Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C18D30CF66911EFA134D7AD762E951A.roa
File: 5C18D30CF66911EFA134D7AD762E951A.roa (raw, json)
Hash identifier: jYWlAjWKRZJnGaKaKT1EuvcfZSRrkMqMPb82ASn7Dm4=
Subject key identifier: 2E:78:0E:55:99:AF:D5:5F:6D:B9:E0:6B:71:C4:F7:9D:80:76:BC:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C18D30CF66911EFA134D7AD762E951A.roa
Signing time: Sat 01 Mar 2025 06:49:45 +0000
ROA not before: Sat 01 Mar 2025 06:49:41 +0000
ROA not after: Thu 19 Feb 2026 06:49:41 +0000
asID: 984
IP address blocks: 156.243.59.0/24 maxlen: 24
156.243.60.0/24 maxlen: 24
156.243.62.0/24 maxlen: 24
156.243.63.0/24 maxlen: 24
156.243.99.0/24 maxlen: 24
156.243.102.0/24 maxlen: 24
156.243.115.0/24 maxlen: 24
156.243.129.0/24 maxlen: 24
156.243.130.0/24 maxlen: 24
156.243.132.0/24 maxlen: 24
156.243.142.0/24 maxlen: 24
156.243.150.0/24 maxlen: 24
156.243.153.0/24 maxlen: 24
156.243.156.0/24 maxlen: 24
156.243.222.0/24 maxlen: 24
156.243.228.0/24 maxlen: 24
156.243.236.0/24 maxlen: 24
156.243.237.0/24 maxlen: 24
156.244.132.0/24 maxlen: 24
156.244.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81818 (0x13f9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 1 06:49:41 2025 GMT
Not After : Feb 19 06:49:41 2026 GMT
Subject: CN=67c2ae09-ba1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:ca:16:fe:5c:ae:2f:dd:2e:94:37:2b:3a:
f7:34:58:f4:04:32:a5:17:52:7d:d0:bd:e1:fb:3a:
00:72:85:82:68:8f:c4:87:c8:64:48:3c:58:e0:1e:
2d:ed:c7:5c:8b:74:de:6e:67:13:54:02:19:7a:b0:
21:57:87:c8:fa:f3:a4:dd:e1:2b:39:15:b6:36:8c:
92:30:a2:6c:85:05:0a:cc:5b:7d:31:bb:9c:50:bf:
21:34:3c:43:dc:ce:7b:c3:97:a3:79:38:cf:16:58:
f6:27:b6:a1:c9:93:bb:b0:42:fb:cd:e2:94:a7:f1:
0f:d4:b1:d7:f8:10:3f:5d:1a:45:7d:f8:b9:85:b9:
a3:9f:32:b3:bb:01:27:0a:91:a7:4e:5e:ff:e1:c4:
35:73:a9:15:7b:01:5c:b5:83:ab:63:ff:d0:ac:74:
00:25:2e:44:47:70:7e:85:97:89:66:68:50:62:a4:
5a:7c:f5:9d:ba:70:d4:cb:bf:49:ab:7b:ef:15:51:
4c:48:31:5d:bc:76:d2:db:5e:dc:b4:b5:ee:b7:52:
8a:fc:86:2f:cf:b6:1a:bb:88:36:8d:49:da:89:44:
35:83:60:e4:be:90:50:f2:ba:da:92:01:30:56:f3:
90:70:d8:4a:c2:54:3e:36:72:bf:98:5b:02:58:13:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:78:0E:55:99:AF:D5:5F:6D:B9:E0:6B:71:C4:F7:9D:80:76:BC:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C18D30CF66911EFA134D7AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.59.0-156.243.60.255
156.243.62.0/23
156.243.99.0/24
156.243.102.0/24
