Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C33A6F5CCD2211EFB78F6483762E951A.roa
File: C33A6F5CCD2211EFB78F6483762E951A.roa (raw, json)
Hash identifier: yMeqqK9rxGoNjSdGR89B4BizVkdhsvMfGnjhfrGSK7g=
Subject key identifier: 83:52:39:01:21:41:05:82:DF:CF:A2:5C:74:31:C4:C1:A7:1E:82:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD81
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C33A6F5CCD2211EFB78F6483762E951A.roa
Signing time: Tue 07 Jan 2025 18:11:06 +0000
ROA not before: Tue 07 Jan 2025 18:11:02 +0000
ROA not after: Sat 13 Dec 2025 18:11:02 +0000
asID: 984
IP address blocks: 156.241.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64897 (0xfd81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 7 18:11:02 2025 GMT
Not After : Dec 13 18:11:02 2025 GMT
Subject: CN=677d6e3a-4f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:43:8f:1f:58:f5:75:84:ad:52:17:b3:04:
f6:29:49:bb:8f:b0:34:8d:9c:87:a2:d6:56:0f:67:
d8:af:56:81:60:9a:34:6c:97:5d:be:d3:1f:a5:25:
ba:b8:a6:a9:ff:79:ca:4c:72:66:fb:3e:4b:c8:85:
d6:0c:d6:bf:46:94:0a:4e:37:ac:26:9e:cb:54:d9:
6a:70:06:73:cf:cc:d6:81:0c:e4:f6:39:3c:b5:5c:
1e:20:d8:cf:e2:8c:a2:f9:95:37:c4:b4:34:50:b0:
a2:9d:0f:2e:ae:4b:2c:38:38:49:f9:dd:21:7d:9b:
77:ad:a5:dc:1c:22:22:7a:bb:f7:9c:a3:99:8d:b3:
a6:30:7d:c6:08:a2:03:ed:c7:a1:86:34:e1:3d:a9:
09:65:e3:bd:84:35:4c:7f:88:d9:9f:9b:5c:26:28:
8c:cb:2d:5d:49:9c:6a:db:04:9c:8b:ab:32:cf:f2:
8a:2f:57:53:bf:d9:82:f4:a1:af:81:fe:34:b1:59:
10:b2:ef:98:c9:cf:d0:8d:13:be:ec:35:dc:f0:9f:
09:7b:51:10:58:26:62:7f:fb:c8:51:7b:42:10:02:
1d:47:fc:c3:1b:1c:d9:f1:a4:25:e9:72:e0:26:62:
85:1c:b5:9e:11:45:8b:ad:ca:33:fc:35:f4:bd:47:
af:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:52:39:01:21:41:05:82:DF:CF:A2:5C:74:31:C4:C1:A7:1E:82:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C33A6F5CCD2211EFB78F6483762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.203.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:40:6e:f9:b4:04:74:62:98:47:a7:7b:e4:a0:ae:c9:da:7d:
41:14:04:6e:c2:1d:73:37:95:fd:67:4b:8f:58:6e:5f:78:fd:
11:96:8d:a5:2c:b5:f4:a6:14:5a:7b:fb:22:1b:98:cb:8c:93:
41:48:44:e1:c5:12:2d:34:67:15:6c:60:f5:0a:23:33:c9:0d:
9b:c1:dc:8a:63:09:d4:f3:05:be:90:22:31:f8:97:93:76:93:
e3:ed:8b:35:41:f6:93:96:70:5c:d0:4e:dd:e0:cb:55:84:97:
6b:fe:4f:b5:52:23:af:f7:a0:f7:c9:6d:3d:7b:ac:aa:fd:f5:
09:fc:2c:eb:fa:02:72:7e:5f:6b:45:a9:fa:43:0e:c8:42:ec:
a2:d0:20:21:d0:5e:26:3f:2b:64:4f:a3:1a:95:24:9b:e2:64:
1e:9b:2e:66:ca:85:3a:fb:6f:c8:51:a2:ce:bb:31:d2:13:86:
2d:dd:a8:d6:a4:3e:65:fa:03:fa:a9:23:01:ab:c1:c8:95:33:
ca:aa:62:a6:29:4d:4d:38:3d:76:ce:1e:b9:ab:eb:26:22:09:
d4:3f:ba:5f:6d:a1:44:31:bd:1f:e0:4b:f2:7c:63:10:3b:17:
e0:a8:71:8c:37:e0:b4:bc:33:ad:79:01:44:1a:10:a4:c4:2f:
d3:87:cf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:30 2025 by rpki-client