Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D179D2CC5FA11EF9BD46481762E951A.roa
File: 6D179D2CC5FA11EF9BD46481762E951A.roa (raw, json)
Hash identifier: n23g4wQdbov9mzK/Rol/cFQvoSeChl6MB+5HWWMFYTA=
Subject key identifier: 6B:D9:CE:D5:68:8D:78:AF:6E:57:31:44:EB:BB:E6:71:B2:1D:1F:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D179D2CC5FA11EF9BD46481762E951A.roa
Signing time: Sun 29 Dec 2024 15:34:43 +0000
ROA not before: Sun 29 Dec 2024 15:34:40 +0000
ROA not after: Sun 12 Dec 2027 15:34:40 +0000
asID: 17561
IP address blocks: 154.216.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77350 (0x12e26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 15:34:40 2024 GMT
Not After : Dec 12 15:34:40 2027 GMT
Subject: CN=67716c13-d85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:66:44:c5:0e:ed:8b:2b:70:79:c8:0e:0e:
17:cb:5b:31:39:ba:11:a5:f0:b7:27:d2:83:46:d0:
ca:4d:d5:ff:b1:8d:d2:94:ef:0b:df:f0:56:c7:18:
ed:7b:fa:6e:d7:fc:d5:28:75:8a:af:fa:2c:62:20:
43:60:8d:a9:d6:1d:e3:4e:17:16:24:51:ab:48:b6:
5e:82:8f:16:e9:df:f5:70:9f:59:23:a8:26:35:34:
08:20:bf:02:27:c9:e1:c2:b1:6f:60:96:54:a8:f6:
4f:cc:ec:6d:09:ec:c0:77:97:5c:61:de:54:e3:84:
a5:36:48:d2:fb:1b:c8:f6:b8:8d:2e:4e:1e:79:17:
6f:bb:ff:74:c6:09:d7:b6:64:bd:26:c5:51:1e:94:
a7:d7:bd:70:80:95:79:b4:22:e1:8f:52:f6:88:f0:
7b:93:16:cd:c9:42:4e:34:67:d8:42:88:c3:c5:3b:
e3:03:f9:7d:93:cc:7c:e4:5f:35:06:8b:a1:0e:8f:
ea:74:1c:46:ca:4d:e4:61:ba:27:4a:b6:b1:00:ec:
9c:4f:4d:d5:59:5a:79:10:90:27:eb:7d:c5:42:aa:
bd:05:27:03:9e:e1:5c:ef:f9:04:e8:60:77:f4:cf:
6a:85:2a:c6:40:82:88:d4:7d:1f:99:3d:ef:b9:b3:
3f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D9:CE:D5:68:8D:78:AF:6E:57:31:44:EB:BB:E6:71:B2:1D:1F:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D179D2CC5FA11EF9BD46481762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.22.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e7:cf:3f:d0:db:d6:7d:0a:85:55:8b:51:21:76:85:96:fa:
dd:c2:4a:09:19:96:fe:84:f3:12:df:f9:53:3f:fb:66:69:30:
09:7b:dd:22:99:5c:fe:23:62:d9:18:fc:59:95:0b:37:78:9b:
72:e8:81:b9:d9:cd:50:d7:71:e4:78:87:a3:37:34:06:fe:8d:
7f:54:55:38:70:c1:9c:93:d5:de:00:02:fe:7b:b1:6c:60:e1:
5b:5d:4a:87:79:b9:df:e3:3d:18:0b:0e:c6:75:21:b5:54:15:
5f:d3:d7:d3:c8:a8:bd:d9:f9:1f:07:40:10:34:c0:b6:42:39:
04:4c:86:02:de:9a:00:2f:cc:bf:f8:bf:f7:4e:5d:f4:a3:54:
ac:a1:b4:1b:a0:a7:fa:73:d5:0f:46:1d:1c:5d:9d:fd:a7:6c:
50:19:e5:62:7d:df:24:47:49:ff:94:cd:57:0c:2a:97:84:1a:
ea:4a:3b:25:cd:b5:9e:8b:39:83:16:5a:f0:65:1a:b7:b2:e6:
6f:ef:4a:e0:c7:47:41:fd:f6:04:18:bd:50:92:64:a1:3c:32:
ae:8f:d6:f4:cc:fc:18:23:5b:01:de:0e:b7:42:ef:25:4b:78:
a6:2e:19:33:76:2f:26:ad:e3:c8:2a:51:93:b1:c7:35:ef:35:
85:e8:71:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS4mMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTUzNDQwWhcNMjcxMjEyMTUzNDQwWjAYMRYw
FAYDVQQDEw02NzcxNmMxMy1kODVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuTJmRMUO7YsrcHnIDg4Xy1sxOboRpfC3J9KDRtDKTdX/sY3SlO8L3/BW
xxjte/pu1/zVKHWKr/osYiBDYI2p1h3jThcWJFGrSLZego8W6d/1cJ9ZI6gmNTQI
IL8CJ8nhwrFvYJZUqPZPzOxtCezAd5dcYd5U44SlNkjS+xvI9riNLk4eeRdvu/90
xgnXtmS9JsVRHpSn171wgJV5tCLhj1L2iPB7kxbNyUJONGfYQojDxTvjA/l9k8x8
5F81BouhDo/qdBxGyk3kYbonSraxAOycT03VWVp5EJAn633FQqq9BScDnuFc7/kE
6GB39M9qhSrGQIKI1H0fmT3vubM/hQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGvZ
ztVojXivblcxROu75nGyHR9tMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RDE3OUQyQ0M1RkExMUVGOUJENDY0ODE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtgWMA0GCSqGSIb3DQEB
CwUAA4IBAQAS588/0NvWfQqFVYtRIXaFlvrdwkoJGZb+hPMS3/lTP/tmaTAJe90i
mVz+I2LZGPxZlQs3eJty6IG52c1Q13HkeIejNzQG/o1/VFU4cMGck9XeAAL+e7Fs
YOFbXUqHebnf4z0YCw7GdSG1VBVf09fTyKi92fkfB0AQNMC2QjkETIYC3poAL8y/
+L/3Tl30o1SsobQboKf6c9UPRh0cXZ39p2xQGeVifd8kR0n/lM1XDCqXhBrqSjsl
zbWeizmDFlrwZRq3suZv70rgx0dB/fYEGL1QkmShPDKuj9b0zPwYI1sB3g63Qu8l
S3imLhkzdi8mrePIKlGTscc17zWF6HEJ
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:19:24 2025 by rpki-client