Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEC234EAF5DE11EF95354075762E951A.roa
File: EEC234EAF5DE11EF95354075762E951A.roa (raw, json)
Hash identifier: D7xmR7WQbWOgRiNz6pYU4Mt8dhdnhWDxr2iXfsw5FEg=
Subject key identifier: 7D:80:D6:BD:C5:70:64:87:8F:14:5C:A0:1D:DE:FF:64:71:3C:78:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013E3A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEC234EAF5DE11EF95354075762E951A.roa
Signing time: Fri 28 Feb 2025 14:18:51 +0000
ROA not before: Fri 28 Feb 2025 14:18:47 +0000
ROA not after: Sun 13 Apr 2025 14:18:47 +0000
asID: 138915
IP address blocks: 156.244.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81466 (0x13e3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 14:18:47 2025 GMT
Not After : Apr 13 14:18:47 2025 GMT
Subject: CN=67c1c5cb-91e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:92:61:2f:67:0d:9c:8b:72:bf:f8:fc:bf:
ed:63:db:f0:5c:7c:0f:17:f6:91:d4:79:07:b8:66:
8b:45:da:bb:3a:6b:50:21:91:06:7a:12:54:86:2c:
8a:e1:2f:2b:20:e3:ee:ca:a0:8c:1d:49:bb:86:26:
cc:13:14:38:4e:49:b1:81:71:53:c6:56:3a:fa:a9:
30:53:e0:11:6a:14:1c:25:85:d2:e2:1a:51:ba:f4:
c2:25:a1:2e:8f:8f:23:2c:21:bd:0f:33:ad:54:8e:
1b:1f:08:20:83:ee:6d:ff:ea:5b:d3:ff:6a:83:7b:
15:66:98:77:be:44:6b:ea:3a:45:0d:18:84:96:f7:
91:a8:43:1e:6f:61:26:31:b1:dd:f7:21:0a:c7:cd:
02:36:25:55:c9:72:92:79:91:c3:8f:70:5c:42:a8:
83:5e:dc:30:30:3a:9d:c4:0d:f6:4e:ba:62:08:0f:
8d:ef:2a:39:c9:34:c6:21:d2:a4:78:64:8b:36:4d:
3c:62:e1:87:ce:6e:1b:7e:4e:f6:3c:ca:7b:61:1a:
89:2a:b0:eb:cb:82:dd:55:02:14:c9:1e:bc:c9:1d:
78:ae:b0:c2:6e:3b:7d:1f:2a:bb:3e:16:f7:b6:05:
ac:c1:c8:0c:e0:a3:b3:3c:09:d4:49:c0:7d:37:4f:
84:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:80:D6:BD:C5:70:64:87:8F:14:5C:A0:1D:DE:FF:64:71:3C:78:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEC234EAF5DE11EF95354075762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.31.0/24
Signature Algorithm: sha256WithRSAEncryption
17:47:13:c6:58:4b:5b:40:04:62:b3:94:0e:3a:02:2b:e6:06:
9b:7b:6a:97:fb:5e:1b:d3:6d:c7:5a:9a:d3:c7:33:43:bc:f0:
d3:97:a8:c1:ec:cf:77:23:f2:b6:35:72:e1:cb:36:e1:f1:91:
55:03:6c:f8:2f:01:ae:58:c0:e8:9d:b5:80:b5:a4:d3:fb:80:
ed:39:d5:9c:48:a5:12:08:ec:ed:81:aa:6c:88:79:91:08:54:
8c:da:51:12:3e:a8:f3:7f:90:4d:d4:a0:44:af:20:ae:c2:fd:
33:0e:24:9b:6b:1d:37:1f:9b:1e:c8:5a:1c:0d:54:c2:d2:5d:
a2:46:9e:90:56:ef:be:0e:e3:f5:df:ab:74:9a:a0:6b:58:16:
99:06:76:df:d1:85:4f:2b:54:7b:39:23:8f:96:03:69:84:74:
b7:67:ab:e4:b6:21:1a:41:ba:aa:3a:63:af:95:c3:6a:20:6d:
84:32:e3:fa:e8:e0:e8:ea:7f:d3:66:73:3a:c8:db:6a:f5:60:
d2:fe:65:e0:41:a0:ac:f8:c8:78:ac:f0:62:7d:9d:65:a0:83:
0d:7f:3b:5b:54:86:a4:08:7c:46:be:31:83:da:2c:13:2d:34:
f0:58:b2:26:11:34:6b:22:3e:62:d7:98:eb:20:31:6d:47:22:
ef:5c:48:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:55 2025 by rpki-client