Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EF5F276DC0411EFBBB8A452762E951A.roa
File: 2EF5F276DC0411EFBBB8A452762E951A.roa (raw, json)
Hash identifier: xo8TFtwostCbk2wHxxZip4R0C/iYE/tw2GqtNjpyYyQ=
Subject key identifier: B2:F4:63:F1:12:1B:7A:36:A2:DE:90:18:D2:87:C4:6C:37:47:DA:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011408
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EF5F276DC0411EFBBB8A452762E951A.roa
Signing time: Sun 26 Jan 2025 16:40:00 +0000
ROA not before: Sun 26 Jan 2025 16:39:56 +0000
ROA not after: Sun 23 Mar 2025 16:39:56 +0000
asID: 63139
IP address blocks: 156.225.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70664 (0x11408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 16:39:56 2025 GMT
Not After : Mar 23 16:39:56 2025 GMT
Subject: CN=67966560-e9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:ca:d9:c4:75:36:1e:14:0b:81:51:02:6e:
5c:34:c3:90:24:88:92:07:3e:ed:52:81:83:37:d2:
06:f9:1d:3c:66:73:f8:f1:00:da:70:76:c6:df:70:
0c:c9:b9:2d:bb:61:20:4f:8f:9d:73:9e:86:36:57:
03:78:59:79:dc:52:c8:bd:06:6c:c2:47:c8:1b:4b:
0e:aa:ce:e0:5d:c4:96:3f:5a:a2:07:36:13:f9:79:
7c:36:17:cb:b1:7c:16:96:77:26:1f:65:da:42:53:
41:d5:3a:ca:e7:cf:20:6b:60:1b:09:e8:75:eb:f0:
19:3e:57:7c:bc:aa:69:91:e6:37:1e:b2:a5:fb:19:
f8:10:41:50:9e:5f:ac:dd:dc:9a:b8:5a:08:c5:90:
d5:df:ed:79:aa:0e:b8:ed:b7:6b:59:7c:7c:de:7a:
e0:04:14:5a:92:3f:7d:f1:ac:9f:dc:58:d4:bc:9c:
e7:f9:77:b1:cc:19:6b:37:e5:7d:35:65:12:c7:8f:
14:eb:77:9f:02:c5:0f:ce:18:5d:ab:03:dc:57:fd:
ab:e7:3b:9c:83:69:50:a2:df:99:13:28:e7:b5:b9:
17:75:47:d4:25:b8:51:19:ca:03:78:c7:64:4d:44:
b9:af:80:9f:d4:a8:17:8d:9f:f8:40:0b:2e:4a:ff:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F4:63:F1:12:1B:7A:36:A2:DE:90:18:D2:87:C4:6C:37:47:DA:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EF5F276DC0411EFBBB8A452762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.115.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2d:7d:62:f2:63:1a:94:eb:8b:f0:49:0a:f0:d3:59:83:7a:
65:20:b8:17:d9:45:6d:83:de:79:76:6d:d3:10:6a:34:35:a4:
a3:60:03:f8:a1:aa:d5:a3:44:23:b1:79:c7:39:df:2e:35:3c:
f7:52:51:86:4d:d8:f0:ed:f8:26:8e:7e:a7:70:67:c7:57:bd:
f4:a0:40:39:31:f2:17:5d:7d:2c:eb:fe:ed:db:e4:93:d4:ca:
79:7c:39:b0:02:80:22:94:87:59:5a:47:78:ef:f9:5b:07:c6:
f0:07:1a:ae:eb:eb:2c:82:d3:f7:03:29:72:62:51:c0:86:0c:
55:f3:9b:27:a6:c9:85:c7:e7:28:81:a3:6e:20:f2:73:51:16:
3c:b9:ca:e0:19:c0:6e:63:ee:4e:64:e2:23:b7:86:67:65:4a:
6d:e6:e9:e1:c2:cb:db:82:6f:d3:9d:47:5a:3f:ba:3c:ee:9a:
4d:f7:7d:6d:7b:8f:ab:37:6b:fa:69:24:fe:9d:70:bd:02:c8:
6f:0e:41:c7:d0:1a:95:b3:04:17:a3:1f:14:5a:c8:fc:b0:0d:
3a:2f:ea:4e:6a:55:44:2b:7f:dd:f7:0a:6f:d1:2c:1d:42:9e:
78:71:02:94:1d:7d:89:74:de:e1:b6:2e:78:64:49:2d:23:09:
3b:14:e1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:40 2025 by rpki-client