Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBE51386F4F211EFA2C907A2762E951A.roa
File: BBE51386F4F211EFA2C907A2762E951A.roa (raw, json)
Hash identifier: HzLEsL/p+zOjLdl5kKnHPdeeRc4cXAfZPYuIxlp3py8=
Subject key identifier: 24:4A:91:3B:BF:9B:B7:9C:99:1D:E8:A0:90:BA:1C:D4:C4:AB:4A:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0139E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBE51386F4F211EFA2C907A2762E951A.roa
Signing time: Thu 27 Feb 2025 10:08:04 +0000
ROA not before: Thu 27 Feb 2025 10:07:58 +0000
ROA not after: Thu 19 Feb 2026 10:07:58 +0000
asID: 984
IP address blocks: 156.239.69.0/24 maxlen: 24
156.239.70.0/24 maxlen: 24
156.239.71.0/24 maxlen: 24
156.239.72.0/24 maxlen: 24
156.239.73.0/24 maxlen: 24
156.239.74.0/24 maxlen: 24
156.239.75.0/24 maxlen: 24
156.239.76.0/24 maxlen: 24
156.239.77.0/24 maxlen: 24
156.239.78.0/24 maxlen: 24
156.239.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80354 (0x139e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 10:07:58 2025 GMT
Not After : Feb 19 10:07:58 2026 GMT
Subject: CN=67c03984-74d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ce:b1:bf:c8:15:8e:52:e4:0f:b2:29:94:61:
85:7e:ac:b1:35:09:c1:1b:11:89:e6:99:7f:67:dc:
48:e2:ac:d8:8a:1e:6e:20:34:9e:e1:8f:ec:ac:ef:
8d:c1:da:f5:ec:37:6b:85:63:e6:ab:63:14:23:6b:
67:6f:c0:20:21:56:22:aa:c8:98:a3:4d:f3:8d:d9:
8e:f7:7e:07:58:fa:1b:b5:99:6a:da:81:7d:d8:dc:
11:9d:9d:7d:66:eb:cc:93:a5:43:a4:a2:46:b5:6e:
12:8a:5c:3f:7e:73:bb:e0:e5:7e:49:d1:0a:b5:c9:
5d:c5:38:aa:2c:96:a1:31:1e:35:63:4b:11:4d:9a:
30:e9:99:46:16:6a:b5:7b:1b:71:ab:ec:09:d1:31:
e7:64:a9:b0:79:cc:ce:4c:b3:e1:cc:8b:a5:9b:8c:
9f:4c:9f:f5:d8:09:00:42:ed:49:c1:2c:55:f7:6d:
95:94:16:e2:61:4f:8b:04:35:90:d9:47:b6:b4:74:
b0:8c:9e:43:30:72:d9:f4:6a:8f:f1:8d:bb:63:90:
17:1c:35:7e:44:f9:94:73:e0:bf:01:40:fa:63:d4:
9a:1f:42:c9:fd:9c:a9:f4:4b:78:84:3c:b8:e9:67:
32:bc:cc:62:ea:64:e6:5e:da:2e:78:6b:50:fc:46:
fa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4A:91:3B:BF:9B:B7:9C:99:1D:E8:A0:90:BA:1C:D4:C4:AB:4A:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBE51386F4F211EFA2C907A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.69.0-156.239.79.255
Signature Algorithm: sha256WithRSAEncryption
6f:c5:85:11:54:9f:3a:8b:d4:1c:50:43:73:f9:61:0b:1e:d8:
2c:a4:b0:82:5a:d2:f5:75:11:81:85:7f:78:90:ab:07:87:76:
3a:9f:d9:ea:8d:74:ab:7f:11:7d:b2:77:d5:84:7e:f7:1b:16:
b3:ca:c9:63:47:fa:7e:d0:13:db:5b:99:89:9e:2f:d2:f4:63:
31:cf:d1:51:18:d3:16:6b:b6:03:5d:3f:5d:78:9f:56:53:81:
b5:94:be:fd:b2:e0:13:28:02:4b:18:21:be:e3:76:fc:2c:d4:
03:a6:b3:4b:3d:e5:79:d2:86:99:55:77:16:c9:07:b2:c5:c6:
73:6d:30:09:45:cb:b2:5c:bb:d5:4e:e8:db:1c:93:3a:50:24:
13:9d:4c:05:a2:48:07:94:40:8e:90:64:83:eb:7b:b4:49:8d:
c6:f4:ec:7c:ca:df:76:92:53:86:72:9b:70:2a:1a:df:f3:41:
57:d6:b2:dd:74:37:ee:3b:4f:56:51:dc:48:e6:10:11:75:d3:
02:06:23:07:86:f1:9c:bb:79:cf:e1:cd:d4:d9:4c:56:aa:15:
05:37:2f:a9:4e:1b:2d:b2:31:2c:be:b2:f0:02:83:55:8c:21:
56:c9:01:14:06:0d:ef:6d:65:33:8c:5d:ee:2b:b0:8d:e6:17:
a7:20:51:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:00 2025 by rpki-client