Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EC5E918C91411EF9E31EFBA762E951A.roa
File: 1EC5E918C91411EF9E31EFBA762E951A.roa (raw, json)
Hash identifier: baZBG9KW311MYKTGPn+4ooGm7bW+xg8yfZHlJGQP0Vw=
Subject key identifier: 78:66:BB:05:0A:7E:79:1E:04:4E:E0:63:AC:70:15:BF:6A:85:0A:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EC5E918C91411EF9E31EFBA762E951A.roa
Signing time: Thu 02 Jan 2025 14:16:12 +0000
ROA not before: Thu 02 Jan 2025 14:16:08 +0000
ROA not after: Mon 13 Dec 2027 14:16:08 +0000
asID: 17561
IP address blocks: 154.221.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78529 (0x132c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:16:08 2025 GMT
Not After : Dec 13 14:16:08 2027 GMT
Subject: CN=67769fac-e126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:26:39:f8:09:ef:10:a1:91:59:55:4e:60:5d:
92:08:2b:9d:87:0b:7b:62:5c:e5:fb:0f:8b:bc:55:
ff:fd:fe:0a:da:11:2b:5b:0e:7a:73:a8:b2:bb:5a:
b6:ed:6b:52:91:cc:34:a4:33:bf:da:a4:03:88:28:
d9:44:ca:2e:57:d3:3b:1e:8f:ce:d2:93:19:27:6b:
d5:14:bb:94:fc:d7:28:51:3e:a0:69:63:a6:b8:ec:
5e:ec:8d:c5:dc:fd:09:c6:d5:b0:f7:71:36:d4:3c:
d5:65:1e:fe:c6:c9:54:c7:b3:cc:e7:56:dc:a8:e6:
8c:36:d8:7c:9d:0d:00:a2:cf:7c:a5:33:60:ea:4d:
37:34:c5:81:c2:f1:d3:a5:49:04:ba:55:f7:75:51:
9f:47:d9:ce:c4:e4:64:e9:f7:b1:3a:65:6a:1b:55:
7e:75:d5:96:c4:1e:27:48:1b:09:91:0e:1e:69:ba:
cc:4b:e5:56:28:ff:ca:06:c6:3e:38:c2:98:ff:0c:
c1:71:a9:d6:64:ad:b0:0e:92:9a:e4:c5:5d:ef:8f:
70:9e:03:38:a4:a9:9b:86:35:58:c5:9c:ef:65:2d:
34:ca:f1:54:4c:c6:24:8b:52:f8:8c:6f:2e:8e:03:
47:f7:04:04:db:ba:19:2d:50:33:ba:c1:66:ad:95:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:66:BB:05:0A:7E:79:1E:04:4E:E0:63:AC:70:15:BF:6A:85:0A:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EC5E918C91411EF9E31EFBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.237.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:07:f8:67:0d:f5:6f:ed:64:87:f6:4c:cc:fc:ec:80:32:ba:
66:c6:9e:fe:3e:00:e5:24:19:a5:9b:9f:af:ff:35:27:38:29:
56:47:4a:a7:e5:8d:61:33:0d:7b:e5:90:3a:f5:76:51:89:b9:
4e:b5:f6:c7:2d:51:e6:aa:11:44:d3:30:89:24:f6:fa:b6:90:
85:40:82:10:24:28:ca:19:04:8f:ad:9c:30:ba:35:59:a7:54:
a4:fe:33:26:a9:90:bc:54:5c:8b:60:f1:e0:47:cd:a9:af:63:
3a:82:7c:a3:c2:bf:17:7c:a3:af:30:49:7c:54:cc:0d:ee:38:
42:52:05:eb:8d:6b:bc:c9:ba:35:a7:34:4b:67:9e:14:75:28:
73:ed:71:6c:de:46:c2:d8:4b:a3:3d:5d:c3:cc:8d:37:69:20:
10:95:b2:97:39:42:a2:bb:71:b3:f2:0c:af:52:be:c2:43:f7:
83:17:20:74:8a:25:4d:cd:c8:b6:13:8f:91:07:b7:e9:16:89:
50:c1:b7:d9:56:b3:35:61:4d:ae:6e:91:e6:0c:28:64:7b:7b:
7c:d6:62:15:b4:03:bd:db:22:29:fb:39:a1:18:95:39:2d:04:
98:69:1c:4b:3b:d5:97:81:d6:31:3e:cf:e8:7d:b2:59:48:aa:
af:80:87:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATLBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTQxNjA4WhcNMjcxMjEzMTQxNjA4WjAYMRYw
FAYDVQQDEw02Nzc2OWZhYy1lMTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA/CY5+AnvEKGRWVVOYF2SCCudhwt7Ylzl+w+LvFX//f4K2hErWw56c6iy
u1q27WtSkcw0pDO/2qQDiCjZRMouV9M7Ho/O0pMZJ2vVFLuU/NcoUT6gaWOmuOxe
7I3F3P0JxtWw93E21DzVZR7+xslUx7PM51bcqOaMNth8nQ0Aos98pTNg6k03NMWB
wvHTpUkEulX3dVGfR9nOxORk6fexOmVqG1V+ddWWxB4nSBsJkQ4eabrMS+VWKP/K
BsY+OMKY/wzBcanWZK2wDpKa5MVd749wngM4pKmbhjVYxZzvZS00yvFUTMYki1L4
jG8ujgNH9wQE27oZLVAzusFmrZVllQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHhm
uwUKfnkeBE7gY6xwFb9qhQorMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRUM1RTkxOEM5MTQxMUVGOUUzMUVGQkE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt3tMA0GCSqGSIb3DQEB
CwUAA4IBAQCaB/hnDfVv7WSH9kzM/OyAMrpmxp7+PgDlJBmlm5+v/zUnOClWR0qn
5Y1hMw175ZA69XZRiblOtfbHLVHmqhFE0zCJJPb6tpCFQIIQJCjKGQSPrZwwujVZ
p1Sk/jMmqZC8VFyLYPHgR82pr2M6gnyjwr8XfKOvMEl8VMwN7jhCUgXrjWu8ybo1
pzRLZ54UdShz7XFs3kbC2EujPV3DzI03aSAQlbKXOUKiu3Gz8gyvUr7CQ/eDFyB0
iiVNzci2E4+RB7fpFolQwbfZVrM1YU2ubpHmDChke3t81mIVtAO92yIp+zmhGJU5
LQSYaRxLO9WXgdYxPs/ofbJZSKqvgIcR
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:35:52 2025 by rpki-client