Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/227BCC10F44A11EF8B6A688C762E951A.roa
File: 227BCC10F44A11EF8B6A688C762E951A.roa (raw, json)
Hash identifier: TLy2CsB4szRakFZzfCUm/Pk/YuN+RZhkOdBhDCu/Z94=
Subject key identifier: 31:34:44:A6:9C:8D:CD:63:6C:63:EE:F8:EE:D8:23:50:00:7C:0F:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013382
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/227BCC10F44A11EF8B6A688C762E951A.roa
Signing time: Wed 26 Feb 2025 14:01:11 +0000
ROA not before: Wed 26 Feb 2025 14:01:08 +0000
ROA not after: Thu 19 Feb 2026 14:01:08 +0000
asID: 984
IP address blocks: 156.252.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78722 (0x13382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 14:01:08 2025 GMT
Not After : Feb 19 14:01:08 2026 GMT
Subject: CN=67bf1ea7-b184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b8:af:74:57:fb:b0:6e:64:00:18:ce:e1:32:
55:ca:c1:ef:87:9e:ee:38:0d:06:08:ef:ae:b8:47:
00:d5:3d:7a:06:f6:cb:f1:e6:71:c5:b7:cc:1d:c0:
c3:e3:d4:fd:29:b6:a4:3a:e2:58:8e:a3:dd:76:9d:
af:70:e6:a6:37:d9:c9:46:dc:42:0c:5e:d2:1b:56:
eb:50:4e:dd:3f:8a:dd:a1:ba:6d:e4:e3:2b:3b:b3:
1b:65:ae:cf:64:80:83:d4:53:bc:0a:ea:5c:6b:44:
48:d5:3e:6a:93:4c:b2:3e:dc:93:ba:5f:e0:e0:95:
72:88:39:37:24:18:d2:de:11:1a:41:59:20:fe:8c:
a7:f4:6f:92:17:14:69:ad:f9:44:b6:09:1b:6a:53:
74:91:71:06:fc:c0:de:65:18:a9:6f:24:ce:0b:48:
14:e9:d4:75:b1:23:79:31:a4:25:32:d4:ba:fd:c9:
d2:c1:20:71:9f:d7:04:cc:ff:1b:d0:57:43:72:89:
23:db:9c:37:f1:14:98:9a:a1:44:1d:b9:21:1a:bd:
fe:f4:c9:90:58:0b:b3:d5:d9:da:a3:b0:63:5d:d2:
2d:b2:21:09:61:cb:9c:14:56:bc:5e:69:9a:d3:7f:
50:ce:f7:5c:d8:5c:f8:d9:33:65:ba:fa:09:f3:8f:
1d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:34:44:A6:9C:8D:CD:63:6C:63:EE:F8:EE:D8:23:50:00:7C:0F:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/227BCC10F44A11EF8B6A688C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.182.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ad:fa:05:9f:1e:4b:95:e2:2c:48:91:1b:c4:8c:58:71:4d:
4e:4b:e1:9b:f0:b3:d3:1b:e7:73:78:f6:04:4b:21:89:fa:8c:
14:3c:61:d7:46:4d:90:1b:39:ef:aa:2d:68:fb:07:6b:90:cf:
97:a0:87:c2:41:47:c7:7e:6c:16:fa:79:6e:cb:9b:34:8b:c1:
4c:e9:3a:1e:39:29:5d:1b:5d:a3:8d:97:49:69:84:bc:8d:73:
6b:e6:0e:e6:bd:ed:1f:15:8a:2d:9d:be:36:8f:68:99:f3:20:
d1:4e:86:92:41:1d:51:f3:db:5a:3f:dd:6e:19:9f:72:88:e6:
83:a7:3f:dd:95:a2:19:a8:70:74:60:51:f6:ed:f2:4f:47:3b:
17:6b:bd:5a:52:1e:9e:02:19:37:2f:82:d7:d6:f8:d9:6d:b5:
84:2d:59:ea:f7:41:f3:fa:53:de:17:19:83:a7:2b:14:8f:ff:
e6:01:e4:dc:17:0f:4f:e4:61:8d:64:9f:fd:f1:fe:d4:cc:cd:
7d:22:1e:16:66:0a:36:6d:40:45:fd:09:72:44:23:e7:da:58:
b5:d1:d6:9e:44:80:e1:95:fc:c0:28:c4:c7:e2:7f:3b:64:41:
f1:05:be:b3:16:cf:40:cb:e8:44:5a:3e:13:19:78:cd:44:9c:
fe:cd:9d:cf
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATOCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTQwMTA4WhcNMjYwMjE5MTQwMTA4WjAYMRYw
FAYDVQQDEw02N2JmMWVhNy1iMTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0rivdFf7sG5kABjO4TJVysHvh57uOA0GCO+uuEcA1T16BvbL8eZxxbfM
HcDD49T9KbakOuJYjqPddp2vcOamN9nJRtxCDF7SG1brUE7dP4rdobpt5OMrO7Mb
Za7PZICD1FO8Cupca0RI1T5qk0yyPtyTul/g4JVyiDk3JBjS3hEaQVkg/oyn9G+S
FxRprflEtgkbalN0kXEG/MDeZRipbyTOC0gU6dR1sSN5MaQlMtS6/cnSwSBxn9cE
zP8b0FdDcokj25w38RSYmqFEHbkhGr3+9MmQWAuz1dnao7BjXdItsiEJYcucFFa8
Xmma039Qzvdc2Fz42TNluvoJ848dSwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDE0
RKacjc1jbGPu+O7YI1AAfA8HMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMjdCQ0MxMEY0NEExMUVGOEI2QTY4OEM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPy2MA0GCSqGSIb3DQEBCwUA
A4IBAQAyrfoFnx5LleIsSJEbxIxYcU1OS+Gb8LPTG+dzePYESyGJ+owUPGHXRk2Q
Gznvqi1o+wdrkM+XoIfCQUfHfmwW+nluy5s0i8FM6ToeOSldG12jjZdJaYS8jXNr
5g7mve0fFYotnb42j2iZ8yDRToaSQR1R89taP91uGZ9yiOaDpz/dlaIZqHB0YFH2
7fJPRzsXa71aUh6eAhk3L4LX1vjZbbWELVnq90Hz+lPeFxmDpysUj//mAeTcFw9P
5GGNZJ/98f7UzM19Ih4WZgo2bUBF/QlyRCPn2li10daeRIDhlfzAKMTH4n87ZEHx
Bb6zFs9Ay+hEWj4TGXjNRJz+zZ3P
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:07 2025 by rpki-client