Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032FDCFC03EF11F091244DAD762E951A.roa
File: 032FDCFC03EF11F091244DAD762E951A.roa (raw, json)
Hash identifier: Rii6AgP1GdITJlPFov6RHRKdqKGqJ+1y32YDYZ4AcpM=
Subject key identifier: 22:72:09:5A:1E:F1:98:7B:A3:CC:2D:E3:8C:24:46:23:B4:A5:84:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0146AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032FDCFC03EF11F091244DAD762E951A.roa
Signing time: Tue 18 Mar 2025 11:49:13 +0000
ROA not before: Tue 18 Mar 2025 11:49:10 +0000
ROA not after: Sun 27 Apr 2025 11:49:10 +0000
asID: 44559
IP address blocks: 156.246.207.0/24 maxlen: 24
156.246.208.0/24 maxlen: 24
156.246.209.0/24 maxlen: 24
156.246.210.0/24 maxlen: 24
156.246.211.0/24 maxlen: 24
156.246.214.0/24 maxlen: 24
156.246.220.0/24 maxlen: 24
156.246.221.0/24 maxlen: 24
156.246.222.0/24 maxlen: 24
156.246.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83631 (0x146af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 11:49:10 2025 GMT
Not After : Apr 27 11:49:10 2025 GMT
Subject: CN=67d95db9-0e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e7:33:00:64:76:81:36:f0:7b:e3:21:25:11:
97:a8:7d:6c:c6:7d:95:7c:54:e1:f6:e0:28:e2:d9:
64:7e:50:47:4a:d5:a1:90:f6:c4:4b:13:e2:d8:fb:
0f:17:40:14:80:61:30:cb:b7:65:b3:08:e6:32:9e:
d4:2a:15:7b:95:8a:fc:a7:d1:3f:f9:0e:f2:d5:e2:
84:13:0f:32:1b:fe:4b:06:49:60:c5:61:13:60:58:
f3:f0:be:fc:b7:7f:69:37:22:95:4f:27:08:48:a0:
b9:9f:d9:86:c6:ce:2a:ce:81:63:93:7b:d6:43:81:
18:39:e7:f1:d6:89:04:f7:49:bc:3b:86:ee:f0:34:
26:2c:94:87:5e:24:48:00:b7:ff:1a:5f:b9:73:a0:
b8:b6:0d:10:26:c3:50:17:20:d7:0f:8b:aa:b6:63:
1f:a1:c3:b6:a5:71:d1:61:66:b5:cf:76:60:7b:f9:
17:1e:44:78:9a:ee:c0:ae:99:bb:07:af:7a:6f:5f:
f3:37:8b:d0:28:90:af:dd:c7:05:61:3b:ed:55:f3:
26:b1:c8:8f:26:67:9d:59:84:6e:ad:86:fa:81:85:
9d:e1:18:52:3f:8d:17:bd:c9:29:50:54:ea:d1:e0:
b2:45:d0:9e:79:ba:27:5e:b4:f5:2b:97:23:09:f0:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:72:09:5A:1E:F1:98:7B:A3:CC:2D:E3:8C:24:46:23:B4:A5:84:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032FDCFC03EF11F091244DAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.207.0-156.246.211.255
156.246.214.0/24
156.246.220.0-156.246.222.255
156.246.229.0/24
Signature Algorithm: sha256WithRSAEncryption
86:97:d8:3f:d1:4e:6d:f0:20:5c:46:1b:a7:85:9e:c1:87:4d:
4a:10:58:83:4d:c2:b7:25:50:a4:08:ec:53:8d:21:57:a7:2b:
37:d2:a9:8b:29:f7:8b:5a:bb:fb:6c:6c:83:00:19:28:04:29:
92:d4:4e:07:1e:32:d7:10:71:5b:f1:a5:4c:75:80:9f:43:d7:
8d:65:2b:80:09:2d:ef:ee:04:b8:93:50:57:18:32:2a:c1:9b:
75:39:c3:cf:5a:0f:90:e1:e4:b2:82:f3:8b:23:a6:1e:39:f7:
e2:a3:c9:1e:4a:81:4f:09:36:d2:85:ff:59:80:26:c2:de:da:
25:67:08:4e:71:d9:e0:60:ca:f6:60:8f:8e:17:b6:db:2a:0a:
58:1d:72:b0:c8:fc:75:5b:2d:8a:9d:2a:bb:01:c5:b9:e3:01:
fb:25:b0:a1:41:ec:4d:d2:44:42:79:b0:f5:bc:04:90:52:ed:
4f:da:1a:f6:85:67:43:f1:53:c9:ab:ed:3b:6d:e1:fc:6f:a2:
1e:33:0a:c5:ea:5c:18:64:81:bb:c2:a9:99:de:c0:e6:97:15:
7b:f7:1f:16:de:0b:5d:7a:4f:2c:d9:8c:3d:b6:3e:19:ed:1c:
98:81:18:62:be:83:dd:62:e2:fd:dd:5c:45:d0:e1:81:ec:f7:
c3:16:93:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:42 2025 by rpki-client