Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37F3ADAC096111F099108C87762E951A.roa
File: 37F3ADAC096111F099108C87762E951A.roa (raw, json)
Hash identifier: 8JGRwYlwtc1yBVqD4pB2tPehglYRm1VbI1wsaoqmgjU=
Subject key identifier: AD:23:76:82:60:BF:B5:41:77:08:0C:0D:44:12:E1:34:A3:59:10:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014805
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37F3ADAC096111F099108C87762E951A.roa
Signing time: Tue 25 Mar 2025 10:09:20 +0000
ROA not before: Tue 25 Mar 2025 10:09:16 +0000
ROA not after: Sat 17 May 2025 10:09:16 +0000
asID: 138915
IP address blocks: 156.244.2.0/24 maxlen: 24
156.244.4.0/24 maxlen: 24
156.244.5.0/24 maxlen: 24
156.244.6.0/24 maxlen: 24
156.244.7.0/24 maxlen: 24
156.244.48.0/24 maxlen: 24
156.244.49.0/24 maxlen: 24
156.244.50.0/24 maxlen: 24
156.244.51.0/24 maxlen: 24
156.244.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83973 (0x14805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 25 10:09:16 2025 GMT
Not After : May 17 10:09:16 2025 GMT
Subject: CN=67e280d0-c282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:70:56:8d:9c:11:58:a2:fd:21:9c:8e:22:
d8:0a:26:b4:36:e7:3f:66:eb:60:a8:80:01:72:94:
fc:2d:07:8b:ef:38:be:4b:1b:c4:81:84:35:7e:39:
f8:36:2c:15:1f:27:35:7e:5d:03:74:8a:67:93:66:
1f:88:a7:52:aa:f6:aa:30:96:22:95:fe:4c:03:37:
8d:f6:ed:81:5a:d0:cf:13:30:bf:c0:ca:7c:5f:60:
fa:72:f6:f6:07:32:07:4b:4b:8a:e2:fb:fe:de:35:
4e:7b:e1:74:db:5c:49:5d:56:f2:e9:5f:d1:66:be:
af:e3:85:41:26:b4:fd:49:84:bf:6a:6d:7f:9c:fa:
61:b7:ce:8c:1b:19:ab:0e:54:91:ea:1a:7f:2d:f8:
eb:3a:92:26:f5:8d:9a:c0:d8:32:3e:89:81:f5:dc:
d2:9d:45:64:58:7a:5f:d8:3f:65:50:f2:54:f2:f6:
52:57:ed:bb:73:ee:07:f3:ac:1a:a5:ab:8d:b5:a2:
a9:fe:00:aa:f1:9a:79:d5:c1:98:cd:00:4e:98:68:
b5:50:df:58:ea:c9:df:6f:80:ca:d9:17:d7:d5:1d:
45:05:7e:ab:cc:5b:72:94:0e:ec:a9:18:52:3e:8c:
70:05:01:ee:0a:0c:93:2d:81:49:3e:bc:9c:5c:12:
1a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:23:76:82:60:BF:B5:41:77:08:0C:0D:44:12:E1:34:A3:59:10:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37F3ADAC096111F099108C87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.2.0/24
156.244.4.0/22
156.244.48.0-156.244.52.255
Signature Algorithm: sha256WithRSAEncryption
04:c1:72:70:2f:0d:61:26:97:e9:c2:50:c6:7e:24:e2:15:7c:
7b:83:c9:ef:ee:55:78:f4:5f:ee:30:b9:e6:29:c6:2f:c2:4c:
f0:72:6d:a9:71:9b:93:08:58:d2:ee:e9:de:01:e9:bf:ea:9f:
ca:42:74:33:19:cd:58:e4:86:b9:44:b5:0f:55:c0:77:ac:e0:
3d:d9:f1:86:68:e5:66:13:0d:5f:8a:c0:93:93:c5:ff:62:f9:
08:a9:1a:08:ab:75:48:cc:17:30:d5:0e:00:b0:3e:ae:6c:da:
a2:14:3f:96:33:87:42:f9:4c:1e:6d:3e:c2:34:30:3a:63:bb:
4e:34:93:be:f5:c7:ba:3a:9c:2c:a7:e1:7f:c8:f9:46:34:f8:
f7:ad:db:87:25:7e:5a:d5:1c:56:1a:6a:eb:0f:0e:05:d1:33:
81:d7:3c:48:1b:5f:de:44:c7:af:bb:66:3a:34:77:a2:85:1b:
d9:c8:e6:fb:5a:ed:e4:a6:1a:4e:44:01:dd:7b:de:07:39:a7:
80:d0:40:92:1d:1a:e4:8e:42:c5:c0:a0:28:3b:64:62:c2:0b:
13:82:5f:89:f2:15:03:03:a4:11:3a:86:f2:dc:34:95:74:ff:
59:85:f1:c2:35:fa:b8:8b:9a:67:37:69:fe:6e:21:e7:54:1d:
80:0b:f0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:43 2025 by rpki-client