Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F532B6EF4E511EF92FF7E49762E951A.roa
File: 6F532B6EF4E511EF92FF7E49762E951A.roa (raw, json)
Hash identifier: e1obzNQ4l7bQgiMISb2I0XAp1Yw7PC6GEAvDz7DDTY0=
Subject key identifier: C6:B7:D9:6C:92:32:A5:B3:4E:F1:D3:45:B1:C7:85:6C:3C:F2:F7:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01399E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F532B6EF4E511EF92FF7E49762E951A.roa
Signing time: Thu 27 Feb 2025 08:32:52 +0000
ROA not before: Thu 27 Feb 2025 08:32:49 +0000
ROA not after: Sat 19 Feb 2028 08:32:49 +0000
asID: 17561
IP address blocks: 156.235.49.0/24 maxlen: 24
156.235.52.0/24 maxlen: 24
156.235.70.0/24 maxlen: 24
156.235.75.0/24 maxlen: 24
156.235.76.0/24 maxlen: 24
156.235.79.0/24 maxlen: 24
156.235.88.0/24 maxlen: 24
156.235.92.0/24 maxlen: 24
156.235.122.0/24 maxlen: 24
156.235.125.0/24 maxlen: 24
156.235.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80286 (0x1399e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 08:32:49 2025 GMT
Not After : Feb 19 08:32:49 2028 GMT
Subject: CN=67c02334-ad14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4c:c4:fd:f3:9d:40:33:76:f4:1e:d2:eb:06:
8f:96:c8:0d:0c:cc:01:50:bb:8d:a7:46:21:0f:dd:
bb:5a:d1:63:cb:45:60:e0:18:cd:3d:75:96:bd:b4:
47:0c:1f:e4:18:ea:ec:76:b6:c4:03:e8:ed:70:46:
43:ea:54:89:66:e8:09:89:0d:67:80:ab:e6:56:7b:
98:be:59:63:c0:00:a2:b5:7f:39:b5:76:26:17:6a:
56:b9:48:b8:2f:35:b1:80:99:4d:95:31:fd:9a:f3:
db:7e:60:16:d8:cb:29:d6:6f:a6:70:06:6a:4e:33:
21:bd:93:d0:d1:bf:2a:22:2d:39:c1:05:46:06:db:
69:e1:5b:6e:27:d0:49:d0:8c:16:da:f5:24:f8:16:
92:ea:2f:b3:a5:ba:1c:82:19:58:c1:e6:3e:56:34:
3e:d4:25:ad:1e:ad:74:f3:3f:86:5b:4c:06:b2:7c:
98:12:9c:28:cb:7b:4e:4c:6d:f3:bd:c9:e8:93:ec:
c5:ec:63:2e:4a:db:bd:e9:37:6e:ea:91:ed:4d:34:
b1:ba:0d:a1:cc:6c:f0:4c:f8:89:b4:c0:ea:ab:70:
6e:91:a2:42:dc:20:30:82:7a:bc:86:50:7f:9a:ca:
b7:b6:36:eb:30:b2:21:2c:66:ef:36:41:e5:e2:b2:
8d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B7:D9:6C:92:32:A5:B3:4E:F1:D3:45:B1:C7:85:6C:3C:F2:F7:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F532B6EF4E511EF92FF7E49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.49.0/24
156.235.52.0/24
156.235.70.0/24
156.235.75.0-156.235.76.255
156.235.79.0/24
156.235.88.0/24
156.235.92.0/24
156.235.122.0/24
156.235.125.0-156.235.126.255
Signature Algorithm: sha256WithRSAEncryption
04:97:1a:e2:38:2e:71:48:0a:d6:b1:e8:23:d8:bc:55:a1:f0:
ef:04:83:1b:42:ae:5c:87:dc:be:7e:fa:03:f5:2c:4f:2d:11:
8a:31:c7:9c:5d:45:cc:a2:ee:c6:fc:a6:2c:e1:71:ae:b0:f1:
64:98:1c:3b:8b:42:f5:30:53:96:57:c7:13:46:33:43:11:f2:
0f:92:51:b3:e8:16:b0:4f:73:5a:ae:da:0e:e3:98:c4:bc:36:
8a:28:3b:a3:d0:b1:8f:46:ed:f6:a6:a9:f9:a9:60:ec:7a:9b:
62:fa:ff:0e:22:60:42:d2:ff:56:16:e8:34:1e:61:1d:c2:44:
eb:25:d1:9a:28:48:d0:e9:d3:a5:2c:b2:29:f1:19:3f:8a:a8:
56:fe:b5:a7:8d:2b:da:3b:ce:8a:58:43:fe:f6:5a:ae:52:33:
d7:43:db:69:28:4e:ac:00:5d:d1:56:4f:d3:3d:bf:e8:72:24:
f3:8d:ff:4e:d7:03:e3:8d:0f:22:95:a7:cf:27:0e:2f:5d:1d:
26:5b:f0:f1:bd:6a:1f:98:e4:1f:a2:8f:4d:e9:08:1c:b1:a0:
07:1e:7a:94:7d:07:ba:c1:ac:25:08:58:8e:86:03:8f:e3:f5:
1c:18:6e:5f:43:ae:0a:c1:7b:71:fd:f8:62:79:ab:41:7b:dc:
89:82:b4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:52:37 2025 by rpki-client