Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64A129ACF5A611EF88033373762E951A.roa
File: 64A129ACF5A611EF88033373762E951A.roa (raw, json)
Hash identifier: 2epSBZ6AF6fuGYsA7zcpk3d/JJtjhYzZZHRVoJCZMdY=
Subject key identifier: 23:97:DD:75:D8:85:A0:AD:62:F1:B1:F1:9B:A3:9A:E5:51:F8:9A:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013C42
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64A129ACF5A611EF88033373762E951A.roa
Signing time: Fri 28 Feb 2025 07:34:07 +0000
ROA not before: Fri 28 Feb 2025 07:34:03 +0000
ROA not after: Thu 19 Feb 2026 07:34:03 +0000
asID: 984
IP address blocks: 156.228.14.0/24 maxlen: 24
156.228.16.0/24 maxlen: 24
156.228.133.0/24 maxlen: 24
156.228.134.0/24 maxlen: 24
156.231.172.0/24 maxlen: 24
156.231.193.0/24 maxlen: 24
156.231.204.0/24 maxlen: 24
156.231.214.0/24 maxlen: 24
156.231.218.0/24 maxlen: 24
156.231.219.0/24 maxlen: 24
156.231.221.0/24 maxlen: 24
156.231.228.0/24 maxlen: 24
156.231.234.0/24 maxlen: 24
156.231.235.0/24 maxlen: 24
156.231.238.0/24 maxlen: 24
156.231.242.0/24 maxlen: 24
156.231.245.0/24 maxlen: 24
156.231.247.0/24 maxlen: 24
156.231.248.0/24 maxlen: 24
156.231.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80962 (0x13c42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 07:34:03 2025 GMT
Not After : Feb 19 07:34:03 2026 GMT
Subject: CN=67c166ef-ece0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:9a:17:f6:d0:c7:8b:bd:12:6c:fa:57:9d:
b3:23:a9:0c:b6:4e:0c:58:ad:69:40:40:dd:a9:d5:
21:35:e0:41:9b:eb:52:b9:95:06:ef:bb:ef:97:25:
ca:df:b1:8d:8e:cb:49:2e:7e:7d:7e:50:ec:11:a9:
e3:43:df:3d:e5:35:40:6f:5f:28:76:65:e4:ea:46:
a3:c3:93:6d:54:e1:8e:11:85:0d:91:78:75:2f:e9:
4e:94:d5:36:b7:84:5b:cc:f1:f3:b8:e0:98:6d:df:
18:25:0a:69:f9:c4:64:cc:20:bc:f7:a5:38:1a:c3:
2d:58:50:fc:be:b6:a0:0e:a5:31:c5:53:59:84:34:
a6:81:9e:75:fc:41:6f:d7:99:42:e4:ee:95:81:36:
be:95:e7:07:f1:57:2a:2f:0a:f3:ea:a1:16:09:1f:
54:3a:6c:0c:a7:fa:b1:fc:f6:81:df:04:48:87:bc:
5f:ad:ed:1e:7c:3f:db:f5:57:a7:68:8c:32:c9:c7:
a5:4d:40:5f:3d:12:61:2c:d4:52:85:23:9a:16:bf:
31:42:cd:66:55:cf:e2:03:a0:78:9b:7f:af:ae:39:
73:99:4d:d6:7e:ed:0e:da:db:f7:51:4c:aa:55:a9:
f2:ff:4e:5b:16:f7:9d:8b:ac:e8:5a:ac:3b:6a:64:
41:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:97:DD:75:D8:85:A0:AD:62:F1:B1:F1:9B:A3:9A:E5:51:F8:9A:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64A129ACF5A611EF88033373762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.14.0/24
156.228.16.0/24
156.228.133.0-156.228.134.255
156.231.172.0/24
156.231.193.0/24
156.231.204.0/24
156.231.214.0/24
156.231.218.0/23
156.231.221.0/24
156.231.228.0/24
156.231.234.0/23
156.231.238.0/24
156.231.242.0/24
156.231.245.0/24
156.231.247.0-156.231.248.255
156.231.251.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:33:64:ca:26:b4:a2:58:d5:30:18:3f:d3:7a:84:6b:2d:7f:
e3:d8:e9:38:50:86:52:2e:1a:12:a0:52:d6:49:f0:a3:1d:5d:
05:4d:58:f8:6c:eb:ef:48:f3:b3:8e:3a:5c:8e:6e:f6:c0:63:
e8:24:6d:77:66:d1:fe:f3:5c:2f:bb:b9:c0:26:ce:94:8a:bc:
a1:6f:4d:10:72:db:a7:7b:00:34:e6:57:93:78:57:7f:56:72:
55:d8:1e:66:4c:b8:07:d5:1c:0e:db:42:b1:0f:4d:b4:79:a3:
10:d5:4f:0d:1e:57:3d:96:f8:aa:cf:e3:e1:ad:76:df:3b:07:
9f:74:82:e0:5c:20:e3:fc:f0:c6:fe:b1:28:e8:e3:71:96:40:
65:60:42:f5:ee:c9:d7:22:a8:93:ff:5b:d7:e4:1b:10:35:5f:
c3:c8:81:c1:ce:7b:60:52:51:7c:0a:fb:28:7d:45:44:58:b6:
d6:55:36:9b:69:e0:04:46:c4:4c:dd:f8:1b:f8:99:21:e5:5d:
3d:a7:77:39:c3:35:9c:9e:9f:b7:8b:b0:c4:6a:c8:a3:5f:fb:
95:04:6e:f4:ff:3c:3a:02:da:61:fc:05:55:49:10:da:5b:e0:
fc:94:07:d2:ea:6a:fc:3e:1b:c3:fd:e2:8a:d7:84:c1:f6:97:
dd:9e:40:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:05 2025 by rpki-client