Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/764AC39AF8C411EFB50E28B1762E951A.roa
File: 764AC39AF8C411EFB50E28B1762E951A.roa (raw, json)
Hash identifier: hi97gQasBH3xF8SUNYl3K8ZyM4EFJHncdh3SS33m+Oo=
Subject key identifier: EA:94:00:A8:C1:32:0D:55:37:0F:C7:4A:74:16:DE:3F:33:9A:70:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0142A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/764AC39AF8C411EFB50E28B1762E951A.roa
Signing time: Tue 04 Mar 2025 06:46:55 +0000
ROA not before: Tue 04 Mar 2025 06:46:51 +0000
ROA not after: Fri 04 Apr 2025 06:46:51 +0000
asID: 200373
IP address blocks: 156.228.85.0/24 maxlen: 24
156.228.177.0/24 maxlen: 24
156.228.178.0/24 maxlen: 24
156.228.179.0/24 maxlen: 24
156.228.190.0/24 maxlen: 24
156.233.72.0/24 maxlen: 24
156.233.73.0/24 maxlen: 24
156.233.74.0/24 maxlen: 24
156.233.75.0/24 maxlen: 24
156.233.84.0/24 maxlen: 24
156.233.85.0/24 maxlen: 24
156.233.86.0/24 maxlen: 24
156.233.87.0/24 maxlen: 24
156.233.89.0/24 maxlen: 24
156.233.90.0/24 maxlen: 24
156.233.91.0/24 maxlen: 24
156.233.92.0/24 maxlen: 24
156.233.93.0/24 maxlen: 24
156.233.94.0/24 maxlen: 24
156.233.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82595 (0x142a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 06:46:51 2025 GMT
Not After : Apr 4 06:46:51 2025 GMT
Subject: CN=67c6a1df-4864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:de:96:53:55:eb:e4:83:e6:d5:3a:33:57:
6a:3f:24:96:3d:59:07:d4:26:46:e5:cd:3a:49:78:
df:19:be:56:d9:a3:66:c7:15:a0:90:f1:d0:18:c1:
cf:ce:89:7e:cb:a6:46:1a:1c:3a:92:22:e2:d2:f0:
de:46:b7:db:ab:5e:b0:9b:63:c7:91:82:ce:34:a1:
92:20:0d:aa:47:df:a5:c2:4d:a8:c5:28:cc:d2:40:
f2:59:06:71:5b:ad:71:08:71:3a:6f:2f:a3:96:88:
21:fa:db:f6:cd:24:09:c6:d8:04:70:cd:04:ea:a1:
1c:70:15:50:da:a0:35:51:ef:4c:05:c8:cf:0a:47:
73:bf:a5:2b:1e:f9:db:ed:1f:b6:fa:23:44:64:26:
91:14:ef:d3:e5:95:67:7d:5b:8b:98:3c:39:e0:7a:
f7:a3:1b:6a:7c:55:df:8a:18:69:f9:3b:31:40:3b:
27:9e:32:e0:3b:63:b8:72:e6:76:ca:f7:90:2e:06:
65:f8:c1:b6:ea:ef:1c:91:ec:e1:b0:0c:58:17:0d:
be:90:01:f9:dc:55:24:ad:9b:a7:09:bd:00:b5:db:
5f:0f:77:a2:fb:cc:5a:71:69:0a:bf:fc:a3:5d:7e:
d9:1d:93:84:30:a4:0b:9b:ed:78:37:43:f4:de:eb:
38:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:94:00:A8:C1:32:0D:55:37:0F:C7:4A:74:16:DE:3F:33:9A:70:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/764AC39AF8C411EFB50E28B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.85.0/24
156.228.177.0-156.228.179.255
156.228.190.0/24
156.233.72.0/22
156.233.84.0/22
156.233.89.0-156.233.95.255
Signature Algorithm: sha256WithRSAEncryption
35:fa:cb:79:b6:bd:a6:bb:8e:47:77:a1:6e:93:01:a8:35:e7:
af:23:0f:30:49:73:ae:8f:de:80:c0:99:63:31:ab:76:4e:9a:
32:5c:d2:91:a9:45:de:86:cf:b5:3c:d8:d5:31:f5:2f:88:3f:
e2:5d:64:f5:25:64:38:b4:10:14:22:a9:d5:44:a9:d5:ec:dc:
6e:75:e5:eb:75:68:04:d9:f1:4d:7f:c4:0a:1b:f7:5c:3c:0f:
25:d5:42:79:83:95:89:e6:a8:c4:06:ec:46:69:2c:75:cd:07:
b3:83:ed:df:32:f8:dc:0c:19:f5:d2:65:90:3e:36:15:6c:4b:
50:05:06:d8:f1:8d:32:34:0e:ee:be:6b:52:3b:14:39:94:e8:
89:0d:73:58:c6:98:fb:e0:c7:fe:52:3d:4a:bb:fa:64:a1:ce:
e9:0f:ec:3a:44:7c:63:cd:c4:a7:a2:fb:7a:7c:a4:fc:8b:a1:
de:62:40:4c:47:1d:f8:d7:e5:42:27:ba:ee:4b:cd:63:14:7f:
6b:0a:1d:36:73:69:8e:e1:2e:6f:3b:20:d0:93:bf:58:13:78:
ce:8c:ee:06:58:1c:d7:f2:6e:81:ac:20:95:4d:b5:6f:40:4b:
c3:f9:4c:ed:b0:08:6e:5c:a6:b2:61:52:3a:38:83:d9:f4:c2:
88:fc:0a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:16:27 2025 by rpki-client