Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C3836340A1211F0B990DB44762E951A.roa
File: 2C3836340A1211F0B990DB44762E951A.roa (raw, json)
Hash identifier: U1uSCI/p6yUXCeb3YpczXovOVwAWyigr2iDnCW7mgdo=
Subject key identifier: 39:C2:20:E7:A4:D1:45:0C:EC:A2:DA:C8:5B:F8:66:76:47:0B:14:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014825
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C3836340A1211F0B990DB44762E951A.roa
Signing time: Wed 26 Mar 2025 07:16:02 +0000
ROA not before: Wed 26 Mar 2025 07:15:58 +0000
ROA not after: Fri 03 Apr 2026 07:15:58 +0000
asID: 984
IP address blocks: 156.253.158.0/24 maxlen: 24
156.253.159.0/24 maxlen: 24
156.253.160.0/24 maxlen: 24
156.253.161.0/24 maxlen: 24
156.253.162.0/24 maxlen: 24
156.253.186.0/24 maxlen: 24
156.253.187.0/24 maxlen: 24
156.253.189.0/24 maxlen: 24
156.253.190.0/24 maxlen: 24
156.253.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84005 (0x14825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 26 07:15:58 2025 GMT
Not After : Apr 3 07:15:58 2026 GMT
Subject: CN=67e3a9b1-88bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:de:08:db:49:62:3f:e6:a0:3e:65:f3:a0:
7e:b7:66:9c:b2:39:bd:7e:6e:f1:b2:6d:82:db:2b:
3e:07:73:10:97:7e:68:98:f2:1f:22:fe:05:76:2e:
27:12:e3:5e:9e:ac:8f:68:cd:8c:22:63:fa:47:2c:
92:7b:17:37:86:0e:e0:5e:61:0a:b6:b5:9c:7e:b8:
c7:5d:89:a7:76:61:98:ce:3f:a7:65:13:3d:cb:7f:
08:1e:43:53:bc:86:f6:34:33:1e:68:8b:12:3b:d5:
de:a0:11:01:4e:91:ee:59:31:ab:0a:51:d9:70:02:
fb:35:e2:74:ee:43:11:f4:e5:e2:47:7d:8a:ca:6e:
4b:58:09:40:45:7a:b6:81:b4:8a:19:23:28:1b:df:
b9:ef:86:08:b6:02:72:57:a4:c5:b3:67:24:c8:13:
cf:b3:36:29:83:9f:48:16:21:af:7e:b9:87:e2:85:
d9:0e:f6:02:29:67:be:12:eb:33:1c:5d:29:23:99:
b5:c4:02:0a:2a:d9:14:c0:73:ca:b1:83:f1:cb:e5:
f4:cc:1c:60:ed:10:48:96:5b:e8:c9:2e:88:6b:a9:
16:59:25:41:2e:91:e3:1c:1b:12:3c:a8:33:22:f9:
a6:ed:5d:87:85:0d:a2:de:9b:62:df:b6:36:63:f1:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C2:20:E7:A4:D1:45:0C:EC:A2:DA:C8:5B:F8:66:76:47:0B:14:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C3836340A1211F0B990DB44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.158.0-156.253.162.255
156.253.186.0/23
156.253.189.0-156.253.190.255
156.253.218.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:39:67:cf:62:21:a5:22:45:f4:01:bc:48:c4:26:c3:00:b5:
fe:93:07:db:f4:c5:b1:d8:71:82:57:24:57:f9:aa:bd:a5:a7:
6c:19:70:5f:35:f0:d5:26:9f:85:be:1e:2d:ac:40:00:62:00:
5d:43:83:47:75:b7:b2:b0:cb:ba:13:a7:c9:b5:f9:0f:0a:a2:
ca:4d:4c:ae:91:67:f9:74:fc:3e:45:e2:1d:80:76:15:b8:1f:
29:9e:21:07:7d:49:80:b1:fe:44:12:a1:01:8f:44:02:03:75:
59:50:d0:c0:e9:4e:47:31:fc:bc:40:a1:2b:95:ba:c6:46:75:
52:ac:d5:21:00:a0:8c:5f:2c:e1:f6:13:4f:6d:16:f7:2d:4e:
69:74:74:92:27:1f:c7:1d:7d:86:d9:e9:76:ed:07:7f:af:3f:
00:45:8f:7e:63:58:3d:fc:90:dc:cd:d6:c8:dc:43:41:43:87:
17:bf:20:f5:d5:3d:05:25:23:df:2c:95:d0:b7:df:34:9c:be:
ff:59:42:76:33:4e:91:59:ce:6e:ef:3c:ab:d9:0b:0f:26:48:
5c:30:35:c4:6d:10:b2:1b:a2:0b:15:0a:bf:60:ed:56:0b:c1:
42:ca:8b:15:83:c2:e6:6e:72:5b:cf:88:e7:5b:18:40:8b:86:
27:64:da:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:49 2025 by rpki-client