Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A054300FE4811EF8BDD9367762E951A.roa
File: 7A054300FE4811EF8BDD9367762E951A.roa (raw, json)
Hash identifier: eYwzTlNF+rLkLnLz5AiNiMZ/kJsbxFhJvwYQyjFSTRo=
Subject key identifier: 68:74:EE:C6:E1:D6:B3:55:5A:C4:5A:8E:F2:8C:9C:3B:6C:46:80:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A054300FE4811EF8BDD9367762E951A.roa
Signing time: Tue 11 Mar 2025 07:14:31 +0000
ROA not before: Tue 11 Mar 2025 07:14:27 +0000
ROA not after: Wed 09 Apr 2025 07:14:27 +0000
asID: 141883
IP address blocks: 156.240.0.0/19 maxlen: 24
156.240.32.0/20 maxlen: 24
156.240.48.0/21 maxlen: 24
156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
156.255.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83145 (0x144c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 11 07:14:27 2025 GMT
Not After : Apr 9 07:14:27 2025 GMT
Subject: CN=67cfe2d7-2062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:a9:4e:38:5e:7f:1d:87:3c:c5:dc:53:66:
92:1c:4d:50:30:47:e5:96:9c:20:db:a8:05:aa:14:
6d:7b:e5:5c:2f:47:8b:7b:e4:6e:fe:bf:6d:bd:b5:
15:45:7d:7a:74:26:7b:5b:17:73:01:a2:1c:81:02:
4a:21:55:62:97:1e:ac:3d:84:0c:12:f7:bf:e4:3d:
8a:50:a7:a8:ac:c3:bd:4a:7b:23:71:bd:bf:62:b7:
08:6c:24:01:ca:ea:9e:27:37:62:e4:42:72:33:f9:
bf:76:55:9d:18:9c:e9:2b:db:03:7a:d7:98:a6:41:
c3:00:2c:c8:91:51:97:69:05:3b:c8:75:7e:f7:cd:
63:36:d9:d4:b9:c0:e9:65:74:26:1a:15:61:c6:57:
d0:9f:3e:84:32:ae:de:22:80:67:9a:b2:c3:5c:1b:
b7:b6:ca:7e:3a:41:c6:2d:b5:47:63:29:81:60:c5:
46:8b:ff:fe:f5:75:91:72:db:03:a4:a1:90:2f:9c:
7d:1c:5d:66:58:84:9d:6b:0e:e5:a4:70:c7:3f:74:
cc:2b:e7:ca:35:38:5e:9f:65:f6:f5:b1:29:05:07:
e5:8d:3f:5b:aa:ec:de:3b:21:c9:e9:92:9a:70:f7:
9c:16:47:4c:82:b3:a1:48:0c:6a:b9:a6:cf:da:1c:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:74:EE:C6:E1:D6:B3:55:5A:C4:5A:8E:F2:8C:9C:3B:6C:46:80:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A054300FE4811EF8BDD9367762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0-156.240.55.255
156.242.10.0-156.242.15.255
156.246.0.0-156.246.17.255
156.249.28.0/22
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:cd:76:7c:99:8c:29:b4:2c:24:b0:ab:00:4b:e6:1b:15:d8:
f6:50:c7:11:4d:2f:9e:c2:c8:b6:cc:26:a7:77:17:5b:1e:20:
26:cb:ee:43:76:8c:34:25:a7:0a:82:cf:76:e3:9d:9d:9c:18:
2e:00:d5:9f:25:1e:94:82:76:ef:f2:f8:b4:32:a7:a7:8d:60:
e6:1b:06:f0:fa:e0:37:63:a0:bd:fd:64:f0:09:80:3e:89:9b:
68:71:5f:c3:74:37:e8:d5:b8:99:85:e9:44:a7:42:6d:a8:4c:
8b:81:39:7b:0c:2f:71:71:bb:94:f7:c3:15:d8:35:8a:fd:a0:
b8:9d:7d:a2:19:b7:bf:a4:f6:60:c6:6b:35:9e:b9:21:1d:3d:
30:7a:b2:ac:c5:0d:bf:08:3d:f5:86:3e:26:10:5b:56:11:31:
0d:c9:e3:44:85:8f:ae:d0:15:5f:d0:ff:eb:6c:20:fb:7c:ac:
45:b1:b6:c0:ac:66:dc:de:56:29:e6:3a:08:3d:76:d6:88:2f:
75:ce:be:b9:3a:c9:e3:cc:4d:1f:73:8b:c1:12:40:6d:3e:1c:
c5:90:2e:37:30:ef:b6:e0:b6:4b:e9:41:87:4a:3a:64:7b:bb:
e0:82:e4:4d:c4:34:1d:48:d7:39:74:46:f4:c4:58:59:df:f2:
66:70:b8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:12 2025 by rpki-client