Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A05E221200C611F0A2A3AA6F762E951A.roa
File: A05E221200C611F0A2A3AA6F762E951A.roa (raw, json)
Hash identifier: imGjm+bJSNYRSv5w+6j7RWImjPEpegF3/iQVQVU7d1c=
Subject key identifier: B8:63:81:B2:36:24:CD:2A:B8:1B:C7:B4:EE:1C:47:EA:9F:9C:82:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01460A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A05E221200C611F0A2A3AA6F762E951A.roa
Signing time: Fri 14 Mar 2025 11:22:34 +0000
ROA not before: Fri 14 Mar 2025 11:22:30 +0000
ROA not after: Wed 02 Apr 2025 11:22:30 +0000
asID: 39600
IP address blocks: 156.237.106.0/24 maxlen: 24
156.237.107.0/24 maxlen: 24
156.237.108.0/24 maxlen: 24
156.237.112.0/24 maxlen: 24
156.237.113.0/24 maxlen: 24
156.237.114.0/24 maxlen: 24
156.237.115.0/24 maxlen: 24
156.237.116.0/24 maxlen: 24
156.237.124.0/24 maxlen: 24
156.237.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83466 (0x1460a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 14 11:22:30 2025 GMT
Not After : Apr 2 11:22:30 2025 GMT
Subject: CN=67d4117a-5d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:2f:6c:ea:41:b1:47:de:c0:48:6a:77:16:
1e:7b:d7:44:b2:3f:7b:f7:42:9a:04:df:d5:72:1c:
27:09:df:d4:62:9c:ea:61:c4:59:60:ce:e2:50:67:
44:84:33:3a:b0:c2:b9:f2:e3:aa:10:7b:fd:c1:b7:
86:7f:4c:c2:13:56:ca:fe:e7:c9:c8:2f:22:dd:52:
7f:99:d9:9e:75:4a:ef:39:f7:ca:85:c3:22:28:9b:
c3:e1:f1:8c:85:22:45:60:95:07:27:a8:18:02:f7:
f9:89:59:c4:1c:22:19:32:70:20:ad:7d:c1:68:23:
f0:f2:2b:9e:ea:8c:94:91:a0:cd:a1:93:e0:2d:a7:
ea:3a:3a:04:3b:cc:fd:67:16:2f:7c:a1:8d:da:25:
26:50:ec:ad:5b:e8:4a:f6:5e:38:54:06:66:ae:72:
8c:60:b8:32:e0:e1:d7:b8:38:08:9b:7e:63:c5:63:
80:ec:a8:3c:23:dd:14:13:f3:c6:ce:53:c4:b1:d1:
b8:04:79:71:ad:cd:20:13:21:e9:5e:ae:fb:9a:f5:
c0:77:c5:03:c9:05:b0:51:68:c4:ed:2e:73:06:d4:
e8:96:a8:63:85:17:0a:ef:2a:c6:f8:19:e7:ed:d4:
5a:23:ef:07:42:31:55:39:1d:89:44:c0:65:98:89:
ed:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:63:81:B2:36:24:CD:2A:B8:1B:C7:B4:EE:1C:47:EA:9F:9C:82:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A05E221200C611F0A2A3AA6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.106.0-156.237.108.255
156.237.112.0-156.237.116.255
156.237.124.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:07:ab:1f:be:bb:53:25:97:52:58:66:32:f4:a8:2a:8d:cc:
cc:9d:72:30:d8:ed:cb:ab:49:7c:eb:f8:4c:2e:b2:09:d2:bf:
b3:c4:7f:0e:51:c1:ec:0e:86:77:a1:d1:2c:69:0c:0e:37:57:
6f:9c:17:e5:db:f7:fa:4a:c8:83:26:c0:fc:b0:dc:ee:9e:e9:
44:f4:71:e7:9a:67:20:55:44:01:47:de:0b:a3:39:c5:26:e2:
6b:cd:c8:4c:37:80:0b:55:06:1f:12:cd:21:f2:d8:b6:7d:43:
a5:77:b1:9d:64:98:a8:7b:39:d3:71:10:0e:ac:83:4b:5c:c8:
2d:0a:99:dc:9f:cf:3b:b1:a2:ac:07:e2:23:2e:3f:5f:24:d6:
88:1f:ca:16:2c:d9:d7:46:f0:9e:69:b0:c2:c2:95:f8:a1:fb:
4e:aa:77:12:47:8f:99:e1:ea:e8:15:0d:67:fb:92:2e:7f:10:
43:8a:11:6a:c5:b4:9f:6a:04:1c:43:13:bb:26:44:f1:a8:c0:
b5:cd:66:58:a3:af:8d:60:d3:cd:8f:72:3c:f5:c0:8a:98:ec:
ee:6e:d1:7a:eb:5d:9f:5a:c3:5e:4b:a9:12:8c:bc:52:1b:e7:
c3:55:4b:d9:04:23:5d:c4:34:e6:15:30:88:2a:c7:c1:7b:66:
81:a7:6a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:44:54 2025 by rpki-client