Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC373910F4FB11EF8E07B761762E951A.roa
File: FC373910F4FB11EF8E07B761762E951A.roa (raw, json)
Hash identifier: FrvSGeQQdVmcD6ZGAPTNe1Zp+W+LNd7yi3KWj7mRqjc=
Subject key identifier: 1F:2F:C2:86:C2:EE:99:1D:EC:77:28:18:90:66:70:9E:57:B8:98:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013A06
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC373910F4FB11EF8E07B761762E951A.roa
Signing time: Thu 27 Feb 2025 11:14:18 +0000
ROA not before: Thu 27 Feb 2025 11:14:12 +0000
ROA not after: Sat 19 Feb 2028 11:14:12 +0000
asID: 17561
IP address blocks: 156.227.170.0/24 maxlen: 24
156.227.171.0/24 maxlen: 24
156.227.172.0/24 maxlen: 24
156.227.173.0/24 maxlen: 24
156.227.174.0/24 maxlen: 24
156.227.175.0/24 maxlen: 24
156.227.176.0/24 maxlen: 24
156.227.177.0/24 maxlen: 24
156.227.178.0/24 maxlen: 24
156.227.179.0/24 maxlen: 24
156.227.180.0/24 maxlen: 24
156.227.181.0/24 maxlen: 24
156.227.182.0/24 maxlen: 24
156.227.183.0/24 maxlen: 24
156.227.184.0/24 maxlen: 24
156.227.185.0/24 maxlen: 24
156.227.186.0/24 maxlen: 24
156.227.187.0/24 maxlen: 24
156.227.188.0/24 maxlen: 24
156.227.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80390 (0x13a06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 11:14:12 2025 GMT
Not After : Feb 19 11:14:12 2028 GMT
Subject: CN=67c0490a-4deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:d6:77:f4:fe:61:c9:93:47:a7:0e:60:8e:
19:60:23:8f:24:23:65:d3:88:46:90:12:a3:c8:5a:
0d:91:ec:fa:59:de:ed:d3:13:bb:8a:41:48:71:b5:
76:2a:da:e7:a9:43:17:27:4b:11:79:7b:d2:b0:76:
c7:c6:ca:7c:61:ee:08:b0:10:76:73:6b:13:60:78:
10:3f:71:15:ce:53:f9:31:30:5a:8c:23:5c:74:28:
04:6e:8d:47:77:0b:5b:73:33:63:66:ae:27:fc:74:
06:e1:d2:db:6d:eb:eb:8f:1a:b0:1e:c6:eb:30:fc:
a0:04:09:a3:d3:f9:03:72:41:81:b2:86:41:60:ad:
6d:e9:5b:b7:77:83:d8:8f:d4:63:65:25:dd:a5:e8:
7f:dd:c8:2e:38:3c:81:1f:2b:0d:02:ff:aa:cd:d2:
68:92:71:62:e0:40:17:1d:39:c3:11:c3:32:78:c0:
07:5b:59:8a:f1:61:38:05:68:2b:55:14:7a:98:7a:
1d:3b:0b:d4:b1:05:d3:d4:40:3a:2d:79:f8:0d:36:
94:7e:9f:ef:b9:1b:4b:33:3b:66:ff:4a:f5:a7:0f:
9e:96:e7:ef:63:c5:f4:88:bb:8c:ec:ee:ef:ee:55:
74:06:3a:51:a4:7f:34:fb:7c:ac:bd:05:cf:ca:ac:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2F:C2:86:C2:EE:99:1D:EC:77:28:18:90:66:70:9E:57:B8:98:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC373910F4FB11EF8E07B761762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.170.0-156.227.189.255
Signature Algorithm: sha256WithRSAEncryption
04:1a:c0:64:38:37:c3:93:8a:8f:cb:f4:ba:6b:ac:19:83:2a:
fd:cc:2b:f3:94:e2:fe:9b:97:54:6e:d1:9b:4b:6c:b2:83:c8:
24:09:73:8b:dc:38:ac:31:6a:d8:70:55:7c:71:1a:ad:b4:da:
11:b8:bf:ed:ac:26:a6:06:30:00:a8:a9:95:6f:3e:a5:43:5f:
f7:76:ca:b5:14:b7:a8:2d:25:37:36:15:31:c2:42:5c:b4:1b:
68:98:f1:58:23:d3:8f:56:f9:6b:0e:da:32:86:f6:90:0b:fe:
f5:ec:cf:a2:be:00:ba:74:59:7e:ed:df:52:63:fe:a0:f2:93:
9d:61:ee:48:f8:e2:99:fa:82:f1:56:46:76:0b:9e:39:95:2f:
ca:fa:19:94:55:71:19:51:02:c0:a8:13:60:77:f5:db:f3:f9:
5d:dd:f7:1d:e1:69:94:39:e8:fa:68:cf:08:ef:3f:bd:86:4a:
0e:b1:dd:8e:96:e8:ba:2b:09:34:57:3a:fb:1f:91:7c:73:e2:
57:e8:eb:08:9d:e0:e9:ef:02:be:d3:c3:a3:fc:8f:fe:2f:b4:
80:36:ae:df:18:51:ba:92:a7:4a:da:07:4d:f9:b2:2b:33:ed:
ae:f8:fb:37:5e:08:97:11:ac:ab:0f:14:44:51:c9:78:f7:41:
07:f2:d6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:42 2025 by rpki-client