Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31F12348062911F0A9998564762E951A.roa
File: 31F12348062911F0A9998564762E951A.roa (raw, json)
Hash identifier: UuRFfXNINfiq5JWVbQZTPs0C0j9oam+aDMkBVJucoZw=
Subject key identifier: 25:92:30:C7:46:F4:16:EE:F9:8F:78:FF:5F:FA:88:CB:39:B4:1D:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014768
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31F12348062911F0A9998564762E951A.roa
Signing time: Fri 21 Mar 2025 07:50:45 +0000
ROA not before: Fri 21 Mar 2025 07:50:41 +0000
ROA not after: Wed 02 Apr 2025 07:50:41 +0000
asID: 39600
IP address blocks: 156.237.108.0/24 maxlen: 24
156.237.109.0/24 maxlen: 24
156.237.110.0/24 maxlen: 24
156.237.111.0/24 maxlen: 24
156.237.120.0/24 maxlen: 24
156.237.121.0/24 maxlen: 24
156.237.122.0/24 maxlen: 24
156.237.123.0/24 maxlen: 24
156.237.124.0/24 maxlen: 24
156.237.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83816 (0x14768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 21 07:50:41 2025 GMT
Not After : Apr 2 07:50:41 2025 GMT
Subject: CN=67dd1a55-c298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:71:aa:06:d0:c0:48:00:a7:bd:3a:18:3a:0a:
ec:9b:02:4b:93:dd:2e:29:56:40:08:5f:c6:24:e1:
1c:ab:f3:68:66:4b:bb:0f:01:2e:6f:98:e9:81:38:
76:a0:7c:71:76:d6:c8:57:7b:0e:5f:92:d9:e2:80:
ce:b1:3d:8b:66:44:c7:c5:49:fd:5d:2d:3c:68:5a:
82:bb:bb:b9:49:31:67:c5:48:cf:d9:da:55:04:d3:
1a:f1:9c:26:e9:6f:bc:3e:cd:95:b6:b5:11:17:97:
f7:11:c6:b2:05:2a:dd:2f:2d:b8:1a:bd:ee:40:e7:
6c:76:d9:1c:36:c4:86:84:2e:41:61:8a:1f:fb:4f:
45:cf:83:1c:96:f9:4f:1c:c0:6c:79:68:29:8f:2f:
24:ba:44:ed:db:3f:00:7f:88:f7:e1:6d:a7:dc:04:
c1:3e:27:03:8b:80:e2:8b:7e:29:3a:9f:f1:4e:88:
13:c4:bd:68:63:cb:b3:03:a8:af:a0:76:28:0c:8a:
28:86:5a:fe:4f:a8:84:77:00:f6:8c:69:c5:37:62:
e7:e7:36:4e:c6:c4:0e:25:23:2e:63:12:7c:a2:90:
ae:de:03:fb:c9:16:dd:d5:ea:91:83:fd:62:e7:fc:
27:05:02:a3:1e:87:20:07:9d:ca:33:74:c9:89:1a:
10:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:92:30:C7:46:F4:16:EE:F9:8F:78:FF:5F:FA:88:CB:39:B4:1D:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31F12348062911F0A9998564762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.108.0/22
156.237.120.0-156.237.125.255
Signature Algorithm: sha256WithRSAEncryption
03:d9:ab:61:56:5c:95:49:09:18:f8:9c:d8:a4:25:ad:84:8c:
97:64:f3:b2:cc:09:f4:86:30:67:0f:cf:0d:1f:23:84:27:1b:
08:9f:2c:b8:e3:e2:71:80:84:a9:6d:fb:59:05:cd:0d:e0:e0:
88:fa:57:62:c9:f3:82:0c:2a:f1:8d:b0:31:f8:bf:8b:46:79:
ca:7b:66:6e:d6:bc:a9:bb:e3:42:7c:3b:a0:a7:77:2b:ec:01:
2b:e5:76:eb:7d:b5:b3:f7:b9:26:1d:ac:f8:75:f6:82:b9:b9:
24:d6:91:74:07:96:cd:84:cf:6f:18:96:56:f0:72:e4:a6:80:
6d:36:e0:47:e3:33:08:c4:74:2a:84:16:af:af:c8:bf:b0:60:
00:06:8f:d5:61:12:6c:d9:5b:47:4c:75:9b:03:67:48:84:d0:
d4:5a:58:bc:6e:fe:ba:f3:b3:3e:79:57:3b:be:20:b9:e6:75:
2e:0e:a4:b1:23:b8:ca:91:a1:05:5f:cc:d5:aa:50:c2:5d:c6:
5c:a8:6e:11:1e:01:99:f0:ff:b6:8e:9b:35:f8:a7:96:9d:b6:
31:9c:87:8c:2c:c8:38:44:51:72:0e:44:58:ca:0f:fd:ab:22:
68:7d:fa:b4:0b:ae:4a:f1:4a:b3:8a:10:bb:4c:0d:a8:01:d6:
a4:fe:22:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:05:06 2025 by rpki-client