Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DC637880B2811F0BFD67A54762E951A.roa
File: 1DC637880B2811F0BFD67A54762E951A.roa (raw, json)
Hash identifier: yIlDcMXhzlt7vuR04WSJsn2zZysolFB5fvTrVh3dAQw=
Subject key identifier: 8E:1E:F6:DD:E5:27:7A:D3:C5:25:8F:BC:C6:F1:CD:50:3F:23:B3:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014875
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DC637880B2811F0BFD67A54762E951A.roa
Signing time: Thu 27 Mar 2025 16:25:37 +0000
ROA not before: Thu 27 Mar 2025 16:25:33 +0000
ROA not after: Wed 16 Apr 2025 16:25:33 +0000
asID: 142286
IP address blocks: 156.225.132.0/22 maxlen: 24
156.225.136.0/21 maxlen: 24
156.225.144.0/20 maxlen: 24
156.226.24.0/21 maxlen: 24
156.244.64.0/18 maxlen: 24
156.250.4.0/22 maxlen: 24
156.250.8.0/21 maxlen: 24
156.250.16.0/20 maxlen: 24
156.250.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84085 (0x14875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 27 16:25:33 2025 GMT
Not After : Apr 16 16:25:33 2025 GMT
Subject: CN=67e57c01-efb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:00:01:fe:53:2e:b4:61:7b:09:02:18:da:8f:
6f:78:bd:dd:e7:4d:98:e0:3b:c5:85:a6:e0:b0:9a:
90:c7:e2:53:52:61:57:f7:3f:ad:06:ea:b4:c8:42:
71:58:69:bc:d7:37:b9:3b:c8:05:d6:c0:1c:09:af:
c5:14:3e:b1:7b:c1:4e:f5:01:7a:4d:5f:9c:24:ce:
63:0d:27:0b:74:b5:69:18:20:21:9c:0e:7e:2b:dd:
3a:76:d7:41:74:ee:43:65:13:e4:98:4d:4f:d5:0e:
28:ad:67:ae:3f:97:06:df:5f:4e:c9:28:f6:26:36:
11:94:29:cf:cf:fe:3c:7b:03:05:12:67:1f:99:02:
e1:4e:ff:87:4a:e6:d4:74:a5:fe:eb:60:ad:52:a6:
97:bf:0c:59:aa:0f:85:60:d3:a5:1c:79:4e:48:5d:
a4:e8:88:f1:7c:32:90:ef:52:d4:a8:af:24:c2:cc:
d3:11:a3:43:0e:f1:9a:8f:78:f6:58:80:b5:5f:a5:
be:c8:bd:ed:18:cb:2c:4c:7c:8e:29:11:17:93:64:
7b:f0:51:7a:35:73:88:49:06:e4:7c:88:3f:5b:98:
a9:5e:07:c8:fe:ca:f3:e8:96:0f:44:11:4b:ed:fe:
87:c0:ce:28:60:09:4e:e1:43:a0:23:9b:27:17:5c:
e9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1E:F6:DD:E5:27:7A:D3:C5:25:8F:BC:C6:F1:CD:50:3F:23:B3:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DC637880B2811F0BFD67A54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.132.0-156.225.159.255
156.226.24.0/21
156.244.64.0/18
156.250.4.0-156.250.31.255
156.250.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5b:db:ed:48:db:cd:32:0c:93:1e:3a:62:b2:76:d8:d2:4b:2a:
49:fe:e7:3d:0d:32:34:de:a5:97:43:49:1a:da:4d:1d:a5:0c:
92:e8:46:d2:19:4e:94:cf:d2:b6:43:61:8d:3b:d0:a8:ad:ab:
fb:ab:fa:f0:4a:3a:ae:cd:92:43:46:11:a5:c0:53:85:12:40:
02:a4:5d:22:3b:c9:b8:d4:6a:8c:ea:c0:44:93:32:11:0c:2c:
e9:ac:01:23:85:08:eb:63:59:7a:8c:3d:b3:e7:e0:b6:dc:3c:
63:60:9a:dd:c9:61:c5:65:c4:0e:31:86:5f:ee:37:2e:6f:56:
76:2b:46:75:9a:dd:03:0b:4f:03:ac:88:9f:40:17:38:cd:66:
87:be:8b:1c:99:21:10:6c:62:d4:07:7b:4b:8e:e9:0e:9d:dd:
50:56:50:14:57:ad:42:b0:66:44:b2:17:25:9e:a3:eb:58:82:
b0:2b:12:97:9b:90:d8:8a:dd:a9:e4:2f:11:a6:70:64:30:02:
40:89:3b:46:28:89:0c:33:a0:40:f6:39:a6:08:fa:93:01:13:
3e:cf:80:f5:55:2d:07:dd:ac:dc:80:69:a0:af:fc:f1:5d:bb:
30:98:dc:4c:02:92:8a:63:6f:c1:83:bd:d8:40:af:aa:77:e4:
49:9e:d9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:58 2025 by rpki-client