Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/101E3B7EFF2711EF91318A7F762E951A.roa
File: 101E3B7EFF2711EF91318A7F762E951A.roa (raw, json)
Hash identifier: IMuNgrscIkezhXuUW1jE4rVD8Xkcqy0G2Z5pu71N9Ms=
Subject key identifier: DC:EA:48:78:C1:EB:0A:87:FF:CF:19:9F:B6:C5:D7:CC:37:5E:59:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014530
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/101E3B7EFF2711EF91318A7F762E951A.roa
Signing time: Wed 12 Mar 2025 09:47:51 +0000
ROA not before: Wed 12 Mar 2025 09:47:47 +0000
ROA not after: Mon 31 Mar 2025 09:47:47 +0000
asID: 212238
IP address blocks: 156.232.0.0/24 maxlen: 24
156.232.1.0/24 maxlen: 24
156.235.53.0/24 maxlen: 24
156.239.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83248 (0x14530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 09:47:47 2025 GMT
Not After : Mar 31 09:47:47 2025 GMT
Subject: CN=67d15847-643f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:1e:22:4c:7d:a4:4d:4e:21:4e:37:27:c5:
76:e2:f9:18:6a:3a:57:f4:70:c1:91:64:f5:2b:d5:
12:80:58:f7:23:92:e0:07:4c:16:57:be:49:e5:b3:
2d:da:38:00:4a:f3:35:cc:d9:73:17:a6:49:12:88:
e4:39:7d:78:56:13:87:e7:7d:bd:f1:d4:16:45:9f:
01:5f:7d:41:37:98:6c:9b:0b:3d:6d:9d:f1:7a:6d:
07:04:ac:8e:d6:67:e7:f7:bf:4a:be:5e:85:27:03:
c8:42:80:10:e5:c1:18:d9:b7:90:9f:6f:15:74:79:
3b:c8:27:a7:62:34:e6:ea:71:ee:49:5e:81:c6:43:
ea:b4:41:61:35:33:03:4d:fc:7b:0f:3c:bb:02:4e:
d0:a9:8b:57:f1:ec:1d:42:a9:99:2c:a9:84:a7:fa:
c5:29:6b:b0:88:1d:17:c6:82:3f:45:8a:cd:3d:18:
6e:2d:32:70:21:67:a6:29:e8:cb:27:ae:18:d6:d1:
c7:30:7f:1d:e0:11:5d:5e:d2:56:08:83:75:ec:2d:
0e:9b:ca:f3:2a:11:15:5e:2f:6b:77:c8:63:51:7f:
37:db:cf:11:86:d2:19:5f:b7:bb:96:33:56:03:4d:
36:8b:02:17:1b:45:24:82:12:17:fd:c2:31:af:16:
ff:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EA:48:78:C1:EB:0A:87:FF:CF:19:9F:B6:C5:D7:CC:37:5E:59:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/101E3B7EFF2711EF91318A7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.0.0/23
156.235.53.0/24
156.239.18.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:52:c1:aa:80:e9:69:85:97:be:6b:a7:6b:4d:91:45:da:a0:
0d:cd:96:12:d0:c8:3e:8c:0a:18:4e:82:f3:d7:b0:41:5f:d7:
5b:b4:08:9d:b8:16:fa:6e:e1:d1:ce:58:b9:c8:9a:3a:c0:d4:
c1:a9:c6:77:93:eb:83:50:49:04:cd:97:cb:b9:c6:cb:5e:c0:
7b:fa:93:f3:08:aa:94:07:de:ef:54:71:be:13:4f:1a:75:f9:
24:ca:65:ba:62:05:e7:67:15:51:a6:36:66:19:d8:67:2f:56:
2c:bd:76:f6:80:be:7e:d4:10:99:2e:03:1a:e1:7c:cc:38:06:
5c:7b:f5:9f:89:4a:10:b3:7e:68:8a:78:16:a1:f5:cc:47:00:
d7:1b:44:ca:2c:81:11:04:fb:bc:f7:89:fc:81:c1:3f:5f:2f:
3e:76:05:fd:b1:2f:df:6a:32:51:05:96:4b:76:da:5a:cc:50:
ae:ca:84:5f:a6:44:fe:c8:82:9d:3e:3b:74:64:da:4a:b1:f6:
cc:d5:b5:eb:16:63:6e:2b:8c:91:b5:e1:a4:03:7f:64:c7:e1:
fb:eb:90:08:6c:a9:a7:e1:57:4b:a6:f2:c9:68:3f:ee:71:67:
01:e4:5b:34:0b:03:b7:b4:97:c9:85:18:41:9e:ba:7a:ac:01:
21:34:48:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:37:37 2025 by rpki-client