Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57AF2EDAF5A411EFABD24465762E951A.roa
File: 57AF2EDAF5A411EFABD24465762E951A.roa (raw, json)
Hash identifier: oNpBCagKxheJ+EYWfldyVkiEO/aj8Un2trpuwA/NLNs=
Subject key identifier: 28:1D:EB:E2:0B:4C:45:3F:33:A4:43:B8:11:8D:82:74:CA:9E:AD:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013C27
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57AF2EDAF5A411EFABD24465762E951A.roa
Signing time: Fri 28 Feb 2025 07:19:27 +0000
ROA not before: Fri 28 Feb 2025 07:19:23 +0000
ROA not after: Thu 19 Feb 2026 07:19:23 +0000
asID: 984
IP address blocks: 156.252.42.0/24 maxlen: 24
156.252.81.0/24 maxlen: 24
156.252.83.0/24 maxlen: 24
156.252.86.0/24 maxlen: 24
156.252.87.0/24 maxlen: 24
156.252.91.0/24 maxlen: 24
156.252.93.0/24 maxlen: 24
156.252.96.0/24 maxlen: 24
156.252.99.0/24 maxlen: 24
156.252.104.0/24 maxlen: 24
156.252.116.0/24 maxlen: 24
156.252.123.0/24 maxlen: 24
156.252.124.0/24 maxlen: 24
156.252.135.0/24 maxlen: 24
156.252.149.0/24 maxlen: 24
156.252.157.0/24 maxlen: 24
156.252.158.0/24 maxlen: 24
156.252.159.0/24 maxlen: 24
156.252.164.0/24 maxlen: 24
156.252.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80935 (0x13c27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 07:19:23 2025 GMT
Not After : Feb 19 07:19:23 2026 GMT
Subject: CN=67c1637e-44e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:50:69:9b:10:ee:fa:42:ff:d8:e9:23:6d:
e6:4f:30:a1:4f:98:83:d7:8f:9e:f5:8c:14:57:b2:
80:1b:86:e3:36:ce:d2:e2:f2:f2:b7:64:10:df:c6:
d6:10:d3:73:15:96:4c:b1:e5:bd:a7:56:42:b2:59:
85:6f:6b:63:52:72:17:72:76:70:88:9d:3f:18:01:
36:1a:f2:4f:5e:28:c3:66:e0:89:2a:28:01:9a:30:
27:73:4a:7c:11:a8:44:f7:47:bc:19:f6:83:57:a3:
b4:97:91:1c:be:60:a0:dd:b8:15:ae:f1:80:fe:f6:
7f:c6:94:ee:a8:26:cd:9f:d7:1a:64:c8:fb:42:e6:
5e:74:11:7e:e5:f1:2b:b6:40:74:0b:71:54:56:27:
98:6b:01:48:a9:9b:57:9e:c1:16:ab:9c:53:09:1d:
53:81:a9:eb:fb:f3:76:f0:62:0b:27:44:6b:9d:9d:
fe:6e:0d:5f:80:fb:cc:53:4d:41:03:b0:8e:83:7d:
b0:43:97:e8:73:88:51:9e:67:5f:58:79:4a:33:30:
74:6c:03:4f:5b:06:fc:82:cf:c1:ec:e9:e0:e2:5e:
9c:c9:db:10:5c:f1:9e:de:05:a1:70:c0:3d:b6:71:
43:d5:16:fa:98:e1:d3:46:e1:3c:e8:fc:c1:f5:1d:
9d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1D:EB:E2:0B:4C:45:3F:33:A4:43:B8:11:8D:82:74:CA:9E:AD:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57AF2EDAF5A411EFABD24465762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.42.0/24
156.252.81.0/24
156.252.83.0/24
156.252.86.0/23
156.252.91.0/24
156.252.93.0/24
156.252.96.0/24
156.252.99.0/24
156.252.104.0/24
156.252.116.0/24
156.252.123.0-156.252.124.255
156.252.135.0/24
156.252.149.0/24
156.252.157.0-156.252.159.255
156.252.164.0/24
156.252.170.0/24
Signature Algorithm: sha256WithRSAEncryption
30:dd:43:ee:04:3c:a0:c7:64:67:2a:ae:5a:f4:03:ba:50:bb:
3f:df:13:5c:b3:cf:78:96:ce:f8:56:05:ab:5e:a5:0a:75:33:
65:ff:34:1c:54:bf:70:c6:f8:4b:99:f3:e9:22:9f:b0:4c:52:
5f:6a:57:97:5e:0b:8c:62:7f:fd:8e:99:71:67:a0:0f:96:03:
eb:c8:cf:26:54:a6:1d:e5:01:de:b5:05:95:c1:91:5f:3a:83:
47:4d:8a:66:e3:89:36:fd:5f:a9:82:7b:e2:73:ee:35:37:af:
03:d8:a8:d4:4d:8f:66:c5:02:55:ad:09:5d:91:71:75:e5:cd:
b3:5d:0a:06:db:59:62:c4:05:ad:98:2a:22:fe:cc:0e:2e:e1:
b2:da:7d:5e:72:93:b2:df:36:30:e1:25:f7:7f:f5:dd:e9:c0:
7e:b3:0e:0e:fd:5e:dc:a2:28:40:f4:b9:b8:92:30:be:47:d2:
62:24:88:59:20:3c:1a:36:ba:32:fd:6a:51:e2:a8:25:6a:d3:
7e:75:32:ad:9a:63:f1:bf:1c:d2:98:3a:0c:24:45:e2:bd:be:
1c:df:0b:da:0e:ad:c4:3f:5c:cf:ad:c9:cd:d6:1d:b4:42:37:
24:1b:6d:b2:4b:1c:6b:55:28:3c:e9:30:99:6b:65:e8:70:ac:
69:b4:3f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:01 2025 by rpki-client