156.243.115.0/24
156.243.129.0-156.243.130.255
156.243.132.0/24
156.243.142.0/24
156.243.150.0/24
156.243.153.0/24
156.243.156.0/24
156.243.222.0/24
156.243.228.0/24
156.243.236.0/23
156.244.132.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:b5:40:63:f2:48:e1:8a:fe:0b:cb:af:b9:10:6d:6d:4b:58:
76:e1:43:af:ae:e3:e3:3f:4b:cd:fd:39:10:54:02:a8:48:a0:
1e:69:2f:89:26:d7:ac:1e:51:57:8c:0f:a4:1b:f7:50:86:c1:
e4:d9:25:68:7a:9b:b1:a9:d7:68:47:81:e9:cc:36:5a:07:76:
98:f6:50:c6:d8:bd:ad:86:35:b2:02:21:97:11:b4:39:bd:2f:
fc:9f:23:ed:3e:2f:f6:9a:3f:0a:ae:91:d6:48:67:07:f9:d4:
55:7a:cc:07:82:32:13:0c:ea:66:1b:c2:13:cf:6c:2b:23:07:
29:de:ba:c1:4f:15:29:22:f9:e9:24:0e:c5:ad:2e:68:7f:e0:
42:ed:64:76:da:9d:58:05:91:90:71:8e:44:f3:c3:78:7a:3f:
24:34:75:ee:29:4e:26:73:9d:d9:0b:ca:5a:94:56:89:12:0c:
ab:cb:11:71:36:50:17:df:a7:af:74:95:4a:1d:98:c4:4b:25:
60:29:be:a0:6c:88:76:ac:de:38:8b:0f:e8:f3:22:69:bc:6b:
8c:65:3c:4e:80:93:d9:77:5c:e5:1f:71:c6:24:ed:51:ec:a2:
d5:31:87:78:80:bf:31:0c:cd:d8:c1:f5:e8:50:92:f6:d2:20:
18:99:c1:de
-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgIDAT+aMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzAxMDY0OTQxWhcNMjYwMjE5MDY0OTQxWjAYMRYw
FAYDVQQDEw02N2MyYWUwOS1iYTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAphjKFv5cri/dLpQ3Kzr3NFj0BDKlF1J90L3h+zoAcoWCaI/Eh8hkSDxY
4B4t7cdci3TebmcTVAIZerAhV4fI+vOk3eErORW2NoySMKJshQUKzFt9MbucUL8h
NDxD3M57w5ejeTjPFlj2J7ahyZO7sEL7zeKUp/EP1LHX+BA/XRpFffi5hbmjnzKz
uwEnCpGnTl7/4cQ1c6kVewFctYOrY//QrHQAJS5ER3B+hZeJZmhQYqRafPWdunDU
y79Jq3vvFVFMSDFdvHbS217ctLXut1KK/IYvz7Yau4g2jUnaiUQ1g2DkvpBQ8rra
kgEwVvOQcNhKwlQ+NnK/mFsCWBPMYwIDAQABo4IDBzCCAwMwHQYDVR0OBBYEFC54
DlWZr9Vfbbnga3HE952AdrwdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QzE4RDMwQ0Y2NjkxMUVGQTEzNEQ3QUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwajAMAwQAnPM7AwQAnPM8AwQBnPM+
AwQAnPNjAwQAnPNmAwQAnPNzMAwDBACc84EDBACc84IDBACc84QDBACc844DBACc
85YDBACc85kDBACc85wDBACc894DBACc8+QDBAGc8+wDBAGc9IQwDQYJKoZIhvcN
AQELBQADggEBAGy1QGPySOGK/gvLr7kQbW1LWHbhQ6+u4+M/S839ORBUAqhIoB5p
L4km16weUVeMD6Qb91CGweTZJWh6m7Gp12hHgenMNloHdpj2UMbYva2GNbICIZcR
tDm9L/yfI+0+L/aaPwqukdZIZwf51FV6zAeCMhMM6mYbwhPPbCsjByneusFPFSki
+ekkDsWtLmh/4ELtZHbanVgFkZBxjkTzw3h6PyQ0de4pTiZzndkLylqUVokSDKvL
EXE2UBffp690lUodmMRLJWApvqBsiHas3jiLD+jzImm8a4xlPE6Ak9l3XOUfccYk
7VHsotUxh3iAvzEMzdjB9ehQkvbSIBiZwd4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:57 2025 by rpki-client