Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C5224E8096A11F09665DC42762E951A.roa
File: 7C5224E8096A11F09665DC42762E951A.roa (raw, json)
Hash identifier: HbjvVeVgaN51aCNetURlBcMjqK/xDnIpskOi1EN+l6U=
Subject key identifier: D0:8C:9E:9A:B7:E8:EF:83:36:94:DD:53:99:4D:76:D7:98:E5:54:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01480F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C5224E8096A11F09665DC42762E951A.roa
Signing time: Tue 25 Mar 2025 11:15:41 +0000
ROA not before: Tue 25 Mar 2025 11:15:36 +0000
ROA not after: Sun 25 May 2025 11:15:36 +0000
asID: 63139
IP address blocks: 156.227.200.0/24 maxlen: 24
156.227.201.0/24 maxlen: 24
156.227.202.0/24 maxlen: 24
156.227.203.0/24 maxlen: 24
156.227.226.0/23 maxlen: 24
156.227.228.0/23 maxlen: 24
156.227.230.0/23 maxlen: 24
156.229.40.0/23 maxlen: 24
156.229.42.0/24 maxlen: 24
156.229.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83983 (0x1480f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 25 11:15:36 2025 GMT
Not After : May 25 11:15:36 2025 GMT
Subject: CN=67e2905c-62d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:2b:f0:61:b4:a3:63:6a:28:57:2f:8d:64:
00:91:9f:71:49:96:9c:fc:77:b5:34:1b:a0:7e:07:
d0:9f:71:51:28:d6:67:2e:b4:9e:f6:8a:20:77:ea:
92:dd:0f:84:62:11:7d:55:00:c3:6c:4e:84:3b:e0:
8a:c2:a8:f7:92:a0:52:1b:6d:eb:2c:8f:69:33:f2:
54:e9:67:9f:e8:8b:85:70:dc:9e:79:84:d4:14:0f:
b0:e3:ee:ef:2a:6a:ff:48:ef:9c:e2:60:82:86:81:
e1:52:54:f7:a6:a7:4a:df:7f:51:9b:90:78:fb:e5:
a5:ab:f9:9d:d5:8e:97:c4:17:fc:39:2b:01:f7:35:
0f:2a:7b:dc:03:c1:32:8c:e9:9c:ee:2e:37:dd:83:
ad:83:f6:e3:53:dc:33:55:a2:ae:e9:65:f3:c7:0f:
73:09:36:bd:22:bc:d6:4b:7d:d8:df:4f:13:aa:1e:
80:8e:be:7a:34:4e:ed:fa:3e:69:4d:23:5d:5b:ea:
99:f3:a2:42:b1:cb:6b:4c:ef:5b:0e:12:f7:4d:90:
dd:0a:9f:a3:80:3b:cb:7e:1a:b2:ee:ef:0e:f8:c7:
16:45:3b:b1:52:22:f8:ba:81:92:f9:b3:4e:c2:01:
25:24:04:f5:cd:47:18:57:e9:e8:50:80:58:1d:ed:
26:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8C:9E:9A:B7:E8:EF:83:36:94:DD:53:99:4D:76:D7:98:E5:54:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C5224E8096A11F09665DC42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.200.0/22
156.227.226.0-156.227.231.255
156.229.40.0/22
Signature Algorithm: sha256WithRSAEncryption
33:ab:10:b4:71:27:12:0e:55:0c:b7:b3:99:e2:ba:b8:5b:bd:
ad:d7:fa:f2:f3:43:22:8a:e6:07:f2:d8:9c:06:fa:ab:cc:e2:
73:d0:81:7f:e0:44:10:50:02:4a:6e:71:26:31:f7:1c:1d:c2:
dd:80:50:b1:9f:ba:57:0c:4c:05:ab:4b:04:53:fc:e1:e3:c8:
5a:24:44:8c:fb:24:2a:31:e0:84:23:24:c2:71:41:f7:19:73:
49:e3:19:39:3b:65:0b:76:e0:09:f4:4f:34:50:b0:e0:a8:10:
32:3b:8b:d8:1a:1f:7c:44:26:73:c6:89:6f:fa:09:be:04:9d:
11:50:97:e4:d6:d9:16:85:5a:18:89:33:59:8b:9d:ca:55:8c:
81:bc:f0:09:4a:24:dc:e5:54:61:52:54:8b:13:04:41:54:af:
73:b1:49:9a:0a:55:18:60:dc:0e:e5:06:e0:89:fd:14:d0:a1:
de:81:6c:41:67:b1:95:99:0f:a2:c9:ba:f9:56:1a:b5:da:a6:
22:2e:e9:bc:71:b6:68:ef:31:48:24:1d:29:b6:6f:8f:99:72:
63:46:e6:21:a2:17:a9:5a:aa:88:e5:6c:3b:b2:73:14:37:58:
46:1a:da:65:7a:d2:c9:8a:e7:0d:b7:88:e1:cf:fa:eb:8e:30:
08:ad:65:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:06 2025 by rpki-client