Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0780F4B2C26311EF9D3847B0762E951A.roa
File: 0780F4B2C26311EF9D3847B0762E951A.roa (raw, json)
Hash identifier: teuTcLgpPNygEyoH9RkaIOwnlnjWrQ42ZjERD3pVwpU=
Subject key identifier: AB:DA:3C:4A:BE:D2:A8:55:A9:90:15:93:DD:0D:E8:22:95:2A:6A:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0780F4B2C26311EF9D3847B0762E951A.roa
Signing time: Wed 25 Dec 2024 01:53:26 +0000
ROA not before: Wed 25 Dec 2024 01:53:22 +0000
ROA not after: Wed 10 Dec 2025 01:53:22 +0000
asID: 984
IP address blocks: 154.199.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74696 (0x123c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:53:22 2024 GMT
Not After : Dec 10 01:53:22 2025 GMT
Subject: CN=676b6595-a7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0e:48:b7:9e:4b:cc:58:e7:54:9c:ce:38:03:
3d:c3:3a:fe:c6:48:c8:64:a2:04:46:a3:0d:07:c4:
fa:8f:08:f5:5b:d1:1a:7d:fa:30:c5:fb:8f:7d:35:
7c:0a:74:68:40:81:2d:c2:5d:42:98:93:7d:8a:d5:
65:17:07:c6:bf:de:f8:9c:34:88:bd:39:42:fd:38:
06:a0:8e:d5:7a:fe:c7:37:83:2c:e4:cd:80:7a:7c:
17:d9:3e:21:b6:e5:d5:ce:bb:61:5e:e1:1e:16:c9:
e8:1d:0a:c3:71:f7:6b:67:0f:c0:91:d1:f6:54:d5:
d6:7e:78:51:0d:17:21:42:5e:76:fd:1b:6f:2f:47:
1e:7a:58:80:0e:73:a8:54:68:f9:56:b2:e5:5a:93:
d4:24:2d:31:3c:aa:1c:79:47:1b:4f:84:81:1c:42:
0f:8b:b2:ee:86:22:4f:ee:b7:32:57:9a:4c:77:97:
10:e4:88:ea:1f:29:cb:f5:0f:e3:35:8b:ab:3c:29:
ff:85:08:1b:6a:b9:c4:36:b1:d0:79:73:13:68:2a:
db:c6:40:05:7d:91:42:98:08:43:a3:67:6b:86:ba:
21:ca:f3:38:4b:27:43:f0:d1:dc:df:8d:2b:73:a5:
9c:47:af:c5:09:e7:a6:d3:1f:1c:fc:77:26:61:ec:
f9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DA:3C:4A:BE:D2:A8:55:A9:90:15:93:DD:0D:E8:22:95:2A:6A:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0780F4B2C26311EF9D3847B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.113.0/24
Signature Algorithm: sha256WithRSAEncryption
42:55:2c:64:e6:af:6c:0d:b8:19:ac:f5:3a:91:fe:fc:ec:86:
9b:0f:a2:09:02:e8:0d:88:d2:13:e3:af:f0:a5:9a:79:6f:cc:
9b:16:c8:f0:f5:40:f0:d9:9d:a9:84:3f:75:68:8a:16:18:d0:
cb:e4:22:51:b3:d0:1c:23:39:15:1e:cb:94:83:d8:c5:59:e8:
57:97:c0:ea:7f:4a:9b:30:b9:bc:1c:ec:09:5d:e5:3e:a9:fe:
69:cc:54:50:1a:1e:77:bf:28:f8:47:53:f6:e2:43:a6:ae:7d:
71:d3:5e:94:13:73:86:9d:6f:0c:b9:f3:3c:14:24:9f:16:fb:
e6:db:58:5c:fc:65:76:7d:1b:2d:be:2a:ea:af:02:18:89:14:
d0:65:8f:69:f0:b0:89:75:b9:17:ab:31:9e:85:02:cb:f0:3c:
a1:e0:46:bf:d3:ef:47:45:85:08:23:86:92:39:6e:4c:48:b2:
93:67:48:ff:db:25:c5:c2:c6:23:d7:c6:56:4a:a2:31:08:ef:
24:c2:08:af:e1:db:87:bf:bd:80:09:4d:7f:f0:49:86:ab:b6:
7a:4a:e6:ee:4c:75:75:32:fe:8c:38:2b:ef:2e:50:0c:2a:1d:
9d:86:21:55:6e:8f:2a:0b:db:89:96:33:cd:fb:34:34:b5:ce:
61:8d:a2:93
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASPIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDE1MzIyWhcNMjUxMjEwMDE1MzIyWjAYMRYw
FAYDVQQDEw02NzZiNjU5NS1hN2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9A5It55LzFjnVJzOOAM9wzr+xkjIZKIERqMNB8T6jwj1W9EaffowxfuP
fTV8CnRoQIEtwl1CmJN9itVlFwfGv974nDSIvTlC/TgGoI7Vev7HN4Ms5M2AenwX
2T4htuXVzrthXuEeFsnoHQrDcfdrZw/AkdH2VNXWfnhRDRchQl52/RtvL0ceeliA
DnOoVGj5VrLlWpPUJC0xPKoceUcbT4SBHEIPi7LuhiJP7rcyV5pMd5cQ5IjqHynL
9Q/jNYurPCn/hQgbarnENrHQeXMTaCrbxkAFfZFCmAhDo2drhrohyvM4SydD8NHc
340rc6WcR6/FCeem0x8c/HcmYez5BwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKva
PEq+0qhVqZAVk90N6CKVKmpeMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNzgwRjRCMkMyNjMxMUVGOUQzODQ3QjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsdxMA0GCSqGSIb3DQEB
CwUAA4IBAQBCVSxk5q9sDbgZrPU6kf787IabD6IJAugNiNIT46/wpZp5b8ybFsjw
9UDw2Z2phD91aIoWGNDL5CJRs9AcIzkVHsuUg9jFWehXl8Dqf0qbMLm8HOwJXeU+
qf5pzFRQGh53vyj4R1P24kOmrn1x016UE3OGnW8MufM8FCSfFvvm21hc/GV2fRst
virqrwIYiRTQZY9p8LCJdbkXqzGehQLL8Dyh4Ea/0+9HRYUII4aSOW5MSLKTZ0j/
2yXFwsYj18ZWSqIxCO8kwgiv4duHv72ACU1/8EmGq7Z6SubuTHV1Mv6MOCvvLlAM
Kh2dhiFVbo8qC9uJljPN+zQ0tc5hjaKT
-----END CERTIFICATE-----
Generated at Tue Apr 8 02:08:41 2025 by rpki-client