Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/086FFA3E058011F08C615657762E951A.roa
File: 086FFA3E058011F08C615657762E951A.roa (raw, json)
Hash identifier: SjKSJyeqR7fpIhMYniCkHm8t/6kAB72U0HbReEnQD+M=
Subject key identifier: 93:AE:D2:5E:C2:44:72:7B:2D:85:46:10:3B:00:6D:B4:00:18:94:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01473A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/086FFA3E058011F08C615657762E951A.roa
Signing time: Thu 20 Mar 2025 11:39:50 +0000
ROA not before: Thu 20 Mar 2025 11:39:46 +0000
ROA not after: Wed 02 Apr 2025 11:39:46 +0000
asID: 39600
IP address blocks: 156.237.106.0/24 maxlen: 24
156.237.107.0/24 maxlen: 24
156.237.110.0/24 maxlen: 24
156.237.111.0/24 maxlen: 24
156.237.112.0/24 maxlen: 24
156.237.113.0/24 maxlen: 24
156.237.114.0/24 maxlen: 24
156.237.115.0/24 maxlen: 24
156.237.116.0/24 maxlen: 24
156.237.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83770 (0x1473a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 20 11:39:46 2025 GMT
Not After : Apr 2 11:39:46 2025 GMT
Subject: CN=67dbfe86-8d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8c:70:e7:59:57:74:2a:65:33:dd:94:29:b6:
b8:bc:04:74:c1:26:62:54:dd:eb:09:1f:41:e6:da:
da:d3:b8:71:ba:f1:02:de:ce:d4:33:9c:07:a5:dc:
98:2c:a6:41:02:ba:4d:86:ff:26:d3:2e:2f:dd:50:
dc:9a:40:ac:26:08:7e:8d:e6:9a:19:50:cb:70:74:
39:3b:23:9a:56:e2:26:6f:47:65:a7:e8:b5:5e:b3:
3d:90:d9:40:a1:81:56:05:b0:ba:e6:7e:4e:b9:56:
14:bf:f5:fd:6e:c8:7c:b2:59:5a:41:8b:f5:d6:70:
79:cd:73:dc:13:a8:d9:20:ed:10:dd:85:1c:91:6c:
d9:9a:40:26:d8:b6:8e:f5:6d:d7:a9:e6:13:91:67:
31:94:95:51:ef:52:03:70:45:c3:37:bc:bd:15:d4:
95:2b:b3:2a:26:2e:82:2d:9e:c7:66:68:ce:6a:88:
9c:1a:eb:35:04:b1:a4:62:47:e5:ee:54:5a:99:0d:
d2:73:d2:3a:27:93:ca:e1:d0:78:2f:22:ba:87:86:
70:7b:aa:a6:12:05:f8:a1:69:fe:54:0f:b2:ad:03:
0f:66:64:b8:be:7e:e3:23:0a:12:8f:a2:c9:2c:1e:
99:59:24:8b:72:1a:ee:e9:7b:ea:53:8c:4b:6e:b7:
d1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AE:D2:5E:C2:44:72:7B:2D:85:46:10:3B:00:6D:B4:00:18:94:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/086FFA3E058011F08C615657762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.106.0/23
156.237.110.0-156.237.116.255
156.237.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:47:49:ee:53:57:80:1f:97:9b:4a:55:c7:7c:6d:59:cd:04:
d5:f0:52:8b:c6:de:58:25:ec:13:8d:c9:ae:4c:73:5f:1a:2d:
31:9a:f7:66:4c:9d:0c:8a:ce:d9:a2:8c:15:a7:a1:fa:07:86:
89:c9:d9:51:06:c0:7a:3e:af:bd:b7:34:d8:9b:03:39:9b:9e:
36:bc:fe:d4:7d:f7:0c:d2:40:59:6a:f9:fb:89:c2:99:5f:64:
75:0d:7e:92:38:c8:94:a8:71:2e:26:40:b3:8e:db:d9:52:c5:
87:42:da:bf:bf:46:b8:3a:6b:db:27:43:7d:7b:d2:92:81:3c:
77:00:6d:74:c1:d3:49:99:b8:08:71:63:d0:48:66:34:e5:f1:
a4:8c:7a:df:4e:b3:a7:cf:02:00:4c:76:06:c4:17:54:e4:ab:
8e:86:44:eb:b7:62:9e:2e:36:ea:cc:87:1c:59:5d:52:c3:cb:
e2:99:b4:bf:c8:71:8c:0f:03:02:68:9e:1f:0b:ce:79:d7:36:
81:fa:b3:89:42:c6:3b:0d:91:a0:ab:e1:81:f8:1e:97:bc:c3:
2d:06:d2:d7:a9:2e:d6:cf:97:67:02:1c:3a:f2:77:66:d7:67:
3a:46:bc:d4:65:9b:16:df:33:24:e1:fc:a5:da:20:6c:5d:26:
32:49:73:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:22:44 2025 by rpki-client