Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06492AAEF5A511EFA582E569762E951A.roa
File: 06492AAEF5A511EFA582E569762E951A.roa (raw, json)
Hash identifier: DiWecbO0TOq3SDEaszEETIYZHkBDdXeobmSELjjxM3Y=
Subject key identifier: 49:BD:4D:69:8E:FA:2D:1E:3D:03:2C:A6:82:F9:08:49:DD:3C:86:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013C31
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06492AAEF5A511EFA582E569762E951A.roa
Signing time: Fri 28 Feb 2025 07:24:20 +0000
ROA not before: Fri 28 Feb 2025 07:24:16 +0000
ROA not after: Thu 19 Feb 2026 07:24:16 +0000
asID: 984
IP address blocks: 156.245.65.0/24 maxlen: 24
156.245.69.0/24 maxlen: 24
156.245.75.0/24 maxlen: 24
156.245.91.0/24 maxlen: 24
156.245.95.0/24 maxlen: 24
156.245.96.0/24 maxlen: 24
156.245.106.0/24 maxlen: 24
156.245.116.0/24 maxlen: 24
156.245.119.0/24 maxlen: 24
156.252.181.0/24 maxlen: 24
156.252.217.0/24 maxlen: 24
156.252.223.0/24 maxlen: 24
156.252.242.0/24 maxlen: 24
156.252.245.0/24 maxlen: 24
156.252.246.0/24 maxlen: 24
156.252.247.0/24 maxlen: 24
156.252.249.0/24 maxlen: 24
156.252.250.0/24 maxlen: 24
156.252.253.0/24 maxlen: 24
156.252.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80945 (0x13c31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 07:24:16 2025 GMT
Not After : Feb 19 07:24:16 2026 GMT
Subject: CN=67c164a3-6994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:88:87:97:1c:2b:0a:a0:05:3c:9b:56:90:
2b:44:d5:c7:b9:4c:8e:17:a6:1d:e2:7f:c5:f2:61:
2b:15:c2:b2:9f:6d:e3:bd:f2:b4:8f:2d:68:1b:19:
dc:0b:1c:c0:e4:b3:39:e0:25:a0:fb:dc:55:f8:2e:
18:1a:56:8c:fb:e9:2d:88:1c:ae:65:b8:e4:cd:4b:
c6:c5:88:32:ee:27:f4:b6:67:f8:e3:4d:c1:0d:93:
6c:b4:6d:ff:1c:22:81:63:cc:4e:d1:ec:3c:8d:4c:
ef:71:bc:82:60:de:35:2b:9f:a9:a3:52:91:13:c2:
c0:99:95:97:7e:48:b7:a5:65:1c:27:51:b1:21:45:
22:2e:91:7b:a0:73:cf:b2:f9:78:23:db:4d:44:c4:
f5:be:d0:26:a8:18:a2:4b:04:23:0c:23:46:50:86:
a3:98:c4:ce:40:3c:6e:be:4c:79:c7:18:90:a3:62:
24:92:69:d1:ae:6d:25:76:ad:55:06:bf:72:b1:82:
a9:ce:72:44:2e:4e:bf:5a:e8:3f:29:b2:b6:61:0b:
21:ad:3b:c9:dc:c5:22:4b:42:ac:7f:52:e8:9b:ad:
24:d5:70:d2:4e:65:b7:13:ca:82:8e:39:2a:88:ce:
29:dd:33:5a:19:78:7f:cc:bf:f8:35:01:da:ff:5c:
95:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BD:4D:69:8E:FA:2D:1E:3D:03:2C:A6:82:F9:08:49:DD:3C:86:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06492AAEF5A511EFA582E569762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.65.0/24
156.245.69.0/24
156.245.75.0/24
156.245.91.0/24
156.245.95.0-156.245.96.255
156.245.106.0/24
156.245.116.0/24
156.245.119.0/24
156.252.181.0/24
156.252.217.0/24
156.252.223.0/24
156.252.242.0/24
156.252.245.0-156.252.247.255
156.252.249.0-156.252.250.255
156.252.253.0-156.252.254.255
Signature Algorithm: sha256WithRSAEncryption
94:af:f7:10:7f:5a:28:9b:ce:cb:bc:5d:46:67:34:26:ab:99:
0c:a4:e4:0e:48:76:8d:f9:b9:5f:d1:30:ef:b2:ab:41:7b:dc:
20:54:ad:f0:92:81:a1:73:fe:92:bf:86:29:51:7f:e8:89:9f:
06:1e:b1:3d:2f:a9:65:71:00:38:a8:d5:0f:33:ef:e9:04:b9:
27:d3:05:06:8b:88:db:30:a2:30:93:31:02:fe:8b:37:3f:f9:
7f:29:6b:ed:ee:f1:79:0e:a9:8d:74:5b:c9:ff:c2:0b:ee:0c:
f6:fa:41:34:82:2c:56:3a:57:fa:e4:5f:3e:aa:70:62:6e:b2:
d9:b6:d1:48:2c:dd:e7:d7:83:34:e8:0d:b9:57:78:c5:31:09:
9a:45:a7:2f:2b:a6:3b:99:70:46:93:f2:63:05:b4:fe:80:37:
15:48:ee:3d:4d:50:84:c4:b7:33:0e:c7:29:39:4a:9c:a2:8a:
c0:20:1b:80:73:97:dd:49:28:52:67:11:10:2f:e6:0b:26:28:
bb:75:3b:cc:32:b4:16:ed:06:1f:ae:7a:dc:68:d1:df:b8:dc:
ce:08:12:02:e2:47:83:ee:bb:ff:7f:a6:db:5e:4e:16:04:a1:
35:9b:34:d3:21:e3:5a:d1:a2:a6:a1:53:eb:0f:e6:2d:a1:0a:
b6:fd:86:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:11 2025 by rpki-client