Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DADEBF8FF1E11EF998C3348762E951A.roa
File: 6DADEBF8FF1E11EF998C3348762E951A.roa (raw, json)
Hash identifier: E6eZ6NGN7w9Dl8Lr+QQ4VXsY0CywKeZ/lHLKIockefc=
Subject key identifier: 87:7A:BE:7B:E7:86:94:B1:41:E5:40:60:2F:A0:46:EC:D3:6D:C4:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DADEBF8FF1E11EF998C3348762E951A.roa
Signing time: Wed 12 Mar 2025 08:46:03 +0000
ROA not before: Wed 12 Mar 2025 08:45:59 +0000
ROA not after: Wed 16 Apr 2025 08:45:59 +0000
asID: 394432
IP address blocks: 154.196.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95161 (0x173b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 08:45:59 2025 GMT
Not After : Apr 16 08:45:59 2025 GMT
Subject: CN=67d149cb-c9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:5c:aa:80:d3:d1:71:c5:d2:3f:46:c5:63:
9c:b8:70:ad:72:27:c9:d5:d5:d5:32:c5:18:cd:a6:
e7:9c:67:c1:5b:db:da:5d:41:88:26:cb:2d:f9:55:
6b:40:3d:4a:6f:e6:9d:45:2b:3e:81:21:82:c4:d1:
79:6a:c4:91:fa:c5:8c:34:aa:c8:d9:ed:6d:ee:ab:
c7:bd:c6:ef:93:86:62:5b:24:49:ee:d0:f9:a5:67:
10:91:eb:0e:7a:a4:03:54:b4:37:82:ee:93:d5:c3:
8d:e0:cc:d7:9e:2f:06:bc:71:95:0d:aa:25:6d:9f:
ef:e9:3b:e4:3d:cd:5c:34:94:e9:d7:6d:42:7d:db:
8b:3e:4b:fe:5e:2f:ac:6c:b5:3c:e9:9b:a2:5b:36:
b4:81:71:dd:ed:4e:72:49:ff:56:1d:0c:20:e9:2b:
ce:72:4d:eb:ae:bb:36:13:e5:7d:3b:4b:08:6c:5e:
18:36:ae:1b:87:47:60:cf:18:c0:01:78:dc:83:c9:
60:7f:48:cb:28:5c:c7:cc:49:d4:fa:90:7b:75:21:
6d:17:fd:93:32:2c:ac:7f:b4:10:3a:ef:01:73:74:
23:80:3c:15:89:fb:ea:36:13:ae:c1:e4:e9:70:db:
5e:03:21:bd:92:3a:3e:c2:1b:09:03:4a:08:ab:a4:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7A:BE:7B:E7:86:94:B1:41:E5:40:60:2F:A0:46:EC:D3:6D:C4:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DADEBF8FF1E11EF998C3348762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.192.0/20
Signature Algorithm: sha256WithRSAEncryption
38:d9:96:0f:ed:6d:b9:86:34:c9:e6:20:ba:f9:d6:08:03:82:
da:e2:ef:34:b1:9b:5a:7c:d2:6e:e8:d2:f2:18:90:78:cd:34:
56:73:5a:a1:16:42:11:fc:bb:68:7d:5a:c0:9f:80:21:e2:82:
1d:20:4d:13:79:b2:07:f4:ef:13:1d:51:b2:f4:a0:1c:59:0a:
f5:67:4e:e7:e1:28:fe:be:9b:5b:54:34:b0:19:c8:c7:b9:e0:
80:2c:ee:20:18:84:22:15:0d:aa:a2:ea:46:bf:71:11:9f:77:
04:87:5e:24:25:f3:71:be:1b:e6:fc:58:07:0a:a7:00:54:93:
ea:99:5d:df:ef:30:7f:e2:f6:d6:aa:82:fb:0b:66:96:5a:88:
db:76:b8:28:e1:39:33:ea:96:cf:32:5a:d9:51:53:52:20:55:
5d:9c:3c:38:01:1d:3b:85:4b:da:d7:73:4e:fb:ef:6c:61:b4:
29:23:99:a0:56:3f:75:38:cc:87:05:47:41:45:43:ab:4d:bd:
f2:82:cb:44:33:29:28:93:98:2f:bf:02:2b:18:ee:ca:9f:f7:
1a:dd:f2:81:77:aa:f8:e6:1c:f6:67:33:0c:c7:ac:56:9e:4a:
1a:c1:b7:49:bb:18:96:53:40:de:c2:fc:88:4e:1c:17:04:0a:
05:f8:f3:2e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXO5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzEyMDg0NTU5WhcNMjUwNDE2MDg0NTU5WjAYMRYw
FAYDVQQDEw02N2QxNDljYi1jOWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAql1cqoDT0XHF0j9GxWOcuHCtcifJ1dXVMsUYzabnnGfBW9vaXUGIJsst
+VVrQD1Kb+adRSs+gSGCxNF5asSR+sWMNKrI2e1t7qvHvcbvk4ZiWyRJ7tD5pWcQ
kesOeqQDVLQ3gu6T1cON4MzXni8GvHGVDaolbZ/v6TvkPc1cNJTp121CfduLPkv+
Xi+sbLU86ZuiWza0gXHd7U5ySf9WHQwg6SvOck3rrrs2E+V9O0sIbF4YNq4bh0dg
zxjAAXjcg8lgf0jLKFzHzEnU+pB7dSFtF/2TMiysf7QQOu8Bc3QjgDwVifvqNhOu
weTpcNteAyG9kjo+whsJA0oIq6RJPQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFId6
vnvnhpSxQeVAYC+gRuzTbcRdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82REFERUJGOEZGMUUxMUVGOTk4QzMzNDg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmsTAMA0GCSqGSIb3DQEB
CwUAA4IBAQA42ZYP7W25hjTJ5iC6+dYIA4La4u80sZtafNJu6NLyGJB4zTRWc1qh
FkIR/LtofVrAn4Ah4oIdIE0TebIH9O8THVGy9KAcWQr1Z07n4Sj+vptbVDSwGcjH
ueCALO4gGIQiFQ2qoupGv3ERn3cEh14kJfNxvhvm/FgHCqcAVJPqmV3f7zB/4vbW
qoL7C2aWWojbdrgo4Tkz6pbPMlrZUVNSIFVdnDw4AR07hUva13NO++9sYbQpI5mg
Vj91OMyHBUdBRUOrTb3ygstEMykok5gvvwIrGO7Kn/ca3fKBd6r45hz2ZzMMx6xW
nkoawbdJuxiWU0DewvyIThwXBAoF+PMu
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:28:48 2025 by rpki-client