399077
IP address blocks: 156.248.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71421 (0x116fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 31 18:41:00 2025 GMT
Not After : Jan 11 18:41:00 2026 GMT
Subject: CN=679d193f-1ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:45:a0:d8:28:e0:b4:8e:7b:c7:07:ef:e8:cc:
6b:80:23:4b:66:02:0e:38:bf:37:88:94:60:b9:a5:
78:34:64:55:38:bb:30:0d:8d:e8:c0:0c:3d:7d:cd:
a0:43:77:58:5e:c7:d8:95:0d:28:2e:45:1f:a9:d4:
39:dd:f9:f1:20:68:71:38:46:40:2f:bd:d5:f8:e4:
8f:90:a2:d2:76:62:1a:09:82:3b:f0:20:a8:4d:bb:
a4:62:ee:5f:78:e2:1d:f6:63:f1:4d:ce:90:08:cc:
44:0c:6a:32:48:46:77:54:8a:52:38:1c:85:36:d2:
f6:82:fc:4c:3d:21:36:69:0c:13:36:eb:2a:e7:0d:
2f:84:c5:59:b2:e2:5c:f3:60:42:f1:68:e6:82:f4:
19:49:0a:cf:cd:14:d5:0f:1c:32:f6:e2:d1:3c:0d:
48:6f:b0:30:48:e5:3d:9f:ee:86:08:04:df:52:b6:
92:48:0d:36:31:ee:27:7b:aa:0d:3b:ed:13:8d:90:
66:9e:1c:8f:25:ad:6c:36:dc:18:53:4c:4d:18:f6:
d3:58:41:30:fb:1b:99:a0:02:b5:af:34:9f:3d:5b:
0e:48:ff:d2:8a:3c:d6:46:f6:5a:fd:55:0c:36:9e:
8a:a8:9b:cc:1e:11:73:11:cc:ed:73:5a:7a:93:ef:
54:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:24:2E:24:AA:21:6E:9F:99:E6:CC:E4:54:D9:ED:1A:D0:D3:9D:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC835638E00211EF8374F543762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.72.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:17:d6:78:c9:c2:27:41:75:b9:f7:c5:8a:27:14:79:05:75:
ff:ff:4d:2d:dd:64:fd:e0:86:b7:e8:74:c8:a6:4a:ce:12:71:
93:a1:91:27:f7:71:d6:5e:dc:f0:9b:cb:3a:a9:c9:1f:b8:c7:
0d:c7:70:89:bb:e6:8b:21:0f:b0:93:74:7a:ca:4d:be:44:e9:
1a:ac:88:48:59:e9:f7:02:bf:fa:40:10:fe:2c:a1:44:25:46:
d8:2a:63:70:8e:f4:53:34:20:82:08:db:fb:b4:10:e5:7a:5e:
17:b3:2b:39:59:5d:df:0b:5d:1c:70:69:3a:7f:49:e7:49:5f:
bf:9c:36:2e:18:37:c2:1a:78:d4:a7:5e:1d:7e:69:20:ea:f9:
44:31:a6:3b:68:4e:73:fb:dd:12:d7:70:1e:74:3b:dc:a2:2b:
2d:75:5d:f9:eb:82:b6:c3:ae:a2:32:0e:f5:df:59:c5:34:f9:
1a:02:9a:2e:60:b0:4f:3a:4b:c4:7a:67:8d:9f:ce:2c:9e:16:
13:d8:87:c4:b8:ca:f8:82:ed:34:5b:ef:8b:de:05:a7:eb:29:
40:25:a0:f0:93:94:91:e4:a5:66:67:f4:7a:60:39:e1:e4:17:
7d:2f:55:04:38:2e:9d:80:b4:25:8c:f9:d7:8f:72:de:bd:e0:
51:47:7c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:47 2025 by rpki-client