Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09690776D68411EF88348B9B762E951A.roa
File: 09690776D68411EF88348B9B762E951A.roa (raw, json)
Hash identifier: EZLJAPS0hAvQrCTuSoW1zahmYKHcIQmbRl2kjpv1Xsw=
Subject key identifier: D5:21:8A:9C:4A:3A:16:FC:8B:FC:B7:3A:2D:C5:9B:29:4E:58:E6:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010BC0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09690776D68411EF88348B9B762E951A.roa
Signing time: Sun 19 Jan 2025 16:40:05 +0000
ROA not before: Sun 19 Jan 2025 16:40:02 +0000
ROA not after: Mon 24 Feb 2025 16:40:02 +0000
asID: 395793
IP address blocks: 156.228.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68544 (0x10bc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 19 16:40:02 2025 GMT
Not After : Feb 24 16:40:02 2025 GMT
Subject: CN=678d2ae5-66bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:20:f4:7d:ca:14:6a:2e:6d:f6:d2:ba:a8:
3b:b6:40:9d:75:b3:21:17:af:4f:09:ff:01:4b:f3:
dc:1a:71:62:a1:6a:84:ce:b3:3b:c2:b1:2e:6a:0d:
1a:8e:cb:93:01:9a:9c:0b:a8:1e:53:3c:fe:0d:02:
ec:6d:0e:cd:a2:43:23:38:d5:10:7b:11:b1:87:5f:
6f:fb:b7:83:36:42:2b:a2:f7:b2:ae:67:6d:e8:81:
2e:36:85:60:e5:50:b0:14:53:1b:23:c9:31:d2:b1:
bc:61:6f:ee:7d:2c:53:eb:44:9c:a2:8c:d2:e5:3d:
4c:56:14:4d:63:8d:52:6a:0c:7e:75:99:5a:cd:8e:
13:f3:53:e7:9d:ba:e8:c8:53:32:9b:3d:15:14:b1:
14:7b:d5:29:8a:32:08:61:f9:da:f4:3e:5f:1b:48:
9c:cb:ea:bf:a3:43:d1:d0:59:93:59:8c:a4:98:4c:
27:34:a6:8e:cd:20:b9:4a:0c:31:4f:e9:5a:d0:35:
8f:1d:4c:82:00:10:6f:07:0f:22:e4:8f:df:78:46:
fe:10:4c:c4:c9:5b:7c:fd:11:d5:71:3c:b4:fe:ee:
8b:95:c8:fb:78:ed:49:fd:ea:05:57:eb:d3:81:8d:
e9:32:93:92:ef:58:93:45:a3:39:68:d5:89:62:24:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:21:8A:9C:4A:3A:16:FC:8B:FC:B7:3A:2D:C5:9B:29:4E:58:E6:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09690776D68411EF88348B9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:93:87:f9:20:28:ec:53:70:27:a2:93:0e:1d:6f:55:9c:9f:
1a:5f:91:65:77:f3:79:ba:2f:c0:20:c9:78:aa:aa:10:4d:3a:
6f:aa:b1:03:b8:d3:27:f0:38:f0:c1:6e:4d:02:f1:f4:ed:82:
5d:ed:ed:49:3e:ca:b2:d9:cc:89:f7:67:2b:fd:ed:28:46:88:
5c:69:5f:06:32:b9:d8:14:b3:60:4e:4c:51:8c:04:0e:4c:00:
4e:b0:48:ff:57:38:65:db:b2:87:92:3d:f2:d5:ce:04:bd:e6:
4f:f2:47:82:a4:ef:98:57:a9:76:d8:2b:21:15:44:f7:40:0e:
34:36:a3:2e:02:13:5b:01:2b:76:e9:81:ff:56:67:ce:68:76:
ec:37:6f:35:8d:c3:36:7e:a2:1c:db:7e:ae:89:ff:13:07:6e:
46:3e:90:a5:d8:c6:a3:f8:4a:22:6e:ae:dd:3b:83:45:de:43:
59:40:20:ff:f7:d8:25:04:ca:db:9a:ce:48:fe:7c:3e:5c:fe:
8b:4b:29:18:d7:2e:e0:5e:a6:26:f7:4d:a7:02:5e:1a:99:0a:
c9:f4:be:08:cb:a3:ef:56:1a:36:0b:9c:42:2f:95:39:3e:84:
3b:94:de:52:15:83:28:d0:f4:99:18:75:2d:88:be:02:88:e8:
d2:9c:fd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:24:35 2025 by rpki-client