Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E89DC56A071411F08B1D397E762E951A.roa
File: E89DC56A071411F08B1D397E762E951A.roa (raw, json)
Hash identifier: OgBCRz38pS4BCLMlx2/Rp4+XNa6/JtVmp7PSZ9eByoA=
Subject key identifier: 09:03:FE:8B:AF:5F:AB:AA:60:AC:74:AC:D1:8C:CA:AF:83:FE:2D:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014797
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E89DC56A071411F08B1D397E762E951A.roa
Signing time: Sat 22 Mar 2025 11:58:03 +0000
ROA not before: Sat 22 Mar 2025 11:57:59 +0000
ROA not after: Tue 01 Apr 2025 11:57:59 +0000
asID: 62468
IP address blocks: 156.245.128.0/21 maxlen: 24
156.245.188.0/23 maxlen: 24
156.245.198.0/23 maxlen: 24
156.245.200.0/22 maxlen: 24
156.245.209.0/24 maxlen: 24
156.245.210.0/24 maxlen: 24
156.245.242.0/23 maxlen: 24
156.245.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83863 (0x14797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 22 11:57:59 2025 GMT
Not After : Apr 1 11:57:59 2025 GMT
Subject: CN=67dea5cb-85ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:83:3e:18:c6:d2:c5:e1:86:b0:98:ad:86:e3:
98:71:1e:6e:40:3f:95:22:71:db:bc:9d:65:b7:b8:
52:f7:80:9c:56:5f:17:83:3b:18:78:86:8c:9f:22:
c9:ad:f5:82:46:e5:e4:c6:b3:5e:30:68:a8:9e:34:
0a:58:93:02:9b:eb:e9:5f:23:75:10:1d:79:10:09:
25:13:08:67:0d:2b:66:55:ad:1c:d7:c2:b2:89:2c:
1a:a7:be:fc:2d:db:53:1d:30:64:3b:f0:6b:98:33:
14:cf:f5:45:f7:92:0d:97:67:fc:7c:5e:a9:2e:c0:
cf:94:0f:99:14:9c:9d:8c:10:ff:39:5d:76:ab:06:
5f:19:f0:5e:c4:6f:5d:9d:68:04:8a:8f:56:c6:59:
63:57:ba:43:cc:18:0a:24:62:85:00:a5:a8:e9:a9:
05:07:0d:0a:b8:cb:25:30:4d:16:ba:6d:b0:d2:94:
08:92:59:3a:17:2f:21:39:fe:3c:48:bf:f7:71:f1:
2d:b3:15:7f:1e:ea:2a:96:9b:28:6a:f3:8f:ff:52:
7f:96:9c:08:7e:8e:77:46:17:04:ea:34:d7:1d:46:
59:77:88:0c:81:ee:7d:68:0a:b8:a3:5c:18:e9:96:
c7:1e:af:fc:5f:b1:25:08:12:fc:62:a0:8d:ae:5c:
10:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:03:FE:8B:AF:5F:AB:AA:60:AC:74:AC:D1:8C:CA:AF:83:FE:2D:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E89DC56A071411F08B1D397E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
156.245.188.0/23
156.245.198.0-156.245.203.255
156.245.209.0-156.245.210.255
156.245.242.0/23
156.245.248.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:d2:63:48:3d:b9:6a:d0:05:8c:06:c6:52:3b:27:1e:c6:a9:
89:9b:d0:32:18:88:e5:2b:54:61:96:a6:42:7c:75:72:ae:61:
de:1f:bb:c3:fe:26:df:f9:ac:21:0d:7d:5d:93:6f:99:92:35:
aa:89:f5:81:ad:15:e7:c3:ce:a8:80:7f:90:3e:65:88:65:7e:
3a:ba:31:cc:0f:11:9a:e3:cd:7c:ed:f5:4b:96:f9:b1:2c:83:
2d:41:c1:42:ee:0b:d2:1c:cc:a8:2c:43:e9:83:0d:cc:ec:c6:
80:19:9e:a8:6a:53:22:42:bb:98:0a:2b:82:d9:f8:f2:77:e5:
b4:5e:21:db:ba:4b:7f:6e:4a:16:0a:c4:6d:a9:63:8b:a0:d9:
32:60:6b:f9:51:72:1b:41:39:6f:60:75:55:75:5e:0d:39:55:
2e:44:14:f9:d7:15:30:86:48:05:4c:95:8b:f8:c8:63:53:80:
0f:02:0a:36:42:5d:87:4b:3f:c0:22:0e:39:05:55:a5:0f:f3:
d0:b6:e6:cb:f2:42:22:67:7a:a9:e1:48:51:9e:61:bf:72:29:
f8:c8:2a:7c:10:d7:d8:5d:cd:14:64:5f:fb:e6:86:1a:79:86:
32:ca:b4:0f:2e:76:c6:4e:07:6b:e1:5c:6e:55:74:05:10:e5:
49:4a:07:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:37:40 2025 by rpki-client