Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FAB81FAC25F11EF9B9D8193762E951A.roa
File: 1FAB81FAC25F11EF9B9D8193762E951A.roa (raw, json)
Hash identifier: Q0EjOh5pncFbaM4jyHJj9nzePvhL6NfBk6XjoJw2EIk=
Subject key identifier: 00:70:C7:4A:1B:54:28:FA:C6:6F:DA:51:E4:33:8E:43:77:4B:6D:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01239C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FAB81FAC25F11EF9B9D8193762E951A.roa
Signing time: Wed 25 Dec 2024 01:25:28 +0000
ROA not before: Wed 25 Dec 2024 01:25:24 +0000
ROA not after: Wed 10 Dec 2025 01:25:24 +0000
asID: 984
IP address blocks: 154.199.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74652 (0x1239c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:25:24 2024 GMT
Not After : Dec 10 01:25:24 2025 GMT
Subject: CN=676b5f08-6564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:88:a3:40:01:a5:b1:b8:15:96:05:34:1f:
66:02:b6:8f:80:56:88:95:e1:05:5a:9f:3a:16:f9:
41:f6:80:ab:ec:72:a7:23:ee:a8:a0:07:2b:0e:4d:
83:52:29:9b:a3:2a:55:35:ce:17:e7:cb:7f:f1:81:
7e:ce:55:4f:64:ba:58:e9:6a:d1:fa:b8:3b:c4:ee:
3f:97:56:79:49:34:96:b7:ca:f1:6b:87:06:fb:27:
77:11:67:c0:b4:70:32:d5:3f:b1:d0:eb:b2:49:31:
dc:54:72:22:16:6c:4b:91:ee:f2:4f:2f:8f:7b:27:
03:f7:43:f8:4f:8d:39:a8:1d:4d:86:da:7f:a7:6c:
ef:28:c6:a6:6b:ad:84:6c:5a:3e:91:6f:0f:72:07:
29:1b:21:c7:7c:fa:7e:fd:58:9b:61:6c:8b:27:c6:
72:2c:bc:fe:fc:ca:6a:6b:22:d9:c4:a2:3f:83:71:
a1:bf:70:36:2f:ac:85:63:a0:29:2c:f8:1d:93:42:
8f:e8:2c:df:b7:fd:6b:a5:f9:69:14:a5:06:1c:5a:
80:df:d4:f1:57:f0:54:83:fd:20:68:27:a5:c0:cf:
62:48:7c:93:cd:2f:fd:a5:38:a8:13:00:a9:72:13:
3b:cf:b6:c5:4b:eb:4b:70:aa:38:14:1f:03:f3:67:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:70:C7:4A:1B:54:28:FA:C6:6F:DA:51:E4:33:8E:43:77:4B:6D:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FAB81FAC25F11EF9B9D8193762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.91.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:f0:24:86:9c:ae:ab:1e:a0:bd:e4:5f:6e:ee:03:c5:34:1f:
9b:5f:bf:c8:21:fa:31:40:bc:3d:99:bf:19:df:ad:cc:0b:ad:
18:05:79:e2:a0:f7:ee:f0:d2:02:20:98:13:ac:c2:f9:4d:32:
6d:68:00:59:a7:9a:18:5a:1d:91:45:b6:5d:3f:cc:60:96:8a:
9c:2d:db:80:82:81:11:fd:96:c7:62:13:fb:28:4e:96:c3:2f:
9f:7e:2c:61:2e:88:a3:0a:47:46:5b:8a:a1:c0:46:cf:6f:87:
74:36:c4:34:21:52:cd:41:83:0d:68:ec:db:68:51:32:77:8a:
d2:fa:c5:89:25:a2:08:d7:02:da:09:8f:cc:26:53:0b:bc:27:
dc:7a:a6:47:e9:ef:55:f9:88:f2:22:26:4a:66:5f:35:f0:50:
48:ff:26:a0:05:2e:0b:50:e7:84:66:10:13:f0:64:71:78:49:
56:06:55:3d:ad:82:01:61:26:97:33:68:a0:b0:95:5e:25:85:
28:81:2a:e4:06:96:4b:f8:e1:15:78:64:46:f2:75:01:64:7a:
32:00:2f:df:cb:43:14:fd:fe:14:16:4a:3d:b0:43:5b:2a:b7:
c9:e9:df:70:ea:2e:a7:49:79:16:98:a8:a0:68:70:0a:c2:90:
38:cc:07:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASOcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDEyNTI0WhcNMjUxMjEwMDEyNTI0WjAYMRYw
FAYDVQQDEw02NzZiNWYwOC02NTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvISIo0ABpbG4FZYFNB9mAraPgFaIleEFWp86FvlB9oCr7HKnI+6ooAcr
Dk2DUimboypVNc4X58t/8YF+zlVPZLpY6WrR+rg7xO4/l1Z5STSWt8rxa4cG+yd3
EWfAtHAy1T+x0OuySTHcVHIiFmxLke7yTy+PeycD90P4T405qB1Nhtp/p2zvKMam
a62EbFo+kW8PcgcpGyHHfPp+/VibYWyLJ8ZyLLz+/MpqayLZxKI/g3Ghv3A2L6yF
Y6ApLPgdk0KP6Czft/1rpflpFKUGHFqA39TxV/BUg/0gaCelwM9iSHyTzS/9pTio
EwCpchM7z7bFS+tLcKo4FB8D82fzTwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFABw
x0obVCj6xm/aUeQzjkN3S21gMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRkFCODFGQUMyNUYxMUVGOUI5RDgxOTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsdbMA0GCSqGSIb3DQEB
CwUAA4IBAQDH8CSGnK6rHqC95F9u7gPFNB+bX7/IIfoxQLw9mb8Z363MC60YBXni
oPfu8NICIJgTrML5TTJtaABZp5oYWh2RRbZdP8xgloqcLduAgoER/ZbHYhP7KE6W
wy+ffixhLoijCkdGW4qhwEbPb4d0NsQ0IVLNQYMNaOzbaFEyd4rS+sWJJaII1wLa
CY/MJlMLvCfceqZH6e9V+YjyIiZKZl818FBI/yagBS4LUOeEZhAT8GRxeElWBlU9
rYIBYSaXM2igsJVeJYUogSrkBpZL+OEVeGRG8nUBZHoyAC/fy0MU/f4UFko9sENb
KrfJ6d9w6i6nSXkWmKigaHAKwpA4zAcl
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:18 2025 by rpki-client