Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F5C0938D57111EFBFD84AA0762E951A.roa
File: 7F5C0938D57111EFBFD84AA0762E951A.roa (raw, json)
Hash identifier: lhwi9qBPX2BnTrB0RrEgSLPowE8aicRGzkAAwRLEA+A=
Subject key identifier: 4E:02:E4:C5:46:45:39:69:36:96:73:43:32:6D:E4:55:AE:03:56:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DAE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F5C0938D57111EFBFD84AA0762E951A.roa
Signing time: Sat 18 Jan 2025 07:54:52 +0000
ROA not before: Sat 18 Jan 2025 07:54:48 +0000
ROA not after: Sat 22 Feb 2025 07:54:48 +0000
asID: 400619
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81326 (0x13dae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 18 07:54:48 2025 GMT
Not After : Feb 22 07:54:48 2025 GMT
Subject: CN=678b5e4c-b250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cf:6d:c6:8e:d4:85:ce:d3:6c:47:6f:9c:89:
fe:dc:96:1e:5f:16:41:b6:24:4f:aa:a6:03:7d:98:
4b:7e:5a:53:38:32:55:50:55:a8:1e:d5:a1:e5:c0:
b7:05:14:d1:88:3b:5d:88:00:79:47:9c:7d:83:c5:
cd:4b:f5:be:5e:49:7e:e7:02:fa:77:ad:a0:ad:ae:
f9:2b:97:e9:f9:cd:2b:6c:9c:0e:8d:ae:8f:fd:48:
1e:64:2a:42:3d:9d:d1:2f:63:25:c2:3b:71:ff:1d:
cc:6e:03:d6:2d:5e:c5:b3:d2:dd:86:4b:12:2c:2c:
db:5a:19:6e:cb:6c:95:09:8a:1f:45:54:bb:55:73:
b1:52:59:c5:9e:70:18:91:ec:52:20:a2:53:0b:e6:
67:92:50:8a:7b:51:24:92:2c:89:0d:5a:8c:74:55:
05:60:79:cc:a3:5b:1c:5a:4f:9e:72:ff:22:8b:3e:
54:39:13:44:99:29:6d:7b:0d:6c:55:7a:56:b0:6f:
d8:13:81:13:46:b9:df:d5:7e:dd:0a:fc:7e:e0:76:
50:e5:75:91:b1:87:a1:7e:28:1c:7b:9b:9e:ee:92:
ef:cd:fc:12:93:0a:c4:b9:b7:23:1e:33:50:a4:17:
34:b2:53:4b:e7:4a:80:f1:cf:3e:55:d5:31:4e:89:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:02:E4:C5:46:45:39:69:36:96:73:43:32:6D:E4:55:AE:03:56:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F5C0938D57111EFBFD84AA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:cb:a2:c8:1a:fb:83:79:27:d3:a0:a2:f9:33:48:a3:97:0d:
66:0e:22:8b:76:37:79:19:c7:db:af:46:37:aa:5e:19:ab:9a:
7e:f7:ed:c3:99:17:6b:ef:84:aa:1f:e4:fa:9c:66:74:e9:f3:
96:58:b5:7c:03:f1:4d:14:1a:0a:89:99:3a:36:e0:5f:15:d0:
9d:42:d7:66:35:37:9e:c4:c9:0c:29:ac:7c:4f:40:e1:e0:6a:
06:10:6e:fc:b0:c6:ae:de:12:db:35:27:3d:a7:b7:b1:03:57:
45:da:c0:1c:a7:e3:38:7e:cd:1a:9d:c2:5f:f2:0e:88:25:b6:
11:5e:f2:b7:c4:51:2a:59:f3:bc:83:c4:9f:b7:b9:4d:35:8c:
49:a7:0c:cf:59:72:cb:20:a6:8b:a6:f2:c7:ed:07:a7:f6:03:
b4:2d:3b:de:6c:ce:df:60:9d:77:ca:09:e3:6e:ca:ea:0e:98:
5d:46:5f:02:68:0f:61:e8:96:7f:51:dd:d7:52:fa:51:c7:37:
0e:4c:b6:a9:c1:d3:1b:b7:52:3a:b0:ec:3a:75:34:06:87:04:
79:61:39:93:d6:fb:de:1b:b7:20:02:f1:4b:f8:7e:c8:d1:e2:
93:a1:52:7d:f7:6c:21:4a:cf:7b:0d:9b:36:68:15:79:12:0a:
c1:b7:2c:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT2uMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE4MDc1NDQ4WhcNMjUwMjIyMDc1NDQ4WjAYMRYw
FAYDVQQDEw02NzhiNWU0Yy1iMjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3c9txo7Uhc7TbEdvnIn+3JYeXxZBtiRPqqYDfZhLflpTODJVUFWoHtWh
5cC3BRTRiDtdiAB5R5x9g8XNS/W+Xkl+5wL6d62gra75K5fp+c0rbJwOja6P/Uge
ZCpCPZ3RL2Mlwjtx/x3MbgPWLV7Fs9LdhksSLCzbWhluy2yVCYofRVS7VXOxUlnF
nnAYkexSIKJTC+ZnklCKe1EkkiyJDVqMdFUFYHnMo1scWk+ecv8iiz5UORNEmSlt
ew1sVXpWsG/YE4ETRrnf1X7dCvx+4HZQ5XWRsYehfigce5ue7pLvzfwSkwrEubcj
HjNQpBc0slNL50qA8c8+VdUxTonK4QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE4C
5MVGRTlpNpZzQzJt5FWuA1ZoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RjVDMDkzOEQ1NzExMUVGQkZEODRBQTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml8YMA0GCSqGSIb3DQEB
CwUAA4IBAQChy6LIGvuDeSfToKL5M0ijlw1mDiKLdjd5Gcfbr0Y3ql4Zq5p+9+3D
mRdr74SqH+T6nGZ06fOWWLV8A/FNFBoKiZk6NuBfFdCdQtdmNTeexMkMKax8T0Dh
4GoGEG78sMau3hLbNSc9p7exA1dF2sAcp+M4fs0ancJf8g6IJbYRXvK3xFEqWfO8
g8Sft7lNNYxJpwzPWXLLIKaLpvLH7Qen9gO0LTvebM7fYJ13ygnjbsrqDphdRl8C
aA9h6JZ/Ud3XUvpRxzcOTLapwdMbt1I6sOw6dTQGhwR5YTmT1vveG7cgAvFL+H7I
0eKToVJ992whSs97DZs2aBV5EgrBtyy5
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:15 2025 by rpki-client