Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E70B2BCFF1911EF8A1A0BA8762E951A.roa
File: 8E70B2BCFF1911EF8A1A0BA8762E951A.roa (raw, json)
Hash identifier: u7GQRAIi8+IFcQW5IW0mmyaNuBXBYGpS3adcBfGI01A=
Subject key identifier: F6:C9:BB:4C:65:34:B9:E2:C8:FD:9B:80:11:E0:2B:79:BB:EA:75:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014509
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E70B2BCFF1911EF8A1A0BA8762E951A.roa
Signing time: Wed 12 Mar 2025 08:11:10 +0000
ROA not before: Wed 12 Mar 2025 08:11:06 +0000
ROA not after: Mon 05 May 2025 08:11:06 +0000
asID: 54600
IP address blocks: 156.229.176.0/20 maxlen: 24
156.229.192.0/19 maxlen: 24
156.236.192.0/18 maxlen: 24
156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
156.239.52.0/23 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83209 (0x14509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 08:11:06 2025 GMT
Not After : May 5 08:11:06 2025 GMT
Subject: CN=67d1419e-01cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:d5:37:9b:2e:07:75:50:63:fe:8e:c3:b7:
c4:12:bb:11:57:53:9f:e1:c2:46:96:94:9e:39:ab:
66:50:37:3c:42:63:75:2d:15:77:83:d2:12:27:54:
1d:e4:ac:7c:ff:4b:0a:15:00:af:0d:d4:f8:0f:f5:
4a:bc:3c:83:f6:ba:70:1a:4c:88:2e:f8:bb:76:d3:
f6:18:a3:3c:59:95:e2:49:90:0a:3a:73:7b:33:6f:
fe:09:5c:ca:f5:16:c0:cd:6e:bf:a1:33:57:80:f8:
1e:d0:f7:80:eb:76:14:aa:c9:fe:af:50:65:6f:00:
cc:6b:67:56:e6:31:2a:9a:36:ac:3f:68:d8:60:44:
20:b1:07:18:52:3d:13:51:4d:9a:ff:99:67:a1:52:
79:a5:8f:d9:61:ed:5e:06:f5:4d:dd:df:f8:cd:6a:
e2:b5:13:3d:50:15:0f:ed:da:f7:c0:39:f4:08:24:
bd:4b:31:8b:82:16:74:44:c8:be:ac:5f:8f:27:ce:
df:c0:6d:3d:bb:37:81:e0:db:63:26:f4:e7:73:9a:
ac:7c:52:e1:91:d0:6a:cc:a4:2a:38:e8:54:6a:b5:
9a:9e:de:a8:82:1d:87:4b:2c:69:96:d6:b9:b0:55:
d3:81:fe:2b:51:95:41:2e:d5:36:99:0f:1c:5a:c9:
c4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C9:BB:4C:65:34:B9:E2:C8:FD:9B:80:11:E0:2B:79:BB:EA:75:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E70B2BCFF1911EF8A1A0BA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.176.0-156.229.223.255
156.236.192.0/18
156.239.24.0-156.239.53.255
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
3d:13:b2:f4:1f:18:4b:db:4b:bc:6d:ee:ce:98:84:34:b0:6e:
9b:cf:24:5b:86:52:26:78:c6:5d:4e:71:bc:d7:95:a4:56:ba:
93:ca:89:9c:4a:31:72:e3:8f:fe:fd:50:e2:53:ae:4f:73:b2:
c6:c3:98:9b:39:0f:c2:fa:f4:97:51:82:95:8c:f9:4d:2d:ed:
e4:50:56:07:67:b3:5c:9f:ce:2c:52:19:89:ba:28:a0:9c:6a:
2c:2c:3d:6e:60:70:46:7d:33:70:5a:5d:d7:a7:59:60:9a:c3:
07:80:ba:46:97:31:ac:51:d1:87:ef:0f:8e:59:d3:c5:f4:d7:
c6:d3:df:c2:6d:02:a5:98:cc:05:ed:2a:9d:c6:63:9c:95:b1:
4b:0e:c7:aa:d1:3a:8a:da:3a:bf:be:85:3a:6a:83:6e:ee:07:
eb:a5:a0:61:d7:f6:84:c4:40:60:5c:d5:20:91:62:28:f5:23:
26:72:20:89:28:1f:4d:9e:23:b9:e1:85:8c:e8:19:96:ab:9a:
7a:80:4f:05:9c:c6:99:81:a6:42:a3:de:50:a1:01:0a:4f:c8:
a0:84:7f:51:27:a2:cc:f7:97:fd:19:a9:5a:ff:8f:4c:55:ea:
f9:3b:c4:1c:5f:95:64:78:dd:7a:f2:f0:93:14:86:4d:c3:5c:
fe:22:3d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:45 2025 by rpki-client