Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E24C7ECC42B11EF8892C391762E951A.roa
File: 1E24C7ECC42B11EF8892C391762E951A.roa (raw, json)
Hash identifier: uJCAsYVSwbdkUbE1d35u6Z1yrKgx3uTNDZO3DNkwTPQ=
Subject key identifier: 12:79:7D:42:53:C9:05:AB:91:AC:F9:53:47:26:82:D3:BD:B2:A4:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012A21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E24C7ECC42B11EF8892C391762E951A.roa
Signing time: Fri 27 Dec 2024 08:18:14 +0000
ROA not before: Fri 27 Dec 2024 08:18:10 +0000
ROA not after: Sun 12 Dec 2027 08:18:10 +0000
asID: 17561
IP address blocks: 154.202.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76321 (0x12a21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 08:18:10 2024 GMT
Not After : Dec 12 08:18:10 2027 GMT
Subject: CN=676e62c6-ccf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f0:c8:00:4e:4c:f6:0f:d6:7e:31:f0:13:97:
d7:e4:10:b2:20:28:50:93:97:5b:fa:b8:9c:11:4b:
52:0c:7f:c2:22:5f:fd:00:2c:72:c0:f8:71:0d:eb:
62:1d:ae:30:dd:0b:36:c0:2a:bb:1e:8c:c6:2a:75:
23:79:a5:64:a2:d9:c3:30:c6:34:66:bf:71:6f:49:
d8:c7:21:29:59:f4:5c:06:aa:57:90:55:db:61:71:
62:7c:04:bc:4c:86:ef:6e:14:78:03:c1:5a:f9:0c:
a6:9f:8d:50:d5:72:4b:ad:70:db:39:94:3f:7c:3d:
36:f0:14:26:e8:6d:c6:dd:f1:0d:ee:b9:80:ff:c0:
ce:55:51:fb:13:86:d3:8b:29:d3:6e:2a:f7:a0:84:
ad:dc:0e:06:b3:56:ad:a5:ad:86:20:ed:6e:59:f6:
c2:a0:44:99:c7:c4:a5:be:5d:c4:76:0a:cf:db:f5:
5e:02:94:a1:f1:f0:91:72:8e:e6:74:f7:bc:96:75:
d2:5f:25:2d:2f:13:8c:5e:ab:95:17:d5:c2:f2:75:
93:b8:bc:90:41:09:a9:0e:e0:ce:fc:69:24:9c:bc:
2c:7c:f0:c7:62:b1:e6:57:28:17:4b:dd:fc:69:0e:
15:98:9b:2e:24:e5:2b:97:e1:06:b3:95:bb:95:74:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:79:7D:42:53:C9:05:AB:91:AC:F9:53:47:26:82:D3:BD:B2:A4:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E24C7ECC42B11EF8892C391762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:19:5d:6e:76:db:c4:09:01:ca:4a:bc:0b:a0:a8:2c:f6:0e:
80:4f:fa:a4:c9:4f:84:94:4b:c3:3b:75:36:4e:99:3d:e9:c9:
2e:11:e8:61:3c:a9:4c:e5:82:c4:d0:49:08:13:e6:78:83:80:
a8:57:b7:3a:1b:ec:fb:89:83:df:24:b3:70:0c:6d:0f:03:73:
fe:d6:44:c2:d1:1c:a1:a8:bd:aa:7e:45:1e:a2:fe:81:db:b6:
a6:ea:7b:d7:a4:f1:0d:80:71:ce:24:ea:a4:8f:2e:91:70:ca:
64:24:bc:0b:cf:22:21:2f:bf:ac:be:f0:cc:79:f4:f5:e2:45:
73:ba:b7:21:09:d5:8e:f0:48:2d:9b:f6:e8:8e:f3:1f:89:ca:
f5:ac:9f:3d:55:e2:56:f1:8a:4b:70:a3:5f:03:a7:d4:b8:ae:
2c:b6:f2:2a:7f:9d:86:88:84:94:98:68:95:97:b4:04:a3:8e:
75:7f:36:b2:10:97:8b:27:98:ec:4c:fe:20:e5:06:5e:6f:cc:
43:d4:ea:06:f0:0e:8f:83:0a:ad:98:b0:eb:46:46:a8:48:15:
87:07:69:b8:51:b2:75:db:2a:f3:6e:1d:d7:d8:54:f7:91:08:
18:e4:b9:be:f8:14:4d:a3:5c:79:23:8f:99:0d:3d:a7:32:21:
15:af:7b:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASohMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDgxODEwWhcNMjcxMjEyMDgxODEwWjAYMRYw
FAYDVQQDEw02NzZlNjJjNi1jY2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6PDIAE5M9g/WfjHwE5fX5BCyIChQk5db+ricEUtSDH/CIl/9ACxywPhx
DetiHa4w3Qs2wCq7HozGKnUjeaVkotnDMMY0Zr9xb0nYxyEpWfRcBqpXkFXbYXFi
fAS8TIbvbhR4A8Fa+Qymn41Q1XJLrXDbOZQ/fD028BQm6G3G3fEN7rmA/8DOVVH7
E4bTiynTbir3oISt3A4Gs1atpa2GIO1uWfbCoESZx8Slvl3EdgrP2/VeApSh8fCR
co7mdPe8lnXSXyUtLxOMXquVF9XC8nWTuLyQQQmpDuDO/GkknLwsfPDHYrHmVygX
S938aQ4VmJsuJOUrl+EGs5W7lXQp8wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBJ5
fUJTyQWrkaz5U0cmgtO9sqTdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRTI0QzdFQ0M0MkIxMUVGODg5MkMzOTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsp4MA0GCSqGSIb3DQEB
CwUAA4IBAQCKGV1udtvECQHKSrwLoKgs9g6AT/qkyU+ElEvDO3U2Tpk96ckuEehh
PKlM5YLE0EkIE+Z4g4CoV7c6G+z7iYPfJLNwDG0PA3P+1kTC0RyhqL2qfkUeov6B
27am6nvXpPENgHHOJOqkjy6RcMpkJLwLzyIhL7+svvDMefT14kVzurchCdWO8Egt
m/bojvMficr1rJ89VeJW8YpLcKNfA6fUuK4stvIqf52GiISUmGiVl7QEo451fzay
EJeLJ5jsTP4g5QZeb8xD1OoG8A6PgwqtmLDrRkaoSBWHB2m4UbJ12yrzbh3X2FT3
kQgY5Lm++BRNo1x5I4+ZDT2nMiEVr3s/
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:00 2025 by rpki-client