Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EFA363AF64911EFA104A952762E951A.roa
File: 5EFA363AF64911EFA104A952762E951A.roa (raw, json)
Hash identifier: /kMUNmRkiFlUxEBQ/hkjbSQnMriwkFMuhmhoROCU9WE=
Subject key identifier: 38:67:46:91:AD:DC:58:45:3B:3A:92:B4:0F:5A:68:FC:7C:69:07:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F7A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EFA363AF64911EFA104A952762E951A.roa
Signing time: Sat 01 Mar 2025 03:00:46 +0000
ROA not before: Sat 01 Mar 2025 03:00:42 +0000
ROA not after: Sat 19 Feb 2028 03:00:42 +0000
asID: 17561
IP address blocks: 156.225.2.0/24 maxlen: 24
156.225.52.0/24 maxlen: 24
156.225.55.0/24 maxlen: 24
156.225.176.0/24 maxlen: 24
156.225.179.0/24 maxlen: 24
156.225.180.0/24 maxlen: 24
156.225.183.0/24 maxlen: 24
156.250.37.0/24 maxlen: 24
156.250.47.0/24 maxlen: 24
156.250.60.0/24 maxlen: 24
156.254.34.0/24 maxlen: 24
156.254.38.0/24 maxlen: 24
156.254.45.0/24 maxlen: 24
156.254.51.0/24 maxlen: 24
156.254.52.0/24 maxlen: 24
156.254.64.0/24 maxlen: 24
156.254.65.0/24 maxlen: 24
156.254.66.0/24 maxlen: 24
156.254.70.0/24 maxlen: 24
156.254.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81786 (0x13f7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 1 03:00:42 2025 GMT
Not After : Feb 19 03:00:42 2028 GMT
Subject: CN=67c2785e-082f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:e3:2c:98:65:9a:da:32:9b:37:76:97:3d:
7c:cf:5c:be:6e:99:59:5d:51:b4:74:e1:a1:80:8e:
9e:33:7d:b7:46:15:87:f7:bc:71:05:73:b4:9c:b3:
a8:41:3a:66:8e:44:ed:5f:02:43:7d:ea:66:33:6e:
b4:59:70:68:2c:4b:f4:4c:93:ea:0f:06:5e:a0:ae:
fb:60:2c:1a:78:96:01:f5:b4:9f:df:e1:3f:00:fc:
b6:bd:d3:66:e0:b8:8b:39:43:cc:9f:67:91:99:b7:
84:6d:da:23:c0:e2:63:0b:c7:2d:83:81:58:4f:d2:
f2:4a:36:e5:d9:54:03:00:44:38:86:22:b5:9e:64:
d6:eb:3a:6e:5a:62:d2:0c:ab:26:c5:bc:db:91:80:
04:78:98:a8:9c:31:c6:3a:29:1f:c7:29:e8:15:0f:
b2:31:82:c1:ea:3b:e3:ab:18:32:65:79:b8:88:41:
1e:cb:da:f2:82:bd:e3:cf:8c:4d:e3:e4:21:71:30:
29:46:3f:29:ab:a3:6f:ae:5f:ba:44:6b:c9:06:0a:
d9:06:1f:8d:ee:5e:7e:0b:d4:f4:3d:98:02:38:c1:
a3:9b:94:85:11:a3:3e:ed:94:86:82:31:11:c5:5f:
79:90:c9:04:36:03:99:52:94:8d:ba:8d:04:43:b1:
61:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:67:46:91:AD:DC:58:45:3B:3A:92:B4:0F:5A:68:FC:7C:69:07:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EFA363AF64911EFA104A952762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.2.0/24
156.225.52.0/24
156.225.55.0/24
156.225.176.0/24
156.225.179.0-156.225.180.255
156.225.183.0/24
156.250.37.0/24
156.250.47.0/24
156.250.60.0/24
156.254.34.0/24
156.254.38.0/24
156.254.45.0/24
156.254.51.0-156.254.52.255
156.254.64.0-156.254.66.255
156.254.70.0/24
156.254.85.0/24
Signature Algorithm: sha256WithRSAEncryption
87:94:d3:63:9d:35:6d:c0:39:d2:9b:c0:c4:f2:0e:89:89:d4:
e8:93:7d:84:05:4c:6e:52:9e:91:b9:4a:09:6b:f3:93:b1:fc:
ee:6f:c6:a0:ac:74:5a:f8:66:a7:cf:c1:49:39:0c:84:d7:4b:
c2:cb:f0:75:b8:2e:b4:f6:41:55:07:da:cd:ad:4a:87:05:5e:
57:b4:42:41:9f:ad:33:9c:a8:88:82:d8:38:0a:fa:d5:a8:58:
27:09:25:b1:3f:c7:b8:58:e5:57:ab:ad:bd:ba:41:14:00:77:
49:3c:f9:10:cf:41:0f:51:61:18:79:45:7d:37:cf:1c:3e:eb:
a2:8f:38:8e:ba:8f:56:bd:29:fe:9e:f3:e9:d0:29:83:af:8b:
da:63:5d:c8:4e:c7:f7:56:92:e8:79:a8:8f:82:a3:c6:ca:79:
8e:a2:78:b8:23:98:2a:58:ad:04:e0:a9:c6:38:ee:e0:5b:88:
06:f9:6b:9f:62:a6:36:01:b4:b2:62:31:2f:f4:56:13:4c:78:
1d:3b:2f:fc:31:12:5b:4b:f0:d3:03:ed:3f:d2:61:d9:b9:5d:
74:61:6a:c9:85:d2:cd:aa:8f:19:1f:b0:42:75:22:d5:1f:d7:
fc:fa:95:de:2c:35:93:48:28:4a:8e:e5:db:ca:99:90:07:cf:
0c:61:7f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:22 2025 by rpki-client