Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E3483E403DE11F09C3BC34D762E951A.roa
File: 9E3483E403DE11F09C3BC34D762E951A.roa (raw, json)
Hash identifier: DxyEyy4SchTuLmmrsPs9x4mdxKVYAB6nZoLiUyCM2Ow=
Subject key identifier: A6:80:24:57:84:63:64:31:B1:0E:67:AA:46:51:51:BD:40:CC:DA:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014695
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E3483E403DE11F09C3BC34D762E951A.roa
Signing time: Tue 18 Mar 2025 09:51:52 +0000
ROA not before: Tue 18 Mar 2025 09:51:48 +0000
ROA not after: Fri 25 Apr 2025 09:51:48 +0000
asID: 203020
IP address blocks: 156.243.159.0/24 maxlen: 24
156.243.160.0/20 maxlen: 24
156.243.176.0/21 maxlen: 24
156.243.184.0/22 maxlen: 24
156.243.188.0/23 maxlen: 24
156.243.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83605 (0x14695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 18 09:51:48 2025 GMT
Not After : Apr 25 09:51:48 2025 GMT
Subject: CN=67d94238-5099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:e6:06:df:d0:54:08:07:f9:91:cf:6f:1b:
89:18:3e:30:64:40:20:20:a1:cf:7d:cc:c0:72:4d:
85:fd:fc:51:63:54:68:55:fd:46:eb:11:68:d9:80:
7e:87:23:58:16:36:60:55:fb:a4:03:76:56:67:f1:
c5:fb:b5:3e:f8:09:bf:9b:b4:c0:f2:4a:97:1c:c4:
02:26:12:36:1b:8d:54:45:cc:5f:e7:58:cc:96:49:
6a:88:2e:31:35:f5:f5:91:ff:27:2f:b3:e5:e6:32:
9e:6b:5d:f9:40:c2:88:24:72:c6:1c:50:9c:06:92:
5c:09:80:45:74:0a:a7:7c:33:52:2f:5e:43:85:3d:
21:4a:5a:e5:ad:03:19:c9:e3:b6:e1:20:a6:50:f4:
80:40:68:88:eb:9a:27:80:43:85:cd:bc:15:84:92:
42:ba:77:d1:c7:fc:6f:bd:10:23:18:68:e0:2f:2c:
fb:33:ac:98:79:25:c9:b9:ab:9a:29:53:2f:5c:1e:
53:06:a0:ae:c3:66:1e:01:06:f3:6b:1f:02:fc:ad:
47:91:f2:d7:5f:81:c5:71:e5:8e:79:14:66:2f:18:
03:34:73:21:2c:39:b1:bd:a0:72:03:be:72:8b:03:
95:16:b9:5d:9d:22:36:53:85:93:fe:a0:ec:1f:98:
f1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:80:24:57:84:63:64:31:B1:0E:67:AA:46:51:51:BD:40:CC:DA:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E3483E403DE11F09C3BC34D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.159.0-156.243.190.255
Signature Algorithm: sha256WithRSAEncryption
7e:40:9e:6a:82:fe:91:45:b7:44:b1:99:20:46:5f:2b:30:f0:
43:00:eb:f3:af:02:10:1f:de:88:c6:29:f5:2f:d8:a8:e5:57:
3b:f0:29:3a:c6:71:58:40:fa:96:50:56:b4:f0:60:51:dc:72:
ab:c4:fd:db:bf:8c:78:5a:23:ee:6d:ac:e5:d7:f3:c2:ec:5f:
33:a9:d4:40:9d:04:d9:53:d5:68:78:eb:f2:c4:df:35:bf:70:
52:28:d7:11:5a:6d:ec:1e:23:1a:82:6d:2e:42:64:90:c0:15:
8a:cc:74:1f:b9:06:35:20:f8:28:71:96:fc:9e:fc:d0:2d:23:
7b:3d:24:1d:24:b7:88:85:d9:82:5f:10:ee:dc:2e:ce:16:55:
91:64:9e:15:e9:78:a9:81:1e:78:0b:07:3f:a0:97:7c:8b:37:
ad:d9:9d:5a:7a:e1:9e:60:74:37:59:d5:a4:39:10:93:20:f0:
42:3c:b7:12:6e:f0:e3:87:1e:86:07:dd:e7:4d:0d:a9:a3:b0:
6f:75:21:8d:7a:1a:80:1b:7b:03:af:99:93:08:5c:9e:13:0f:
7e:b8:74:76:98:d8:d6:4c:05:57:36:6c:c5:c0:46:ad:c9:e2:
ce:a7:99:64:7d:d6:10:6b:bb:1e:5f:29:fc:20:9e:63:f2:41:
a8:50:3a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:44 2025 by rpki-client