Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B3A6E8CFE4611EFA8075D5C762E951A.roa
File: 7B3A6E8CFE4611EFA8075D5C762E951A.roa (raw, json)
Hash identifier: uwb+nCWxHdxaGCygcvqfz3BVy+Nd7/oRk0hxpjTdsng=
Subject key identifier: E8:CC:D9:17:2A:90:F1:E3:5A:09:F8:A6:BE:32:8F:1A:57:BC:32:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B3A6E8CFE4611EFA8075D5C762E951A.roa
Signing time: Tue 11 Mar 2025 07:00:14 +0000
ROA not before: Tue 11 Mar 2025 07:00:10 +0000
ROA not after: Thu 08 May 2025 07:00:10 +0000
asID: 149014
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.112.0/22 maxlen: 24
156.236.116.0/22 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83137 (0x144c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 11 07:00:10 2025 GMT
Not After : May 8 07:00:10 2025 GMT
Subject: CN=67cfdf7e-9335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:76:c3:f2:78:08:92:27:f5:cf:dc:63:c8:19:
21:a3:ed:cd:29:e4:4b:ce:6f:5f:c0:fb:e9:bf:f5:
cd:21:12:9a:7b:32:f3:8d:b7:70:bc:e8:b0:36:6a:
33:8e:c2:04:e9:e3:7e:a8:55:2f:64:e4:af:b0:31:
6f:4a:51:68:1e:82:79:53:1d:03:dd:a5:21:da:7c:
2a:f1:d6:6c:1c:f5:ef:ad:39:1f:fa:db:78:f2:1b:
5a:07:e1:97:be:ae:38:fa:63:9c:72:d5:3a:b1:74:
62:3a:8a:5c:dc:05:4e:59:1c:19:24:64:c5:a8:cf:
9c:e4:6e:86:f7:83:0f:b8:8f:c8:df:e4:30:60:60:
e5:b8:72:36:3c:30:47:c8:2a:ea:50:7b:56:68:c1:
f1:75:93:03:b6:6d:c1:91:5d:ad:93:9f:5c:7c:d3:
1d:93:66:a2:98:e8:5b:b7:df:ed:5d:a6:cc:47:d5:
75:8c:bb:35:49:e6:c0:c6:be:e2:6d:92:be:7c:5c:
9c:b7:68:72:33:dc:e7:0f:1f:5e:09:8f:e8:be:6e:
ca:9d:a8:a1:fc:57:3a:7b:2f:d7:5f:09:64:8d:28:
d7:b6:0c:58:dc:fe:c0:8b:bc:d0:ab:37:48:a4:63:
42:06:42:e0:58:fe:1e:e8:e7:fd:29:7a:64:25:9c:
54:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CC:D9:17:2A:90:F1:E3:5A:09:F8:A6:BE:32:8F:1A:57:BC:32:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B3A6E8CFE4611EFA8075D5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.112.0/21
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
03:e7:5b:aa:7a:b0:24:9f:a3:8a:3e:e8:23:b0:b5:91:2f:e1:
c3:d8:28:9d:4b:3d:bc:26:c5:2d:80:39:ab:d4:e4:e8:bf:e7:
e8:dc:85:71:e7:10:e4:c8:73:d0:6b:13:fa:64:fe:9b:b6:6f:
ce:b4:44:47:78:a3:a8:2e:c9:64:f4:65:b1:98:fe:f8:fc:e2:
8b:c6:8b:b1:50:6f:1f:54:da:96:15:2c:a8:6b:a4:9e:aa:20:
cf:48:26:73:e5:d9:fd:08:91:69:78:2b:4c:78:ab:04:e3:13:
27:37:ae:1d:35:fb:3d:6e:1e:be:60:50:78:4a:a2:81:0a:02:
aa:da:9a:39:60:b4:7b:be:ea:3c:52:94:e4:72:f0:4c:84:6e:
e8:49:75:04:cb:47:bc:da:ea:a0:62:77:60:e5:6e:00:9f:99:
af:c6:77:e5:1d:dc:ab:ab:fd:61:48:a2:e9:17:7a:8c:66:6b:
cf:4c:be:12:64:18:ef:2a:31:00:a3:2b:1b:19:81:7c:7c:2c:
f2:9a:d0:ff:ea:b6:24:25:31:29:7c:ab:0e:ab:b6:c6:61:e5:
40:04:b5:d2:7b:a6:ea:67:11:0c:ca:a8:09:56:b7:2b:4f:34:
95:2d:1c:35:96:29:f3:1a:4b:13:23:10:3e:6d:42:57:5e:97:
2a:25:57:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:07:00 2025 by rpki-client