Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF8D70A8F8C611EF9F08BB40762E951A.roa
File: DF8D70A8F8C611EF9F08BB40762E951A.roa (raw, json)
Hash identifier: RVLK11W6oSiGDwGLlGNGv7R7OYdO1XP5ucclgqAHnso=
Subject key identifier: 93:58:AB:2E:C4:0C:7A:5D:31:97:6C:81:50:FE:39:96:B3:A0:6E:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0142AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF8D70A8F8C611EF9F08BB40762E951A.roa
Signing time: Tue 04 Mar 2025 07:04:11 +0000
ROA not before: Tue 04 Mar 2025 07:04:07 +0000
ROA not after: Wed 25 Feb 2026 07:04:07 +0000
asID: 140227
IP address blocks: 156.240.105.0/24 maxlen: 24
156.240.106.0/24 maxlen: 24
156.240.107.0/24 maxlen: 24
156.240.108.0/24 maxlen: 24
156.240.109.0/24 maxlen: 24
156.240.110.0/24 maxlen: 24
156.240.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82607 (0x142af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 07:04:07 2025 GMT
Not After : Feb 25 07:04:07 2026 GMT
Subject: CN=67c6a5eb-2760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:9f:7e:92:0a:56:69:ca:99:57:e5:f1:83:
eb:09:32:29:1e:f9:77:49:ec:94:26:c3:0b:46:ff:
5c:c7:41:59:58:2f:5b:e9:96:ad:e1:99:c7:06:72:
72:bd:db:f5:dc:e2:40:64:35:a8:03:60:ae:44:12:
20:92:8d:28:aa:05:36:25:c5:28:fa:79:2e:38:77:
2f:89:6d:22:a9:43:6b:cf:2a:2b:2e:41:56:ab:af:
6e:d1:56:f0:8c:4b:fe:59:51:76:8a:c6:8d:9e:fa:
c1:39:23:6b:2f:d1:9d:cb:3a:b0:b1:39:43:54:3e:
42:46:a5:16:10:c8:2f:16:95:50:81:94:17:53:00:
be:c9:ef:87:0f:7e:12:f4:08:74:f4:0c:b1:6d:b4:
1e:87:f9:7a:7b:69:fe:f7:c1:e2:ee:7c:58:1c:2f:
98:e6:d0:d5:a9:6d:69:18:d0:1a:67:29:05:4f:d4:
a7:18:3d:a2:ae:e7:72:05:83:fe:e0:69:99:fc:d8:
de:31:31:0e:c7:40:0c:86:ca:0a:44:67:15:86:6f:
6d:a2:02:54:d9:b6:0f:69:a0:8f:05:c6:49:e1:b8:
45:30:17:fe:9a:ba:e0:8e:b4:f5:75:57:8b:6f:f1:
43:92:b5:1a:79:2c:0b:ca:5b:56:7f:30:74:90:fb:
d6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:58:AB:2E:C4:0C:7A:5D:31:97:6C:81:50:FE:39:96:B3:A0:6E:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF8D70A8F8C611EF9F08BB40762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.105.0-156.240.111.255
Signature Algorithm: sha256WithRSAEncryption
04:5d:62:f0:16:1a:73:3b:6f:a3:25:58:4b:e2:a0:c7:30:54:
54:36:a3:f1:21:5e:af:6a:10:c1:15:05:9f:79:46:c3:65:aa:
3f:4a:5f:1a:43:cf:48:ce:22:11:23:5f:e8:86:b3:ca:b2:9b:
33:a5:75:d1:d6:d4:16:3b:2f:0d:af:38:3f:2f:d9:ab:80:e4:
9a:16:b7:7f:f6:67:21:35:f6:44:fe:51:4f:90:26:ba:a4:9d:
5d:89:99:b1:19:58:cc:78:36:83:ad:cb:6b:17:8f:ec:11:ba:
5e:1b:6e:a8:be:a2:fd:05:a2:26:66:ba:a9:37:58:33:cc:ec:
02:02:e5:db:ca:77:16:6d:89:fb:98:3d:26:65:4f:ee:e7:97:
75:ef:fe:cf:cb:e5:31:f2:a6:22:71:6f:58:25:86:ee:ac:1e:
db:54:22:83:b9:1e:70:b8:ff:a4:7b:7b:00:09:be:b7:1f:76:
fe:b4:ac:c7:f0:2c:2b:fa:aa:5a:3f:e9:f6:21:2a:15:3d:60:
16:08:12:37:da:9a:30:24:8b:95:aa:5f:82:d7:51:e0:c6:c5:
6b:35:76:6e:12:5c:eb:51:35:b4:02:a5:59:54:6d:a8:cc:f4:
5d:84:91:cf:ec:4f:84:70:8e:85:07:83:0b:4c:e0:4d:6a:fd:
6f:16:c9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:30 2025 by rpki-client