Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6687F986C53511EF907759A0762E951A.roa
File: 6687F986C53511EF907759A0762E951A.roa (raw, json)
Hash identifier: 9QlLreRi4YFOGeEpRCDxGXWYGujHzHzOUnxWGXNsYo4=
Subject key identifier: 87:E3:A6:A1:A3:88:38:7F:E3:42:B2:2F:68:2B:5C:1A:4A:46:B8:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C11
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6687F986C53511EF907759A0762E951A.roa
Signing time: Sat 28 Dec 2024 16:04:22 +0000
ROA not before: Sat 28 Dec 2024 16:04:18 +0000
ROA not after: Fri 12 Dec 2025 16:04:18 +0000
asID: 984
IP address blocks: 154.204.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76817 (0x12c11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 16:04:18 2024 GMT
Not After : Dec 12 16:04:18 2025 GMT
Subject: CN=67702185-5b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:88:c9:a9:0c:11:2c:4f:7d:ad:6e:6e:fb:23:
c3:42:53:15:c5:75:0e:29:ae:cc:8a:dd:7c:2c:40:
91:ae:6f:41:c8:0b:d7:7c:3f:64:be:40:bb:d9:95:
45:76:d1:45:a7:11:52:a6:d6:6f:84:1b:5e:0c:03:
b7:50:9c:ff:16:dd:3e:fb:4a:be:14:28:77:f9:7f:
00:1c:2f:ce:b7:47:0d:4e:61:a2:9c:f4:8c:23:3d:
c9:c2:42:3c:92:39:cd:26:0b:1b:9b:48:23:33:58:
e0:78:a2:09:97:1a:fc:de:45:78:8a:70:cb:e0:00:
0f:35:b3:27:12:b7:09:c2:37:b4:b5:e1:52:28:01:
82:9f:f5:09:83:64:a5:23:b8:37:e8:31:7a:f8:ca:
7a:dc:4d:1f:5d:af:13:72:54:1c:4b:ba:44:bb:fa:
cb:15:6e:29:30:5d:2b:8e:78:15:4d:67:c9:ed:d8:
de:52:69:c9:01:f5:f7:f4:fa:d0:f7:63:79:b0:8a:
69:95:53:11:04:15:5c:2b:8e:92:ef:13:c0:4e:66:
14:aa:8b:af:21:9c:33:6c:77:5d:1c:d9:96:c0:b9:
79:54:2c:5e:cd:bd:6b:41:99:b4:df:a4:1a:35:f5:
07:d4:07:cb:78:86:c2:a3:c9:56:ea:ec:22:50:89:
25:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E3:A6:A1:A3:88:38:7F:E3:42:B2:2F:68:2B:5C:1A:4A:46:B8:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6687F986C53511EF907759A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.113.0/24
Signature Algorithm: sha256WithRSAEncryption
11:3c:5d:71:39:8e:97:b4:1a:6f:21:2b:a6:df:13:7e:49:2a:
37:03:2e:38:c8:f1:e6:6e:33:1a:a9:a6:96:55:e6:64:c1:f9:
b9:b7:35:6c:b1:15:59:7e:cb:90:d8:7d:f9:fe:c7:e7:3d:8a:
60:04:10:19:10:0d:1c:e3:7d:d4:1a:1d:08:89:be:40:9e:fb:
8f:20:5a:f5:3e:a0:ce:3b:7c:29:4a:f1:78:15:73:bd:b1:7c:
03:16:92:4c:c4:3b:41:b1:94:7a:2e:ae:7f:3b:b5:ac:97:02:
20:bc:d4:ca:d5:44:2f:e4:ba:09:95:78:34:99:c8:ba:2c:1f:
23:6f:88:b8:48:fb:2e:5b:5d:16:6a:2c:d7:66:eb:1c:59:be:
5e:ee:c5:62:3e:97:5d:ff:a4:30:05:2c:1c:c9:85:25:a4:23:
08:16:1b:4b:2f:68:d0:16:88:1c:e4:87:16:13:a1:b1:a6:92:
08:e9:ba:c7:97:0e:31:88:d8:81:92:cb:c2:c2:14:9a:bb:91:
a1:5f:b6:ba:9b:94:4e:fb:8c:a8:8b:91:41:50:9f:10:7c:3d:
3f:fc:26:8c:95:c4:bf:a5:c9:18:1f:5e:c7:3e:a9:d5:fd:d4:
6c:16:ec:24:6d:62:98:ab:3e:ae:d5:a5:b6:fb:92:f5:8c:75:
fd:1c:30:f7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASwRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTYwNDE4WhcNMjUxMjEyMTYwNDE4WjAYMRYw
FAYDVQQDEw02NzcwMjE4NS01YjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8IjJqQwRLE99rW5u+yPDQlMVxXUOKa7Mit18LECRrm9ByAvXfD9kvkC7
2ZVFdtFFpxFSptZvhBteDAO3UJz/Ft0++0q+FCh3+X8AHC/Ot0cNTmGinPSMIz3J
wkI8kjnNJgsbm0gjM1jgeKIJlxr83kV4inDL4AAPNbMnErcJwje0teFSKAGCn/UJ
g2SlI7g36DF6+Mp63E0fXa8TclQcS7pEu/rLFW4pMF0rjngVTWfJ7djeUmnJAfX3
9PrQ92N5sIpplVMRBBVcK46S7xPATmYUqouvIZwzbHddHNmWwLl5VCxezb1rQZm0
36QaNfUH1AfLeIbCo8lW6uwiUIklhQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIfj
pqGjiDh/40KyL2grXBpKRriGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82Njg3Rjk4NkM1MzUxMUVGOTA3NzU5QTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsxxMA0GCSqGSIb3DQEB
CwUAA4IBAQARPF1xOY6XtBpvISum3xN+SSo3Ay44yPHmbjMaqaaWVeZkwfm5tzVs
sRVZfsuQ2H35/sfnPYpgBBAZEA0c433UGh0Iib5AnvuPIFr1PqDOO3wpSvF4FXO9
sXwDFpJMxDtBsZR6Lq5/O7WslwIgvNTK1UQv5LoJlXg0mci6LB8jb4i4SPsuW10W
aizXZuscWb5e7sViPpdd/6QwBSwcyYUlpCMIFhtLL2jQFogc5IcWE6GxppII6brH
lw4xiNiBksvCwhSau5GhX7a6m5RO+4yoi5FBUJ8QfD0//CaMlcS/pckYH17HPqnV
/dRsFuwkbWKYqz6u1aW2+5L1jHX9HDD3
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:15:37 2025 by rpki-client