Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5975A18FEEC11EF9F939C84762E951A.roa
File: A5975A18FEEC11EF9F939C84762E951A.roa (raw, json)
Hash identifier: YVkcKAVMTo6rfvK58r/lXKZs426z5exHv+IyfYUxg0w=
Subject key identifier: EC:C5:71:FC:5F:EE:39:81:E3:4B:1D:87:E1:96:0A:FB:AD:DD:8B:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5975A18FEEC11EF9F939C84762E951A.roa
Signing time: Wed 12 Mar 2025 02:49:42 +0000
ROA not before: Wed 12 Mar 2025 02:49:38 +0000
ROA not after: Thu 12 Mar 2026 02:49:38 +0000
asID: 984
IP address blocks: 156.231.250.0/24 maxlen: 24
156.231.252.0/24 maxlen: 24
156.231.253.0/24 maxlen: 24
156.231.254.0/24 maxlen: 24
156.231.255.0/24 maxlen: 24
156.245.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83184 (0x144f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 02:49:38 2025 GMT
Not After : Mar 12 02:49:38 2026 GMT
Subject: CN=67d0f645-8974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:74:72:96:c1:09:9c:b0:d4:2d:d9:62:9a:0c:
75:b1:4d:e8:11:c0:6a:61:e4:95:9e:9e:7a:5d:d7:
a2:a2:c5:c3:90:93:85:76:c2:e8:29:ba:6b:d2:e6:
b6:d2:41:9a:2d:bb:7d:c8:a2:13:18:55:c5:09:d4:
76:7a:23:2a:58:92:05:25:49:93:34:21:73:f8:b5:
fa:39:6f:1b:0c:c0:f0:34:5c:b3:c7:f5:9f:e1:7d:
e1:56:b1:4a:ba:b1:aa:26:41:af:f8:a6:81:e7:6a:
3c:94:34:41:8d:ba:7e:5a:d1:d6:b6:5a:ca:e2:a7:
75:e4:c9:5f:00:38:22:9f:fa:76:87:ba:5d:22:46:
33:12:6e:df:79:47:f2:7e:2a:e0:04:03:5a:98:8f:
5e:44:6c:2c:8c:e4:c0:93:27:27:74:66:99:8d:8b:
5e:1e:4c:2f:b4:17:b2:dd:66:00:e0:00:00:ac:b9:
d2:de:f6:9e:f0:44:49:0c:46:f2:e7:c8:1d:78:ef:
b1:3e:31:06:4b:0e:e4:9f:1f:41:1d:5d:f6:0e:2a:
7a:cd:c2:00:92:c5:c0:14:ac:ae:10:1d:f5:dc:1e:
99:51:30:eb:c0:95:1d:d9:84:0f:f5:00:d6:9e:c3:
09:f4:d7:10:69:2f:c2:78:94:8a:7b:9c:7d:1f:e3:
2d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C5:71:FC:5F:EE:39:81:E3:4B:1D:87:E1:96:0A:FB:AD:DD:8B:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5975A18FEEC11EF9F939C84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.250.0/24
156.231.252.0/22
156.245.8.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d9:6b:d6:8e:4e:df:8e:df:8b:0e:2e:0e:6d:c2:42:d3:dc:
83:fd:ea:18:47:41:4f:26:82:38:c0:c5:75:24:88:9a:e0:33:
43:0c:40:9a:cd:17:24:73:ba:19:d4:22:a2:24:f6:5a:14:20:
1a:a6:27:f7:58:84:c1:7c:01:ec:a8:93:dd:54:90:35:96:72:
93:80:30:83:0c:c9:47:c1:b4:45:7e:4b:b9:59:6e:fb:cc:83:
53:e6:ad:ad:0a:0a:40:72:9c:25:84:3f:26:34:e6:5c:40:1e:
35:e5:34:c2:54:ae:07:e7:66:70:0e:5a:de:d3:a0:85:2c:ec:
f8:f7:69:7e:18:ab:fe:19:cc:7a:fb:1a:10:e3:2b:d9:10:06:
52:57:77:5e:c2:fd:14:f0:4b:09:58:40:12:3f:89:c1:81:a4:
bf:62:bf:c6:da:32:f6:29:48:b3:d7:7c:ad:2f:78:e8:a0:0f:
f5:fe:a9:50:f4:e7:be:fc:77:67:f0:b6:d8:83:4c:34:dc:8f:
38:79:4c:b0:08:ce:22:ee:93:e5:ae:96:a4:c5:95:df:87:1a:
8f:9f:d4:c3:3f:3a:75:bd:d8:2f:46:66:e6:78:62:76:ec:53:
a7:53:ef:fd:6b:62:8d:91:84:b7:3a:5b:13:ee:29:8b:7e:ae:
6f:d7:cd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:45 2025 by rpki-client