Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84500044F8CA11EF8160DE59762E951A.roa
File: 84500044F8CA11EF8160DE59762E951A.roa (raw, json)
Hash identifier: NCaEQsYbGoZBTydxU0sNfSDO3bWauCiM7Ocxh3c8uk4=
Subject key identifier: A6:E2:10:B3:39:69:E5:2D:50:98:49:C9:06:AC:59:E0:C4:DC:64:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0142C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84500044F8CA11EF8160DE59762E951A.roa
Signing time: Tue 04 Mar 2025 07:30:16 +0000
ROA not before: Tue 04 Mar 2025 07:30:12 +0000
ROA not after: Mon 21 Apr 2025 07:30:12 +0000
asID: 63139
IP address blocks: 156.225.112.0/24 maxlen: 24
156.225.113.0/24 maxlen: 24
156.225.114.0/24 maxlen: 24
156.225.115.0/24 maxlen: 24
156.225.116.0/24 maxlen: 24
156.225.117.0/24 maxlen: 24
156.225.118.0/24 maxlen: 24
156.225.119.0/24 maxlen: 24
156.225.120.0/24 maxlen: 24
156.225.122.0/24 maxlen: 24
156.225.123.0/24 maxlen: 24
156.225.124.0/24 maxlen: 24
156.225.125.0/24 maxlen: 24
156.225.126.0/24 maxlen: 24
156.225.127.0/24 maxlen: 24
156.227.9.0/24 maxlen: 24
156.227.15.0/24 maxlen: 24
156.229.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82627 (0x142c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 07:30:12 2025 GMT
Not After : Apr 21 07:30:12 2025 GMT
Subject: CN=67c6ac08-8df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:69:5f:08:1d:1e:3e:06:70:42:aa:18:de:
d3:8e:08:46:16:ce:b2:d0:b2:f6:3e:64:a3:5b:26:
37:69:a5:77:49:ba:c3:06:24:f8:3b:e4:99:fb:39:
27:b0:7f:43:e2:9b:11:6c:46:fd:ad:3c:98:d2:f2:
07:71:4b:20:9e:5b:c5:45:78:6d:8d:ff:41:8a:ce:
21:13:f1:2f:cb:65:cd:51:84:32:08:bf:66:27:68:
66:b2:bb:81:d9:d2:44:c3:3e:31:e8:1a:8f:cd:d6:
ed:0c:60:c1:af:c5:ee:2b:69:32:e2:b3:ba:1c:fa:
36:ca:20:7e:f3:a7:ee:2a:6b:0a:3b:c4:cb:82:6e:
e1:63:f5:3f:b0:45:d7:64:a6:16:d0:7a:9b:a3:59:
0a:c8:50:db:1a:f4:61:72:c9:35:8a:95:59:03:81:
df:74:ae:16:4f:9f:30:d0:cd:ca:ae:b6:fb:fe:3b:
7c:dd:9e:17:6d:1f:f6:be:80:b8:cd:04:c8:e8:18:
13:b5:e3:92:8d:96:ca:0b:13:20:5a:e4:49:b0:41:
3e:74:23:12:58:16:9a:cd:80:aa:c0:92:84:db:08:
ee:07:e8:a6:9f:ab:3c:eb:e1:7a:b8:35:e5:64:72:
6d:82:86:2a:2d:65:d2:a0:55:79:e2:2b:46:97:23:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E2:10:B3:39:69:E5:2D:50:98:49:C9:06:AC:59:E0:C4:DC:64:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84500044F8CA11EF8160DE59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.112.0-156.225.120.255
156.225.122.0-156.225.127.255
156.227.9.0/24
156.227.15.0/24
156.229.46.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a0:11:1c:78:05:63:9f:62:c7:30:97:1e:d4:ae:1d:02:3c:
c9:a6:b6:77:a5:62:bb:b7:bf:ed:5a:69:2d:76:68:b5:cb:38:
6a:a6:9e:52:0b:59:0d:2d:b6:3e:1f:f8:3c:d7:1e:5a:d9:bc:
42:5c:13:83:13:3e:00:36:f5:a2:26:27:e0:f6:76:64:c8:cf:
d9:c6:59:4d:86:4f:77:5d:04:5c:06:86:0d:66:90:9d:19:fb:
22:e0:b5:f6:bb:93:e3:f6:16:26:f0:62:e2:c8:25:38:1c:23:
7c:b1:72:a3:06:a5:9d:ec:3a:66:c0:f3:a0:e8:de:fb:a0:11:
4b:5a:f2:56:c2:bc:a5:12:79:58:9c:73:1e:b4:0c:c8:3b:e3:
15:b6:28:13:95:d5:b8:41:94:34:11:3e:de:12:41:85:c0:cd:
59:7c:dd:33:a0:f2:fe:cc:1e:a9:76:9f:b8:42:00:b8:f5:7e:
e3:f3:7e:65:54:13:e9:8e:6b:02:90:4e:4e:1b:c5:7a:6f:0e:
f4:76:16:a1:ff:91:c4:db:1e:63:71:1a:06:f4:13:27:3c:46:
97:45:dd:25:86:1e:d5:fa:4a:f9:d9:b7:ac:a7:38:8d:d7:5d:
c9:30:3e:0e:11:55:eb:fc:3c:81:be:fa:73:92:f0:3e:6c:67:
46:8f:ee:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:42 2025 by rpki-client