Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9602268A095C11F09A16506D762E951A.roa
File: 9602268A095C11F09A16506D762E951A.roa (raw, json)
Hash identifier: FrS36DyUC3XHXeIkXkt0KpWSlW3uzwxUkbt8JBTQoTA=
Subject key identifier: A2:D7:03:3D:A3:F5:A5:FF:F5:11:28:54:56:9D:63:9D:52:FC:77:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0147FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9602268A095C11F09A16506D762E951A.roa
Signing time: Tue 25 Mar 2025 09:36:11 +0000
ROA not before: Tue 25 Mar 2025 09:36:06 +0000
ROA not after: Wed 25 Mar 2026 09:36:06 +0000
asID: 329478
IP address blocks: 156.229.72.0/24 maxlen: 24
156.229.73.0/24 maxlen: 24
156.229.74.0/24 maxlen: 24
156.229.75.0/24 maxlen: 24
156.229.76.0/24 maxlen: 24
156.229.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83965 (0x147fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 25 09:36:06 2025 GMT
Not After : Mar 25 09:36:06 2026 GMT
Subject: CN=67e2790b-fdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d2:3c:0e:06:26:3b:63:8e:b2:93:88:d8:44:
80:4d:b0:ab:40:be:98:c2:cc:77:53:02:67:2c:9e:
e6:d6:12:66:da:fb:ff:5b:c9:74:26:7f:98:18:c9:
35:b9:9b:b0:c7:3b:79:b8:86:05:2a:7e:9b:89:46:
bb:fd:ee:18:5c:2a:38:9e:e9:83:d4:d6:21:03:bc:
12:06:3f:46:02:e6:2c:1a:ce:de:9d:10:40:1b:ad:
43:df:87:ba:cb:ac:02:69:70:b0:0a:78:cc:dd:09:
6b:76:7a:64:e6:e7:9c:f0:b2:85:5a:80:c4:03:30:
13:9a:88:d3:17:3b:db:87:0e:46:24:5b:63:78:23:
68:62:c6:20:3e:67:8b:db:97:ff:c4:3a:8c:58:46:
05:4f:25:a3:27:d4:fb:ac:12:b6:05:91:e8:2b:a9:
cb:7d:7e:ed:03:c3:18:7a:51:de:72:63:1f:8a:b8:
51:01:50:12:87:a0:15:15:61:24:6d:91:37:39:81:
ea:ae:a5:7a:b8:b8:1a:fd:e3:9f:f0:76:e6:de:7f:
2a:92:23:ff:f6:66:c0:c8:8b:61:61:08:c5:ee:dc:
8e:ab:d3:6e:76:8f:10:33:2e:af:32:13:ab:18:9b:
7b:b4:c0:7d:e4:87:ff:bc:f3:e9:11:2d:2e:e7:56:
7b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D7:03:3D:A3:F5:A5:FF:F5:11:28:54:56:9D:63:9D:52:FC:77:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9602268A095C11F09A16506D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.72.0-156.229.77.255
Signature Algorithm: sha256WithRSAEncryption
05:60:cd:53:99:2d:18:db:62:da:f5:58:da:ba:b0:f1:42:f0:
45:ad:02:46:a9:c1:f5:4a:a1:ad:52:30:23:5b:2e:71:2e:f9:
ce:5e:87:b6:35:8a:bf:11:08:d1:5e:06:9a:46:f1:80:fd:1c:
ae:52:be:83:b1:74:ce:7e:92:21:f1:9b:50:88:ae:cd:63:30:
37:cd:b3:68:7b:e0:a0:08:75:ef:1f:bf:2d:7d:18:59:d3:1c:
46:77:7d:f3:9b:59:be:83:29:f1:3e:42:6b:4e:5b:62:56:a7:
04:f3:43:07:bc:ef:03:ab:20:0a:db:12:3e:dc:b4:c5:44:bc:
6c:ab:e2:bd:90:4f:bb:e1:2a:00:68:93:d4:03:f3:75:73:8c:
31:aa:c2:6e:66:96:d7:04:b6:22:7e:93:ec:d4:05:9e:4f:e4:
ee:2e:62:c0:e4:b0:fb:83:62:85:87:eb:ec:88:d2:5b:db:ee:
44:d3:4d:76:68:db:02:d2:cd:2a:85:48:32:ab:54:be:8c:f4:
76:9e:2f:f3:28:6b:86:a7:3d:75:24:1c:ea:95:22:cb:a6:a1:
2c:f2:33:19:76:c1:83:5c:26:cb:a7:83:1c:a5:bc:8d:2f:39:
b4:53:98:66:89:8d:e4:5e:d4:4d:1a:dd:94:21:ef:c3:47:d4:
87:bf:6f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:58 2025 by rpki-client