Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5089CA4F8DD11EF9090075C762E951A.roa
File: D5089CA4F8DD11EF9090075C762E951A.roa (raw, json)
Hash identifier: hHTKXLBXFc/uuSRik12E0A1zqgW3/emH503Al37gnE0=
Subject key identifier: 60:2C:DB:18:B1:D8:30:A5:AA:6A:23:D6:E2:87:FF:7E:93:78:B3:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0142FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5089CA4F8DD11EF9090075C762E951A.roa
Signing time: Tue 04 Mar 2025 09:48:32 +0000
ROA not before: Tue 04 Mar 2025 09:48:28 +0000
ROA not after: Mon 21 Apr 2025 09:48:28 +0000
asID: 63139
IP address blocks: 156.225.112.0/24 maxlen: 24
156.225.113.0/24 maxlen: 24
156.225.114.0/24 maxlen: 24
156.225.115.0/24 maxlen: 24
156.225.116.0/24 maxlen: 24
156.225.117.0/24 maxlen: 24
156.225.118.0/24 maxlen: 24
156.225.119.0/24 maxlen: 24
156.225.120.0/24 maxlen: 24
156.225.122.0/24 maxlen: 24
156.225.123.0/24 maxlen: 24
156.225.124.0/24 maxlen: 24
156.225.125.0/24 maxlen: 24
156.225.126.0/24 maxlen: 24
156.225.127.0/24 maxlen: 24
156.227.9.0/24 maxlen: 24
156.227.15.0/24 maxlen: 24
156.229.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82684 (0x142fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 09:48:28 2025 GMT
Not After : Apr 21 09:48:28 2025 GMT
Subject: CN=67c6cc70-e177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:37:31:9d:13:41:01:c4:62:09:0a:c9:5c:
a7:43:08:1f:a8:ca:d3:dd:f6:5d:4e:b9:4d:af:56:
4e:56:3a:a3:4c:c5:d1:2c:43:11:7f:55:5c:08:3f:
bc:d0:21:c0:01:28:0b:91:05:95:c7:5b:3e:f6:30:
6f:20:50:d1:ca:f3:a0:a3:2a:b7:9a:ac:0a:2b:78:
ea:99:f1:1e:d3:b7:b6:44:34:1e:4f:34:02:cf:ed:
ca:e9:c8:88:e3:51:2f:26:83:d8:be:e2:a8:9b:72:
63:80:2a:0b:f9:59:2e:f3:85:45:d5:aa:c8:9b:dc:
b5:0b:89:d2:e5:68:9f:e3:90:e4:58:c6:5f:58:f3:
72:7a:7c:93:5c:81:b1:40:05:32:aa:9e:22:63:35:
43:5d:4d:1e:af:b5:e4:0d:f4:f7:d1:a5:0c:28:19:
67:76:87:9b:88:a6:4b:c1:78:d5:89:ee:91:cf:ca:
aa:23:4c:0b:96:ba:77:d7:be:85:ff:62:cf:c3:c6:
8e:53:65:94:b9:fe:a5:81:71:44:b8:a5:34:15:fa:
c9:5d:07:33:48:18:4e:6a:f0:b3:68:d4:61:b8:46:
e7:da:af:f5:fa:88:fa:6b:45:bc:0e:a8:a1:24:9b:
b6:96:5c:42:61:76:2b:ba:a5:06:8f:61:0e:32:a0:
59:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2C:DB:18:B1:D8:30:A5:AA:6A:23:D6:E2:87:FF:7E:93:78:B3:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5089CA4F8DD11EF9090075C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.112.0-156.225.120.255
156.225.122.0-156.225.127.255
156.227.9.0/24
156.227.15.0/24
156.229.46.0/24
Signature Algorithm: sha256WithRSAEncryption
27:bb:0b:02:b2:5f:a3:9f:7b:fc:ae:6a:83:86:4d:51:3c:5f:
2e:ab:c5:63:e0:1e:f8:4b:dc:5d:d8:4f:d7:bd:2d:00:d0:9a:
62:7f:2c:e1:cd:4d:09:95:16:4d:e6:f1:6d:03:87:75:aa:67:
19:76:28:a1:37:f7:c6:25:3b:7c:68:0f:3a:f0:f5:1c:c5:67:
72:2e:0a:93:7b:77:90:5c:4d:71:50:25:9e:f9:26:1e:e2:0f:
ff:ea:aa:a1:76:c4:99:42:b0:ec:75:1d:a4:96:d6:08:e5:7a:
90:75:9a:4c:ef:0a:93:f8:07:b8:db:ae:f8:c6:fb:3f:ba:bb:
e4:f4:b7:e3:1d:a7:73:c1:79:97:49:62:20:19:89:a8:0a:2c:
e1:91:6e:a4:c0:be:4c:fe:09:c9:a5:a1:41:d7:95:0a:20:44:
99:e7:6b:d6:8c:c8:ef:fc:b8:a0:c7:87:86:54:80:4e:22:61:
15:c3:78:9d:86:aa:54:82:2d:97:26:09:77:73:5f:2f:7e:69:
83:73:1e:e0:59:49:13:e1:d7:03:e7:57:dd:f2:ca:7e:59:3d:
76:ce:d4:87:b2:e2:3c:b0:9a:d4:40:b4:66:31:07:81:74:6d:
39:d7:99:25:14:46:cb:62:f8:1d:9c:6d:83:29:a2:df:80:c4:
22:ac:09:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:58 2025 by rpki-client