Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E111DEC0FF1811EFBED6B4A3762E951A.roa
File: E111DEC0FF1811EFBED6B4A3762E951A.roa (raw, json)
Hash identifier: NKHIlzAty9tVLyleiyE2Vw3Y1HpYldP6HLR7JTgPKE8=
Subject key identifier: 4D:70:17:8F:DF:14:5D:06:B7:33:6A:EC:64:87:D2:42:22:9B:0D:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014505
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E111DEC0FF1811EFBED6B4A3762E951A.roa
Signing time: Wed 12 Mar 2025 08:06:19 +0000
ROA not before: Wed 12 Mar 2025 08:06:13 +0000
ROA not after: Mon 05 May 2025 08:06:13 +0000
asID: 398823
IP address blocks: 156.229.176.0/20 maxlen: 24
156.229.192.0/19 maxlen: 24
156.236.192.0/18 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83205 (0x14505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 08:06:13 2025 GMT
Not After : May 5 08:06:13 2025 GMT
Subject: CN=67d1407b-f124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e3:df:21:6c:c5:74:e2:51:44:5f:5f:22:ba:
0d:fd:2e:ef:da:51:c8:0a:67:4e:bd:4a:dd:ba:73:
4a:6d:fe:5d:26:71:c1:dc:bf:20:b6:d9:5d:a4:84:
05:60:3f:bf:88:da:eb:27:ad:4d:c7:ce:55:dc:a5:
2f:f0:6e:54:df:b8:0a:da:1c:aa:b9:4c:76:3d:8b:
9e:96:9e:8c:19:a1:e6:ff:20:50:75:59:d6:a7:ec:
11:5e:f7:8b:8f:4d:df:11:1d:16:c2:a0:60:26:e7:
68:05:70:44:84:a1:75:8c:87:88:38:15:7f:45:57:
50:cc:95:c1:f5:df:52:9c:46:5b:c6:b1:a9:e6:f1:
83:7b:3b:63:f6:83:78:42:4f:3c:50:ca:ff:25:93:
46:34:68:ad:6f:3a:bb:3e:46:fd:e0:df:22:1b:8f:
84:3d:b6:52:1f:f9:f0:c7:27:59:ec:cf:84:25:20:
b2:38:db:e8:0a:4c:fe:98:7f:05:46:95:3a:7e:80:
da:ea:69:55:18:f4:2a:b7:d2:55:0c:b0:eb:7f:78:
f9:59:bf:b4:36:a4:94:c9:d7:d4:26:4c:1b:bb:da:
eb:18:0c:5c:db:62:68:89:3e:52:8e:d0:39:9c:7e:
fe:b5:1b:3b:29:f0:22:ae:27:29:52:7b:a5:f2:92:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:70:17:8F:DF:14:5D:06:B7:33:6A:EC:64:87:D2:42:22:9B:0D:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E111DEC0FF1811EFBED6B4A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.176.0-156.229.223.255
156.236.192.0/18
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
93:c8:bd:c7:10:0f:ad:94:d7:85:c3:f2:cf:0c:54:3c:8a:b2:
91:0c:fa:0a:0e:a2:47:09:83:33:33:0d:5b:37:94:fc:77:f3:
51:62:40:be:39:df:92:59:2f:3b:1a:c2:ca:c4:1e:6c:74:b6:
b9:13:3f:05:3b:1f:a8:2d:e8:1e:d4:19:aa:5f:c0:41:a3:8c:
97:36:c4:24:9a:0d:e0:59:f7:4b:e2:27:4b:3b:a6:e1:55:51:
39:03:ac:9b:79:fe:c9:c7:25:d8:25:bd:98:2c:58:28:f1:77:
e8:d4:cf:09:7d:f1:75:16:02:8f:21:5d:33:4d:2c:28:a2:e3:
de:ad:83:8f:90:f4:4a:a7:77:e5:5b:df:e3:ee:ce:47:ac:b3:
f4:a2:ed:c8:c7:62:ec:22:55:4e:da:13:a5:07:79:60:39:25:
96:a8:ac:2c:65:9f:25:a2:35:93:c5:d4:6a:00:09:9e:02:21:
84:6c:55:bb:c3:4f:81:4c:41:5d:eb:7a:82:81:9b:c5:93:96:
5b:7b:15:97:2f:8e:fd:c8:dd:e8:6d:a9:68:a6:cc:71:fb:d4:
1b:ce:10:2c:f0:5b:c2:be:2c:24:06:4e:6b:1d:8d:2e:4f:b6:
57:cf:72:2a:e5:18:a9:13:e3:15:45:7f:0d:3d:5a:9a:e1:d1:
1e:8f:13:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:42 2025 by rpki-client