Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91C5DECCF57011EFA4B1A473762E951A.roa
File: 91C5DECCF57011EFA4B1A473762E951A.roa (raw, json)
Hash identifier: 3RJNQo67RKaWaMn92IUGzq7O3I062TS+jW2tehoQbo0=
Subject key identifier: BB:DC:CE:4D:46:78:D0:94:75:A2:DB:8B:4F:8A:F6:33:0F:22:23:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013BAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91C5DECCF57011EFA4B1A473762E951A.roa
Signing time: Fri 28 Feb 2025 01:08:50 +0000
ROA not before: Fri 28 Feb 2025 01:08:46 +0000
ROA not after: Sat 19 Feb 2028 01:08:46 +0000
asID: 17561
IP address blocks: 156.226.192.0/24 maxlen: 24
156.226.193.0/24 maxlen: 24
156.226.194.0/24 maxlen: 24
156.226.195.0/24 maxlen: 24
156.226.198.0/24 maxlen: 24
156.226.200.0/24 maxlen: 24
156.226.201.0/24 maxlen: 24
156.226.202.0/24 maxlen: 24
156.226.203.0/24 maxlen: 24
156.226.206.0/24 maxlen: 24
156.226.207.0/24 maxlen: 24
156.226.210.0/24 maxlen: 24
156.226.211.0/24 maxlen: 24
156.226.212.0/24 maxlen: 24
156.226.213.0/24 maxlen: 24
156.226.214.0/24 maxlen: 24
156.226.215.0/24 maxlen: 24
156.226.220.0/24 maxlen: 24
156.226.223.0/24 maxlen: 24
156.226.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80810 (0x13baa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 01:08:46 2025 GMT
Not After : Feb 19 01:08:46 2028 GMT
Subject: CN=67c10ca2-c2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:71:53:5d:5d:73:9f:49:b2:ca:69:9e:b7:
04:2a:41:a4:fb:55:b7:ad:89:f5:cb:b9:24:ff:60:
c6:8b:42:5c:d3:0b:6c:d4:88:64:47:9b:8b:09:95:
af:e9:97:26:08:84:43:24:60:d0:4d:7e:17:1d:0b:
cc:05:17:50:05:74:1a:e3:6f:58:2d:13:e5:13:93:
90:66:92:57:87:8e:36:11:d5:21:a5:0f:3c:ca:57:
0a:02:29:ea:d0:b1:4a:f9:2e:07:41:6c:16:34:4f:
ca:65:56:4d:5c:4a:d4:ec:09:b8:55:66:5c:64:4e:
cc:8c:ea:54:28:c2:80:bd:15:6d:ff:33:51:d3:1b:
62:1b:fd:bc:14:c4:d6:d4:93:45:98:d8:8a:59:6f:
b6:90:e9:d1:75:17:95:c8:37:15:43:cc:2c:9b:fe:
11:2c:aa:3b:9f:7f:a5:12:00:29:69:29:a7:e3:27:
d9:a9:e0:6d:31:c8:22:73:92:a5:41:92:d4:7f:b0:
1e:c2:50:b8:06:e7:83:e2:1d:10:7e:75:0a:01:63:
8b:ad:45:75:17:34:12:1a:70:1a:c3:89:61:e2:e8:
58:b1:e5:8b:d4:86:9b:26:dd:10:f2:29:57:e1:04:
a1:20:a1:a5:76:92:4a:f1:4a:ae:3f:b4:8f:ab:ed:
79:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DC:CE:4D:46:78:D0:94:75:A2:DB:8B:4F:8A:F6:33:0F:22:23:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91C5DECCF57011EFA4B1A473762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.192.0/22
156.226.198.0/24
156.226.200.0/22
156.226.206.0/23
156.226.210.0-156.226.215.255
156.226.220.0/24
156.226.223.0/24
156.226.225.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0a:3e:2a:e9:dc:38:30:ec:00:b8:a5:8f:c3:eb:13:f3:a3:
29:93:5c:02:a8:29:91:a2:2d:1f:19:c5:61:90:63:f4:94:2c:
94:ba:56:6e:03:33:fb:66:a6:59:c4:c6:00:00:ca:d0:a2:60:
2c:5c:38:99:6f:ea:8d:2a:be:38:28:07:f2:2e:e3:e0:61:02:
be:08:2d:94:69:ce:94:7a:bb:49:89:5b:6e:40:3b:36:69:ec:
f8:1d:d4:fd:ae:44:87:df:19:94:5e:e9:be:9a:77:bf:67:f4:
b9:4b:16:f9:43:bf:49:fe:31:cd:ed:e2:f7:ba:88:98:08:f6:
f2:d1:9d:9c:e3:6e:01:90:0d:27:23:12:43:be:17:ce:e0:7f:
30:10:9b:7f:21:81:b5:4e:3d:42:74:d4:5c:5e:d5:7b:bc:c2:
47:92:86:2a:50:4c:c4:4b:1e:07:d2:6d:e3:a0:96:c5:f9:83:
4e:85:70:f8:66:d2:07:eb:65:df:99:92:fa:6c:ee:5a:29:24:
4a:23:2a:41:1e:77:b6:e7:61:2e:63:4c:4e:9b:5e:72:2b:b5:
75:70:a2:e6:27:5e:c1:3c:3f:5a:56:89:34:fc:7b:8d:18:3d:
aa:f6:09:fd:5a:84:b2:0a:1c:a4:de:2f:8d:d3:9a:95:9a:56:
57:88:b2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:44 2025 by rpki-client