Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C4A7332F5A811EF8EBE0781762E951A.roa
File: 6C4A7332F5A811EF8EBE0781762E951A.roa (raw, json)
Hash identifier: 3EUM3YJY/TMoDCTtQR8hV0VA4wYdpaek+1lI67DQ2jg=
Subject key identifier: 26:B3:79:52:3A:1A:39:0B:21:2C:41:DA:44:B9:B4:DC:D3:A8:2A:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013C5D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C4A7332F5A811EF8EBE0781762E951A.roa
Signing time: Fri 28 Feb 2025 07:48:39 +0000
ROA not before: Fri 28 Feb 2025 07:48:36 +0000
ROA not after: Thu 19 Feb 2026 07:48:36 +0000
asID: 984
IP address blocks: 156.239.112.0/24 maxlen: 24
156.239.113.0/24 maxlen: 24
156.239.114.0/24 maxlen: 24
156.239.115.0/24 maxlen: 24
156.239.116.0/24 maxlen: 24
156.239.117.0/24 maxlen: 24
156.239.118.0/24 maxlen: 24
156.239.119.0/24 maxlen: 24
156.239.120.0/24 maxlen: 24
156.239.121.0/24 maxlen: 24
156.239.122.0/24 maxlen: 24
156.239.123.0/24 maxlen: 24
156.239.124.0/24 maxlen: 24
156.239.125.0/24 maxlen: 24
156.239.126.0/24 maxlen: 24
156.239.127.0/24 maxlen: 24
156.239.141.0/24 maxlen: 24
156.239.144.0/24 maxlen: 24
156.239.145.0/24 maxlen: 24
156.239.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80989 (0x13c5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 07:48:36 2025 GMT
Not After : Feb 19 07:48:36 2026 GMT
Subject: CN=67c16a57-efcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:89:17:71:c3:ee:79:ae:77:e9:fb:bd:de:
01:e3:b5:70:fa:ef:d6:21:a7:35:77:a1:87:26:3e:
54:74:77:30:1c:6e:12:5e:87:b4:d5:0b:72:89:7e:
28:f1:e1:0d:f0:c5:a0:1e:76:7c:64:ff:3b:cc:be:
1b:3c:38:49:a5:de:25:69:8c:a0:5f:ff:5d:c6:15:
30:27:d9:0a:ad:48:f7:a4:1e:5d:b4:92:ce:5b:cf:
eb:e1:33:42:6e:4f:b2:22:90:9d:26:bb:b0:c6:3b:
9c:11:9e:6d:92:d3:5b:73:c2:70:b9:05:7f:ea:78:
b3:59:5e:85:83:1c:fa:7a:fc:04:9f:57:e3:12:f7:
a6:8a:96:4d:fd:95:8d:09:3d:7a:e4:4d:f1:c8:50:
e4:c9:85:ca:60:f0:7d:b2:56:08:81:e5:a6:6a:08:
c8:a3:da:31:e1:a3:d7:3a:29:1a:4e:a3:c8:11:db:
07:d9:e7:a4:3f:b8:e4:22:17:68:2b:47:44:06:93:
83:0d:e2:9f:62:f1:57:93:ba:7d:b9:e8:07:6d:38:
fb:26:ee:13:7f:56:32:8e:59:43:63:81:47:4b:12:
fa:0e:a9:55:f8:07:3e:97:d6:d2:63:21:37:f5:71:
02:52:b8:e0:03:91:ca:48:e7:22:9d:0e:28:fe:2e:
6e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B3:79:52:3A:1A:39:0B:21:2C:41:DA:44:B9:B4:DC:D3:A8:2A:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C4A7332F5A811EF8EBE0781762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.112.0/20
156.239.141.0/24
156.239.144.0-156.239.146.255
Signature Algorithm: sha256WithRSAEncryption
49:cb:ce:22:3e:9f:49:58:af:43:e2:3d:3c:1b:18:31:c0:f3:
72:72:f8:94:81:c9:66:b8:46:ff:64:19:ca:03:77:fa:40:f0:
0b:2a:68:50:be:6c:de:1d:24:dc:9c:69:03:db:e3:86:5a:70:
66:26:6a:cc:1d:30:b4:0f:ee:28:10:77:e4:09:de:15:e1:dc:
6e:12:c5:96:56:a0:9d:dd:28:21:d2:3a:76:e6:07:97:2a:ee:
75:bc:06:93:d3:a9:a0:e5:69:27:d0:6c:19:77:f6:f5:fb:4a:
68:d3:93:4c:c7:58:93:88:01:c0:a5:21:b2:9d:71:03:02:be:
9d:28:50:68:e9:d8:89:9b:de:5b:b2:7a:75:0a:eb:0e:9a:25:
ed:58:8d:89:4e:30:fb:c1:bf:26:fb:4c:58:2a:df:a6:10:3b:
54:71:c0:86:c5:87:36:d7:7e:2c:3a:77:00:d9:18:2d:36:df:
03:03:12:bc:6d:d3:92:39:78:18:aa:70:ef:11:81:6c:09:c1:
a2:74:20:3e:a1:eb:6f:3a:69:a8:75:aa:65:c4:7c:1f:72:5f:
5b:02:e0:70:81:e3:1f:f2:fc:1c:17:e0:df:95:bb:ab:e6:f2:
4c:f5:30:2e:57:33:28:ca:ba:7c:d9:7b:38:25:86:7a:53:9c:
66:fd:81:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:50 2025 by rpki-client