Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20F3884807AE11F0A29BABAB762E951A.roa
File: 20F3884807AE11F0A29BABAB762E951A.roa (raw, json)
Hash identifier: QPxdFG2bNXKw5EuJcq7TENtpafMi2uo1O1iVSWRpdQ4=
Subject key identifier: 27:CE:58:D8:3A:5F:C9:94:8E:F5:F8:98:B4:82:C0:C6:A3:0B:66:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20F3884807AE11F0A29BABAB762E951A.roa
Signing time: Sun 23 Mar 2025 06:14:51 +0000
ROA not before: Sun 23 Mar 2025 06:14:47 +0000
ROA not after: Wed 02 Apr 2025 06:14:47 +0000
asID: 39600
IP address blocks: 156.237.108.0/24 maxlen: 24
156.237.109.0/24 maxlen: 24
156.237.110.0/24 maxlen: 24
156.237.111.0/24 maxlen: 24
156.237.119.0/24 maxlen: 24
156.237.121.0/24 maxlen: 24
156.237.122.0/24 maxlen: 24
156.237.123.0/24 maxlen: 24
156.237.124.0/24 maxlen: 24
156.237.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83886 (0x147ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 23 06:14:47 2025 GMT
Not After : Apr 2 06:14:47 2025 GMT
Subject: CN=67dfa6db-1b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:d7:b9:71:91:af:eb:50:b1:ed:64:bc:53:
c4:da:7f:64:ea:53:ae:97:8f:d6:06:57:40:16:47:
fc:e0:7e:3a:a0:80:4e:55:e0:bb:b2:ac:6a:ad:d8:
c5:d4:83:9f:b8:34:38:b6:9a:84:bc:e7:1d:8a:f0:
1a:ad:cb:3c:87:aa:4e:eb:83:d8:d3:e1:0f:5c:f1:
ca:a4:0d:95:87:48:f2:d4:95:78:05:3e:5e:02:e0:
7d:77:1f:cb:ce:13:10:23:65:51:f6:16:82:ae:cb:
fa:45:04:ce:cd:3f:a4:ba:25:4a:ce:a9:1f:33:b2:
da:01:1b:b5:ae:33:29:0e:d1:87:1e:4d:35:a3:cc:
e6:0b:ff:e4:f8:70:2d:98:0e:4c:a5:c6:43:c7:fe:
39:56:7f:87:ca:ff:7c:4b:e2:cf:a4:04:b2:4b:5a:
55:b9:c9:a1:90:66:2f:de:36:a1:cc:87:e5:8c:12:
d7:4e:50:84:f9:aa:9c:54:ae:b0:66:ff:a9:0e:82:
0c:2c:de:4c:98:88:f5:76:aa:2f:30:38:75:47:dc:
df:7e:39:76:21:e6:dd:4f:04:03:75:ae:bb:9d:08:
e0:77:61:31:c0:9d:3e:70:2f:5e:50:f0:dc:c8:d8:
53:32:4d:d8:65:2d:43:eb:77:b9:46:c1:ad:f8:bc:
6e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CE:58:D8:3A:5F:C9:94:8E:F5:F8:98:B4:82:C0:C6:A3:0B:66:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20F3884807AE11F0A29BABAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.108.0/22
156.237.119.0/24
156.237.121.0-156.237.125.255
Signature Algorithm: sha256WithRSAEncryption
4e:a1:e4:8a:e0:a9:cb:a1:b1:f4:e0:b8:c5:4c:2f:cf:69:43:
83:c8:a5:b6:2b:be:41:b3:9f:84:de:35:d9:31:a9:0b:f3:7e:
cb:d7:c0:b5:f1:81:9c:80:1f:26:fc:58:f1:34:63:13:1d:b9:
96:9e:b2:d5:30:01:c5:28:39:29:36:d4:4d:5d:23:89:3a:9b:
d2:1d:7e:ce:4a:cb:eb:41:8c:f8:d0:d0:f8:0e:ec:e6:7e:00:
20:2f:38:77:c8:2e:f1:9c:ab:aa:1b:67:ac:05:01:fd:fd:fa:
88:41:78:22:f4:7b:72:74:43:62:9d:6b:f4:28:ac:4b:14:ef:
22:4c:2a:80:ac:e7:c2:c5:fd:00:14:a8:89:a6:95:32:19:7c:
55:eb:83:56:72:18:c8:2f:d0:06:1c:d7:49:90:1d:3b:1b:b1:
2c:ee:10:e3:9e:94:98:eb:4d:9c:e2:72:38:08:86:e4:63:af:
4b:9d:25:a6:b9:b5:74:25:0a:aa:94:25:74:d7:af:c4:5f:70:
6f:1c:0e:0c:61:7e:59:76:e8:1c:6d:57:d7:ee:20:c7:39:de:
12:60:b4:b1:e0:fb:b0:f7:1f:91:54:a3:1e:45:1b:ae:fb:83:
81:1f:5e:43:5f:d5:bb:8c:8d:7b:58:b5:a9:50:e2:a9:cc:14:
3f:67:11:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:38 2025 by rpki-client