Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7B8A1ABAE85A11EFBC6A865A762E951A.roa
File: 7B8A1ABAE85A11EFBC6A865A762E951A.roa (raw, json)
Hash identifier: ytGUTCgBi4UarQG5Hco/ZD87cS/B3/7NcqGxlt+7txg=
Subject key identifier: 86:D0:AB:6D:56:B4:7C:12:DC:C7:E0:98:7C:10:3E:A4:D1:39:6F:57
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 19D0
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7B8A1ABAE85A11EFBC6A865A762E951A.roa
Signing time: Tue 11 Feb 2025 09:27:59 +0000
ROA not before: Tue 11 Feb 2025 09:27:55 +0000
ROA not after: Sat 13 Feb 2027 09:27:55 +0000
asID: 60781
IP address blocks: 154.16.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6608 (0x19d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 11 09:27:55 2025 GMT
Not After : Feb 13 09:27:55 2027 GMT
Subject: CN=67ab181f-3eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:3f:69:29:e0:fd:21:de:f5:7e:18:87:61:
79:20:27:d7:9c:0c:52:ff:c9:1d:a5:08:21:13:d4:
99:fc:57:d9:41:56:77:4f:98:2f:d8:1e:16:b8:9f:
f6:8b:db:dd:d6:d1:ef:ea:22:be:83:71:90:c8:f0:
58:34:f0:3b:4f:3b:26:b7:ee:a1:dd:19:aa:e4:f5:
ca:89:b4:a8:3e:90:e4:6f:71:6e:f6:48:1e:98:4a:
37:36:b2:aa:e3:e1:d0:0f:d2:e3:55:1b:38:9c:f9:
2b:e9:30:f1:fb:05:db:f8:74:1a:c4:4b:2b:a4:53:
de:98:d0:20:11:7f:3a:40:93:1b:c0:dd:d3:27:05:
ca:8e:02:ec:a7:ce:b8:94:dc:90:6f:60:ec:48:78:
8f:c9:95:80:74:49:8a:c0:5e:ab:e7:db:11:16:2d:
94:c4:b5:df:1c:5d:f3:55:cf:c8:f4:b9:4b:22:9f:
a6:93:2b:da:e3:c5:9b:b1:f1:82:f8:f7:37:bc:6b:
b1:fa:e6:5e:54:b3:4b:e4:13:2d:13:7e:02:33:63:
02:36:5d:c9:42:c9:e4:0f:fd:ec:ff:49:da:58:85:
80:3b:ed:a1:f6:e1:f0:d3:0a:65:9b:7b:a1:05:94:
76:d6:41:31:6f:57:77:e2:c4:cf:87:71:59:73:0a:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D0:AB:6D:56:B4:7C:12:DC:C7:E0:98:7C:10:3E:A4:D1:39:6F:57
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7B8A1ABAE85A11EFBC6A865A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.104.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d3:0f:65:2c:92:a5:06:66:7c:ff:1a:18:54:70:3e:c7:46:
25:fe:14:4b:5d:37:61:1e:1c:04:2f:a8:7b:6e:63:67:71:71:
d0:7b:e8:b2:4a:7d:57:1f:99:8f:06:f5:88:8f:73:c5:8c:0a:
e5:61:b7:ac:96:55:b9:c9:7d:26:eb:a7:23:25:39:ea:02:f7:
ae:35:d1:78:d4:89:40:cc:22:35:e7:cc:6d:5a:39:fc:bf:c4:
f6:45:b9:08:af:da:71:25:8d:1b:18:cb:27:7c:63:97:14:94:
ff:02:0f:29:0b:fc:3f:c9:bc:88:47:d9:ee:ad:1a:66:d6:8c:
11:2a:07:05:ff:bd:ad:44:e9:74:67:c5:2a:6b:56:3b:14:4a:
ee:1a:d2:14:56:f2:6e:8f:f3:d7:ae:9b:7a:57:85:48:5f:c5:
f3:a9:9c:e6:a8:02:80:dc:de:7d:3a:d8:19:ef:10:55:b6:c9:
2c:31:53:78:61:78:4c:bc:e4:75:85:7b:a2:a1:d3:b2:dc:00:
02:af:99:3a:77:f2:2c:d2:f8:b8:0b:ee:ee:98:b7:06:31:f2:
d8:a1:21:64:c8:a3:51:de:df:82:e2:c7:bb:a1:0a:47:4c:5a:
5c:9d:1f:af:bf:9a:b0:92:96:e2:47:84:bb:41:6f:6e:14:83:
d3:d4:0c:89
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGdAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTAyMTEwOTI3NTVaFw0yNzAyMTMwOTI3NTVaMBgxFjAU
BgNVBAMTDTY3YWIxODFmLTNlYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYqj9pKeD9Id71fhiHYXkgJ9ecDFL/yR2lCCET1Jn8V9lBVndPmC/YHha4
n/aL293W0e/qIr6DcZDI8Fg08DtPOya37qHdGark9cqJtKg+kORvcW72SB6YSjc2
sqrj4dAP0uNVGzic+SvpMPH7Bdv4dBrESyukU96Y0CARfzpAkxvA3dMnBcqOAuyn
zriU3JBvYOxIeI/JlYB0SYrAXqvn2xEWLZTEtd8cXfNVz8j0uUsin6aTK9rjxZux
8YL49ze8a7H65l5Us0vkEy0TfgIzYwI2XclCyeQP/ez/SdpYhYA77aH24fDTCmWb
e6EFlHbWQTFvV3fixM+HcVlzChCJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUhtCr
bVa0fBLcx+CYfBA+pNE5b1cwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzdCOEExQUJBRTg1QTExRUZCQzZBODY1QTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEGgwDQYJKoZIhvcNAQEL
BQADggEBAAHTD2UskqUGZnz/GhhUcD7HRiX+FEtdN2EeHAQvqHtuY2dxcdB76LJK
fVcfmY8G9YiPc8WMCuVht6yWVbnJfSbrpyMlOeoC96410XjUiUDMIjXnzG1aOfy/
xPZFuQiv2nEljRsYyyd8Y5cUlP8CDykL/D/JvIhH2e6tGmbWjBEqBwX/va1E6XRn
xSprVjsUSu4a0hRW8m6P89eum3pXhUhfxfOpnOaoAoDc3n062BnvEFW2ySwxU3hh
eEy85HWFe6Kh07LcAAKvmTp38izS+LgL7u6YtwYx8tihIWTIo1He34Lix7uhCkdM
WlydH6+/mrCSluJHhLtBb24Ug9PUDIk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:22 2025 by rpki-client