Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/475D8EA4F17211EF8E4F9D7E762E951A.roa
File: 475D8EA4F17211EF8E4F9D7E762E951A.roa (raw, json)
Hash identifier: RCapC2B+vLVav2EDNQbyg3hYxzFORp15YL4twZvvQzk=
Subject key identifier: CC:64:B9:F8:DA:2B:0C:89:7B:95:99:6B:E5:D7:43:20:2C:40:22:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015AB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/475D8EA4F17211EF8E4F9D7E762E951A.roa
Signing time: Sat 22 Feb 2025 23:11:00 +0000
ROA not before: Sat 22 Feb 2025 23:10:56 +0000
ROA not after: Fri 04 Apr 2025 23:10:56 +0000
asID: 21859
IP address blocks: 154.83.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88753 (0x15ab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 22 23:10:56 2025 GMT
Not After : Apr 4 23:10:56 2025 GMT
Subject: CN=67ba5984-f169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:7d:72:46:e3:f5:bf:b7:48:2d:4f:6f:d9:
a4:b9:da:b1:59:a3:fb:ff:bd:55:43:b7:ba:f7:1c:
3e:e3:d8:8c:fa:35:5f:3b:13:24:c5:da:b8:4f:ca:
ba:7a:4d:4c:89:83:0b:49:94:f4:23:ae:ae:71:e8:
6d:82:59:70:62:88:7b:73:4d:2f:d6:14:65:dd:7b:
b7:f5:c8:e4:28:df:b2:c3:f6:a0:74:54:fa:72:3a:
c3:d0:bd:f3:06:c1:e1:89:10:71:a7:62:c1:14:1d:
af:e5:bb:28:45:02:ad:3c:14:09:4a:ff:3a:59:f2:
2d:0a:90:9a:77:3a:1b:7a:cd:df:f2:7b:93:9a:80:
d9:69:7c:52:8a:78:39:e3:b6:4a:02:b9:96:c7:46:
9c:9a:aa:d1:b4:08:05:3d:7f:bd:d3:8b:99:a1:e2:
91:39:e6:3c:f3:02:c3:79:e1:22:ed:c1:ab:8e:3a:
c0:b0:ff:a6:07:6f:13:d2:4d:3f:ef:62:35:30:a9:
41:5d:58:5b:68:0d:0e:8e:3d:f9:46:ef:83:25:2b:
52:6e:9a:f4:8f:f4:82:56:12:97:23:d5:0e:0b:9e:
29:09:f8:09:36:e5:50:96:b7:4f:95:29:bf:04:62:
a1:a0:21:0c:6d:04:90:5f:de:49:4e:75:1d:86:57:
ec:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:64:B9:F8:DA:2B:0C:89:7B:95:99:6B:E5:D7:43:20:2C:40:22:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/475D8EA4F17211EF8E4F9D7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.78.0/24
Signature Algorithm: sha256WithRSAEncryption
81:83:48:d5:85:51:f1:a7:e2:e3:a1:39:06:e8:6e:eb:4b:3d:
8b:f1:e2:31:71:a9:bb:7c:45:69:6a:c4:48:a6:68:58:cd:c6:
1a:a6:bf:0a:a4:e3:89:0e:3b:9b:36:f7:70:a0:3e:87:5c:ba:
57:ce:b7:5b:42:3f:51:36:e7:2a:49:e1:6c:11:94:1b:7a:1e:
9c:03:27:8f:e6:0d:4f:0e:c8:cd:80:7c:dc:89:cd:59:0d:8f:
13:9d:6f:3a:4f:03:99:50:b5:83:d8:95:cb:44:1d:6d:41:4a:
1f:7f:89:13:59:a2:e0:a2:50:e3:c9:4b:57:37:41:ae:ca:f6:
27:60:2d:4f:cc:f4:24:d8:a4:de:ec:e6:9d:e0:09:33:7d:b8:
0e:5a:3a:a4:87:a0:d0:78:7c:d7:ce:3a:dd:21:5b:00:95:31:
4d:7f:67:a3:24:00:40:22:f0:bf:c1:9a:8e:c5:30:9e:b0:3a:
ea:f7:67:12:d5:b2:a7:30:d5:ba:cf:73:18:fb:ae:4d:ea:1e:
d8:6b:13:b0:ce:07:af:72:51:a0:f2:77:d0:19:f9:05:81:6b:
92:e6:be:16:71:70:5b:64:a8:f1:2c:df:3b:68:63:a6:0b:f5:
eb:5c:1c:25:87:83:f3:ba:b1:4d:82:ef:ae:c1:9e:d4:ae:48:
f4:f2:03:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVqxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjIyMjMxMDU2WhcNMjUwNDA0MjMxMDU2WjAYMRYw
FAYDVQQDEw02N2JhNTk4NC1mMTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAueZ9ckbj9b+3SC1Pb9mkudqxWaP7/71VQ7e69xw+49iM+jVfOxMkxdq4
T8q6ek1MiYMLSZT0I66ucehtgllwYoh7c00v1hRl3Xu39cjkKN+yw/agdFT6cjrD
0L3zBsHhiRBxp2LBFB2v5bsoRQKtPBQJSv86WfItCpCadzobes3f8nuTmoDZaXxS
ing547ZKArmWx0acmqrRtAgFPX+904uZoeKROeY88wLDeeEi7cGrjjrAsP+mB28T
0k0/72I1MKlBXVhbaA0Ojj35Ru+DJStSbpr0j/SCVhKXI9UOC54pCfgJNuVQlrdP
lSm/BGKhoCEMbQSQX95JTnUdhlfsQwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMxk
ufjaKwyJe5WZa+XXQyAsQCLnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NzVEOEVBNEYxNzIxMUVGOEU0RjlEN0U3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlNOMA0GCSqGSIb3DQEB
CwUAA4IBAQCBg0jVhVHxp+LjoTkG6G7rSz2L8eIxcam7fEVpasRIpmhYzcYapr8K
pOOJDjubNvdwoD6HXLpXzrdbQj9RNucqSeFsEZQbeh6cAyeP5g1PDsjNgHzcic1Z
DY8TnW86TwOZULWD2JXLRB1tQUoff4kTWaLgolDjyUtXN0GuyvYnYC1PzPQk2KTe
7Oad4AkzfbgOWjqkh6DQeHzXzjrdIVsAlTFNf2ejJABAIvC/wZqOxTCesDrq92cS
1bKnMNW6z3MY+65N6h7YaxOwzgevclGg8nfQGfkFgWuS5r4WcXBbZKjxLN87aGOm
C/XrXBwlh4PzurFNgu+uwZ7Urkj08gMI
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:09 2025 by rpki-client