Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D9F0892F8D811EF968011B4762E951A.roa
File: 0D9F0892F8D811EF968011B4762E951A.roa (raw, json)
Hash identifier: HVql3q6nFHTaQ4lni0HwF+O5yTAVKBTCjfnuwNulFY0=
Subject key identifier: 6A:A3:EA:BB:5E:38:2E:D0:E8:03:29:1E:EF:58:59:F7:F4:0D:1B:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0142E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D9F0892F8D811EF968011B4762E951A.roa
Signing time: Tue 04 Mar 2025 09:07:10 +0000
ROA not before: Tue 04 Mar 2025 09:07:05 +0000
ROA not after: Fri 04 Apr 2025 09:07:05 +0000
asID: 200373
IP address blocks: 156.228.85.0/24 maxlen: 24
156.228.177.0/24 maxlen: 24
156.228.178.0/24 maxlen: 24
156.228.179.0/24 maxlen: 24
156.228.190.0/24 maxlen: 24
156.233.72.0/24 maxlen: 24
156.233.73.0/24 maxlen: 24
156.233.74.0/24 maxlen: 24
156.233.75.0/24 maxlen: 24
156.233.84.0/24 maxlen: 24
156.233.85.0/24 maxlen: 24
156.233.86.0/24 maxlen: 24
156.233.87.0/24 maxlen: 24
156.233.89.0/24 maxlen: 24
156.233.90.0/24 maxlen: 24
156.233.91.0/24 maxlen: 24
156.233.92.0/24 maxlen: 24
156.233.93.0/24 maxlen: 24
156.233.94.0/24 maxlen: 24
156.233.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82659 (0x142e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 09:07:05 2025 GMT
Not After : Apr 4 09:07:05 2025 GMT
Subject: CN=67c6c2be-26b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:39:05:9d:78:0c:9f:73:0b:35:e6:90:46:
f7:ca:0a:29:78:84:bd:56:65:c9:94:55:e7:d9:cc:
0e:4e:d6:96:58:c9:6f:92:90:59:30:3a:2d:0f:a3:
b0:65:d9:d4:6d:fc:83:5e:68:99:1e:18:b9:7e:d3:
6b:f0:11:5a:c0:36:d5:b0:4c:f5:ed:1a:ee:f0:16:
29:a6:96:ea:7d:cc:9a:5f:59:05:a5:47:4e:bc:c1:
1b:7a:e3:27:c0:50:78:37:de:b8:af:7b:32:76:16:
36:90:52:ef:07:00:2c:13:77:37:be:c1:bc:13:ed:
d4:5e:37:e1:85:c0:7b:9b:fa:69:98:9c:cd:8d:5c:
43:f9:c1:96:25:26:bd:a7:1f:1f:ee:2b:d9:7e:fe:
b2:2a:e0:cf:ec:6d:6e:f8:42:45:09:26:32:7b:28:
99:0f:ce:65:4f:87:fe:13:33:31:bb:5f:3c:99:de:
78:b4:a7:ea:ee:30:46:a2:4f:d8:98:a1:8d:5b:43:
73:07:55:37:3e:e9:23:06:04:30:f9:f0:27:2d:f9:
98:2e:8b:69:10:d6:43:40:16:93:d8:46:0c:1d:f4:
4d:05:d5:cb:f6:19:54:e6:3d:1f:e0:95:e7:34:d0:
02:11:83:f1:b1:1a:ef:5a:1d:b7:4f:a2:a3:bd:11:
4c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A3:EA:BB:5E:38:2E:D0:E8:03:29:1E:EF:58:59:F7:F4:0D:1B:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D9F0892F8D811EF968011B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.85.0/24
156.228.177.0-156.228.179.255
156.228.190.0/24
156.233.72.0/22
156.233.84.0/22
156.233.89.0-156.233.95.255
Signature Algorithm: sha256WithRSAEncryption
23:48:fe:df:f3:a0:aa:75:ca:94:a9:00:77:ea:9f:64:08:4e:
31:2a:55:d3:33:5a:9e:62:54:0b:b1:85:6e:b2:19:e5:83:38:
f6:1a:95:53:cb:5e:ad:6d:af:a6:7f:83:01:fc:d8:94:ef:54:
22:c0:37:f7:37:bb:6d:c4:13:ab:85:c4:86:00:91:b2:37:20:
25:89:73:76:92:d0:0c:35:11:5c:36:89:4c:b0:5c:da:00:3a:
e9:ec:bc:98:3f:53:53:9a:b3:5a:72:66:32:dd:03:24:a5:93:
8c:b8:4c:49:fb:a2:db:5d:e7:f1:f0:a5:f9:50:c9:85:8b:a8:
9d:53:35:08:a1:ac:74:1e:5f:64:35:4d:de:1e:51:32:29:d3:
0d:20:ba:25:a9:89:56:e3:45:4c:57:70:c4:00:c3:d2:d4:fd:
cc:49:16:4d:eb:c6:21:2f:fa:36:e4:46:0f:07:19:e8:28:8e:
bd:c5:e7:d8:e0:de:3a:6e:07:78:c3:ec:7a:70:e1:6b:ca:1e:
60:f7:1d:71:18:f5:84:fb:e5:32:61:b8:7c:1c:8a:98:04:a1:
ac:6c:24:0e:eb:18:59:4e:31:10:d6:52:62:03:e9:2a:de:e2:
b3:16:4e:3c:27:33:a5:b8:c5:4b:1b:1b:e1:bb:2c:e4:56:e8:
58:11:3e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:11:45 2025 by rpki-client