Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01938A920A1611F0816D5D5A762E951A.roa
File: 01938A920A1611F0816D5D5A762E951A.roa (raw, json)
Hash identifier: JRRN+Ld1/q2T8Ua+h3c44fBj6BstMlGap376U2oY1tc=
Subject key identifier: AB:08:DA:4F:82:AE:D6:F9:69:C2:44:C0:42:3B:74:B4:09:82:08:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014836
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01938A920A1611F0816D5D5A762E951A.roa
Signing time: Wed 26 Mar 2025 07:43:28 +0000
ROA not before: Wed 26 Mar 2025 07:43:24 +0000
ROA not after: Sat 11 Apr 2026 07:43:24 +0000
asID: 984
IP address blocks: 156.231.63.0/24 maxlen: 24
156.231.65.0/24 maxlen: 24
156.231.67.0/24 maxlen: 24
156.231.75.0/24 maxlen: 24
156.231.78.0/24 maxlen: 24
156.231.79.0/24 maxlen: 24
156.231.99.0/24 maxlen: 24
156.231.100.0/24 maxlen: 24
156.231.106.0/24 maxlen: 24
156.231.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84022 (0x14836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 26 07:43:24 2025 GMT
Not After : Apr 11 07:43:24 2026 GMT
Subject: CN=67e3b020-b43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:05:94:e8:6b:a1:95:ff:c8:c1:29:80:92:
23:89:66:6d:55:51:e6:99:08:7d:45:6e:3e:6c:41:
9e:8f:6f:96:8d:31:1e:cc:fc:ad:2f:bf:61:e2:d9:
e7:e3:ba:f5:d0:02:b8:bd:22:21:c3:9e:cd:15:74:
0d:e7:af:3f:8c:a8:81:be:6a:4a:3a:a1:1b:2c:25:
cd:49:54:55:8c:2e:1b:72:0d:2b:2a:f4:86:f9:6c:
c0:fb:34:e3:b0:56:df:7f:4a:6b:17:5b:97:c1:b7:
1f:69:87:93:f2:b0:4e:97:d4:a1:b6:f0:b1:36:51:
f5:33:af:73:6b:63:f6:d9:e9:f5:24:e2:33:c2:33:
eb:7b:84:7e:19:f1:f2:55:8d:f7:07:eb:1d:2f:6c:
c7:7c:bc:ca:b0:66:a1:5e:df:f8:56:f4:d2:9f:2d:
0a:d2:56:9e:78:1d:a5:5b:d6:33:65:dd:df:aa:d0:
26:94:c5:55:25:fb:2c:1f:88:f1:c9:5a:aa:5a:0c:
ff:c6:92:ac:48:35:c7:c3:d3:81:4c:c9:f9:c7:ae:
45:c6:b6:f4:cd:43:3f:9a:16:96:9b:ad:4e:cd:9a:
0b:7f:82:30:e1:0d:97:f9:1c:a4:9b:a8:6d:5d:ed:
d5:34:9b:53:cc:16:9e:40:bd:26:de:5d:19:a6:68:
f7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:08:DA:4F:82:AE:D6:F9:69:C2:44:C0:42:3B:74:B4:09:82:08:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01938A920A1611F0816D5D5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.63.0/24
156.231.65.0/24
156.231.67.0/24
156.231.75.0/24
156.231.78.0/23
156.231.99.0-156.231.100.255
156.231.106.0/24
156.231.119.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:18:3a:8d:42:80:18:64:7d:97:ab:66:44:40:75:39:22:2b:
c5:36:76:89:2f:51:6e:ef:2d:1d:5f:6b:40:67:5a:18:5f:4d:
7a:c0:8e:9c:3c:69:b1:71:a9:fb:46:12:9a:71:be:69:01:b6:
c2:01:83:b3:53:92:2a:63:12:46:e8:f6:b6:b8:99:de:a0:4f:
bb:8c:93:3e:e7:a2:a2:55:b3:94:25:35:f8:e7:e1:2f:ec:1f:
cd:c8:9a:2b:0b:e9:5e:c8:b7:e3:b0:83:c0:3f:d4:43:c1:d4:
e0:12:9c:27:3d:79:0c:d7:b9:3e:5e:e5:55:9f:20:b4:f8:21:
3d:5f:42:a1:bd:af:e3:92:0e:77:28:9f:17:0d:3d:ff:23:b3:
61:f9:80:ac:3b:7c:b2:28:d3:94:9b:36:0a:b8:41:19:7e:71:
54:a5:70:7f:3a:b5:27:df:2f:7a:4f:49:d4:0e:54:b6:69:17:
b4:1b:bb:b3:98:1d:af:95:03:1d:00:d9:42:e9:51:07:27:b7:
69:f4:25:dd:58:d4:58:7c:fa:20:81:9f:da:e9:a2:0e:af:de:
33:33:db:63:85:cc:eb:66:40:d6:e0:59:85:6a:0f:45:35:07:
f9:06:f1:a2:ed:11:60:ac:ba:48:c4:1a:20:ea:3d:e3:7e:ea:
5d:b8:a7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:47 2025 by rpki-client