Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/302E7B88D4AF11EF831D929E762E951A.roa
File: 302E7B88D4AF11EF831D929E762E951A.roa (raw, json)
Hash identifier: myByYWMmLK3B6OfPmv48fZh4YSbn2MU4nmdzPcIjXgw=
Subject key identifier: 32:35:19:B4:79:15:13:78:BF:74:9E:B8:0E:F1:AA:0F:A4:42:D1:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010941
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/302E7B88D4AF11EF831D929E762E951A.roa
Signing time: Fri 17 Jan 2025 08:43:57 +0000
ROA not before: Fri 17 Jan 2025 08:43:53 +0000
ROA not after: Thu 17 Jul 2025 08:43:53 +0000
asID: 63199
IP address blocks: 156.227.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67905 (0x10941)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 17 08:43:53 2025 GMT
Not After : Jul 17 08:43:53 2025 GMT
Subject: CN=678a184c-8c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:c2:d5:6b:50:6b:07:80:fd:33:ce:17:49:
76:8c:97:31:8c:a8:11:77:76:03:bd:a2:c7:16:0a:
e5:18:f3:bd:31:ca:71:c7:9a:e7:b1:42:fb:0d:d0:
03:d9:8d:68:35:a1:79:b2:f3:5b:1c:be:3b:ed:4d:
0c:a1:7b:2e:8a:07:22:5a:2f:ff:6d:13:45:2f:8c:
2d:00:85:a7:cb:28:90:81:07:8d:b1:85:12:75:36:
c7:e8:d6:23:0b:51:2e:d5:14:9f:61:79:ad:83:ad:
65:77:7c:09:77:6d:9c:49:67:a2:11:9b:e8:7a:99:
be:be:55:90:d2:d2:23:95:95:04:4c:87:16:5c:51:
61:2b:2f:b3:a0:dd:3b:a8:26:4e:10:7c:77:45:70:
43:1e:ac:4f:34:0e:cc:2b:a1:f0:39:a4:bc:9a:02:
27:59:09:6f:ae:2d:e3:1e:ad:35:05:00:20:fd:80:
72:ff:2d:83:58:e4:a1:55:dd:3d:ea:e3:7c:ed:73:
1e:75:3e:eb:96:c7:79:f9:0b:00:e5:cb:00:44:ac:
a2:b5:f4:92:3c:88:81:4f:cf:41:1f:a4:11:ee:17:
ad:9e:86:a8:f0:aa:b8:b6:82:68:35:17:09:99:d5:
11:22:73:df:95:13:be:2b:92:cd:9b:8d:04:29:85:
9d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:35:19:B4:79:15:13:78:BF:74:9E:B8:0E:F1:AA:0F:A4:42:D1:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/302E7B88D4AF11EF831D929E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.10.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:ff:18:8e:bc:5d:53:52:b3:36:fa:33:20:1b:1a:fd:24:1d:
59:8c:00:af:3d:28:57:c1:94:2c:98:a8:26:a1:4e:4e:76:ad:
3c:f6:c4:4a:96:a7:80:d3:f3:ff:51:c4:be:f8:ea:a8:56:e7:
fe:ac:8b:68:20:49:95:93:48:b9:24:78:d9:a2:5d:56:f6:69:
4d:ed:b9:ed:3a:ba:9f:76:61:10:ec:87:2d:4c:de:ee:a8:8f:
32:70:42:c6:c7:ab:37:8e:eb:fd:cb:bc:45:e5:a9:89:c0:ae:
e6:f9:93:5c:24:ce:08:c6:1b:8c:5d:ae:ba:8c:8f:50:bc:98:
c2:e5:dc:e1:a5:f6:95:01:6e:01:aa:ad:04:6c:3c:2d:e6:12:
d8:05:78:31:8d:8b:dc:06:7e:b7:a8:97:15:fd:59:04:6d:10:
27:96:ce:2b:3d:36:fa:e1:1a:3a:40:1e:a1:a7:13:cf:81:f9:
7d:1b:8c:8d:35:b8:36:c4:18:f4:28:8e:4c:e9:7e:0f:9a:53:
11:61:3d:69:d5:84:d6:42:5e:8f:11:8a:2d:d6:83:bb:ea:31:
98:9d:35:53:2d:0a:3e:6c:53:d6:9d:fd:f1:95:44:c7:c7:69:
7d:4f:13:db:c9:50:13:12:93:fc:e2:f1:e8:da:27:4e:57:48:
a8:47:f9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:43:48 2025 by rpki-client