Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A77BDB6FF2C11EFA5038EA0762E951A.roa
File: 6A77BDB6FF2C11EFA5038EA0762E951A.roa (raw, json)
Hash identifier: KIgNCL6+JZlLDtKFOKcxfORqk77e5zxuFGsqDfd+hPE=
Subject key identifier: CF:F7:78:1C:71:1A:6C:8D:DE:05:35:8C:57:E4:03:23:BC:11:FF:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014540
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A77BDB6FF2C11EFA5038EA0762E951A.roa
Signing time: Wed 12 Mar 2025 10:26:10 +0000
ROA not before: Wed 12 Mar 2025 10:26:06 +0000
ROA not after: Mon 31 Mar 2025 10:26:06 +0000
asID: 22773
IP address blocks: 156.229.0.0/24 maxlen: 24
156.229.4.0/22 maxlen: 24
156.232.0.0/23 maxlen: 24
156.235.16.0/22 maxlen: 24
156.235.48.0/24 maxlen: 24
156.235.54.0/24 maxlen: 24
156.235.56.0/21 maxlen: 24
156.236.0.0/23 maxlen: 24
156.237.0.0/24 maxlen: 24
156.237.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83264 (0x14540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 10:26:06 2025 GMT
Not After : Mar 31 10:26:06 2025 GMT
Subject: CN=67d16142-3d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:db:0b:e0:6b:2a:d4:91:c1:6c:92:88:62:
81:21:08:41:41:fe:46:90:fd:a5:b4:10:20:47:17:
8d:9e:5e:ef:41:94:80:8a:48:86:07:c1:d0:61:db:
59:7b:d7:3d:87:dd:84:f5:d7:fe:19:c5:c6:cb:b0:
aa:02:b5:7f:69:c7:dc:8a:d8:9c:74:e7:46:df:a3:
77:72:78:dc:4e:ad:59:21:e4:bb:ef:44:7a:e8:57:
9b:73:c1:41:0f:26:a3:2e:bd:b4:bb:37:ed:e1:eb:
8e:ac:84:20:16:ca:53:1f:d9:bb:d7:aa:06:87:01:
76:0d:ed:99:6f:91:e1:bd:70:63:c7:65:dd:66:84:
cc:26:53:f6:6e:81:1a:56:de:f8:71:c9:39:70:03:
24:a2:98:32:db:2a:6d:1f:88:5d:02:b8:76:7e:1f:
af:8d:a9:36:70:8b:fa:40:6b:11:8a:ec:de:7a:97:
e4:22:e5:f7:44:1b:72:d6:c2:18:ec:62:3c:1e:c2:
f4:8d:8b:c0:44:ff:6e:34:d2:9b:b8:1a:49:3a:f1:
d0:1b:ee:1f:50:e3:1c:84:2a:6f:24:f7:71:80:c3:
59:d4:52:37:1f:6e:31:d4:3c:86:03:34:bf:e2:9d:
d3:a0:4c:64:2e:25:29:10:67:52:24:2d:60:c6:a6:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F7:78:1C:71:1A:6C:8D:DE:05:35:8C:57:E4:03:23:BC:11:FF:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A77BDB6FF2C11EFA5038EA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.0.0/24
156.229.4.0/22
156.232.0.0/23
156.235.16.0/22
156.235.48.0/24
156.235.54.0/24
156.235.56.0/21
156.236.0.0/23
156.237.0.0/24
156.237.6.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ef:87:3b:1d:3c:e9:f8:2f:e1:bc:80:ca:27:ac:47:a4:ba:
93:9c:70:25:13:4c:bb:f3:61:2c:25:19:2e:fc:20:c1:8e:37:
cb:08:76:d0:bb:17:82:db:75:51:19:62:bd:7f:6e:b0:8d:93:
1f:7e:f9:2f:cf:ef:47:b5:e3:a4:5a:8b:51:6b:5b:36:99:bf:
24:ed:8a:5c:a5:8e:f3:1b:b6:e4:30:0c:7f:dc:8c:e3:83:12:
9d:06:1e:1c:32:71:33:f6:35:26:55:7c:c0:91:3e:66:fa:a1:
2e:7e:e4:d7:dc:61:19:e0:92:1a:d5:e6:19:e2:02:53:73:3b:
ea:0e:7a:15:25:96:eb:b5:7a:04:36:c7:77:96:76:91:12:90:
9b:84:d8:25:41:c5:51:87:2c:f8:91:9b:17:3d:bf:f7:01:fe:
8a:a0:cf:6a:01:4b:19:27:82:eb:e9:4a:77:94:b2:81:25:08:
22:66:03:d7:14:16:01:98:38:fe:34:31:5a:2d:9b:16:33:23:
bf:98:0e:bb:1f:69:e6:00:7d:70:f0:6a:2c:86:2d:b0:36:5b:
75:4d:28:6b:90:f8:64:b5:80:ba:8d:1f:ff:c4:6e:c0:57:51:
34:0e:1e:7d:01:fc:47:25:63:d8:b3:f8:a2:2f:d8:6e:34:f7:
2c:bb:f4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:31:53 2025 by rpki-client