Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38D0818AFD9711EF92427ABB762E951A.roa
File: 38D0818AFD9711EF92427ABB762E951A.roa (raw, json)
Hash identifier: 92ltj7XLqX/HILxcFltWV9/0vT/9JtUczIAIDaBXths=
Subject key identifier: 51:68:CA:C3:84:60:9D:CE:AF:D9:1B:CD:F1:CC:EF:9C:74:12:CF:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38D0818AFD9711EF92427ABB762E951A.roa
Signing time: Mon 10 Mar 2025 10:05:41 +0000
ROA not before: Mon 10 Mar 2025 10:05:36 +0000
ROA not after: Thu 03 Apr 2025 10:05:36 +0000
asID: 39600
IP address blocks: 156.238.160.0/24 maxlen: 24
156.238.161.0/24 maxlen: 24
156.238.162.0/24 maxlen: 24
156.238.163.0/24 maxlen: 24
156.238.164.0/24 maxlen: 24
156.238.165.0/24 maxlen: 24
156.238.166.0/24 maxlen: 24
156.238.167.0/24 maxlen: 24
156.238.168.0/24 maxlen: 24
156.238.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83108 (0x144a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 10 10:05:36 2025 GMT
Not After : Apr 3 10:05:36 2025 GMT
Subject: CN=67ceb975-05f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4d:cd:b8:0c:82:2c:3d:7e:e5:6f:e4:8d:56:
37:5b:e3:e5:a6:7c:6b:f5:14:fd:46:f6:9d:1a:84:
eb:82:21:77:39:a8:30:46:63:ec:43:d1:ed:c9:35:
11:8c:05:95:12:39:94:e5:a3:48:01:4a:c3:7b:56:
b4:2f:09:53:22:2e:e3:66:cf:92:fd:ba:f1:92:6d:
b1:c6:42:76:8a:ed:56:ff:64:9a:86:f0:14:3a:47:
df:bd:ef:8f:c0:6e:19:f4:0a:53:ef:bc:30:9b:cf:
65:13:17:fb:26:02:f5:5b:71:47:6b:f3:a2:c1:c0:
f4:4a:09:f4:e3:21:e7:90:75:48:31:34:35:98:cf:
77:63:fc:e6:c3:b8:61:55:eb:7d:9d:f6:cb:91:24:
5a:08:84:ea:7f:1c:07:91:fa:bb:aa:2b:a9:f7:95:
ac:49:e5:6d:24:40:3a:70:b9:8f:15:8b:5b:ac:64:
38:e0:1d:ff:63:7d:5f:65:5c:b6:ce:13:f2:e8:13:
8c:41:75:c5:6c:28:7f:dc:52:5c:65:d6:aa:1d:34:
81:0e:0a:77:2c:32:ed:d6:11:4b:0c:5f:16:3d:fd:
e8:15:9f:92:9a:b6:ad:e7:7c:00:4a:b5:0b:15:80:
2a:ee:b4:30:27:67:48:84:a6:55:e3:5b:71:1c:26:
44:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:68:CA:C3:84:60:9D:CE:AF:D9:1B:CD:F1:CC:EF:9C:74:12:CF:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38D0818AFD9711EF92427ABB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.160.0-156.238.169.255
Signature Algorithm: sha256WithRSAEncryption
af:93:cf:b1:a9:a6:e4:7f:f1:fd:01:f5:b5:b9:8f:9b:25:2b:
e5:41:40:c0:98:75:d9:60:1d:1b:8f:5e:5f:c0:61:a7:63:81:
80:ce:4f:76:73:3e:46:c0:31:8b:d4:ba:80:8b:8f:8f:1c:50:
12:5e:dd:05:62:5c:38:ae:36:a5:84:f3:07:7c:a3:db:45:22:
2e:eb:da:4a:eb:d1:0f:37:b6:53:c4:7f:b4:ea:e1:67:4d:cd:
3a:7a:bf:b3:d8:8e:b1:72:65:ca:9b:0b:4d:c4:f5:79:66:be:
33:13:a0:80:4e:fb:0c:a2:6f:cc:a2:61:6e:0c:bf:cd:5f:52:
23:1e:91:36:fb:85:4f:62:f6:3a:aa:8c:73:10:de:a4:b5:5b:
b3:a9:01:8d:9a:e8:61:f7:16:cb:13:f7:05:e0:ef:6b:e2:4e:
60:c6:53:fa:c2:bb:da:a8:b1:e0:de:9f:68:4e:b7:d7:b0:2c:
45:ff:d1:e0:7e:9b:7d:37:6f:e9:20:17:4b:95:98:f3:1e:ad:
4e:a8:e0:40:60:eb:45:d2:e9:d2:91:85:64:00:f6:ae:45:23:
ee:0d:95:2d:dd:b2:83:0d:dd:f7:85:69:7b:ff:25:6c:f9:49:
6e:cf:0c:3e:2a:55:15:b9:0b:f3:7f:1a:50:37:bc:bb:09:04:
33:50:64:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:05:04 2025 by rpki-client