Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B82F432BEDE11EFB38F3B71762E951A.roa
File: 8B82F432BEDE11EFB38F3B71762E951A.roa (raw, json)
Hash identifier: uqqTljYavbneWCDh0GIZf7d4Ote8bs8pBPmcc0nFUNA=
Subject key identifier: 4D:02:19:17:08:34:B4:30:24:F4:19:AC:A2:E1:D0:FC:3E:EC:68:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B82F432BEDE11EFB38F3B71762E951A.roa
Signing time: Fri 20 Dec 2024 14:27:30 +0000
ROA not before: Fri 20 Dec 2024 14:27:27 +0000
ROA not after: Wed 25 Jun 2025 14:27:27 +0000
asID: 400619
IP address blocks: 154.84.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73034 (0x11d4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 14:27:27 2024 GMT
Not After : Jun 25 14:27:27 2025 GMT
Subject: CN=67657ed2-36c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:94:81:73:7e:38:4e:46:3d:aa:ba:a7:52:
5f:5b:f9:55:8a:e1:53:cb:cf:17:ff:9c:e5:c0:f8:
18:10:98:ea:eb:df:a9:b6:2b:75:60:c7:91:e4:ab:
1e:b9:05:71:a1:a9:cf:b5:52:0c:50:44:88:38:2a:
f0:96:e5:a9:99:d8:18:f6:e8:df:b6:5b:4a:31:2d:
fd:5d:3f:2f:b6:98:37:f3:f3:23:e7:50:0c:20:bb:
bb:46:ca:34:7d:74:37:a4:07:3c:d3:4a:ae:ef:24:
04:25:0b:a7:80:17:1e:81:78:d8:26:55:6f:90:82:
e9:ac:44:94:46:a0:62:79:f6:94:3c:7d:08:85:c6:
32:ff:33:86:0d:46:41:66:fb:88:bf:27:9d:db:77:
b6:41:b8:b0:e3:d3:87:69:c0:a1:b1:4f:55:03:87:
2d:39:46:a9:e2:0f:71:66:ce:af:f9:86:4a:f6:ee:
4a:e2:9e:f6:24:f1:04:12:cf:44:3e:fc:41:d0:7e:
0b:d2:b6:89:8c:de:1a:13:d0:9c:51:fa:14:73:24:
9a:45:08:f0:ae:3d:b7:aa:2d:de:ee:5f:81:7d:f8:
01:fb:15:2d:ca:8a:43:be:c6:c2:81:71:9c:16:9d:
2c:1c:75:3a:e4:b8:4a:5d:fe:3d:98:57:e6:c2:4d:
4e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:02:19:17:08:34:B4:30:24:F4:19:AC:A2:E1:D0:FC:3E:EC:68:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B82F432BEDE11EFB38F3B71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.32.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:e3:ab:23:d5:ea:b3:16:e1:59:87:90:ea:09:ef:08:e1:c3:
17:69:97:a0:f5:6b:f4:f4:d2:14:3b:b3:ff:ae:96:db:20:6d:
a2:eb:6e:d3:96:5a:b7:67:14:98:6c:0c:24:5a:ec:d7:e9:06:
78:a1:d8:0a:f1:a7:97:90:f7:34:bb:7a:0c:92:f9:83:2d:ef:
e3:7a:fa:8b:71:83:88:b1:a5:6d:b6:88:5c:e2:a7:72:73:1b:
c3:34:23:c7:ab:af:0a:13:e5:2f:89:3b:c2:46:55:76:f2:4e:
11:0e:2d:3c:f6:67:66:2f:28:a4:76:d2:c7:b8:cd:35:e2:0a:
b7:8e:b5:d9:8b:77:24:93:55:20:03:0c:ac:09:2f:74:4a:37:
9c:84:31:54:ab:08:7d:9c:14:fd:14:7f:f4:e1:2d:d5:c4:aa:
43:19:dc:05:9c:81:c7:c1:da:40:45:54:da:d6:f4:5d:90:7f:
57:f5:c0:ab:15:30:b8:59:d8:54:a2:aa:bb:dd:15:d3:56:8c:
02:19:c8:eb:01:5d:81:e0:0c:d6:b7:19:87:f0:dd:33:07:92:
f6:d2:3b:5d:38:a2:3c:fd:7b:82:96:b4:6f:7c:af:ef:98:d4:
0f:ab:fb:ef:f4:c9:ac:18:44:80:42:2d:7c:0f:3b:99:31:d5:
79:39:cb:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR1KMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIwMTQyNzI3WhcNMjUwNjI1MTQyNzI3WjAYMRYw
FAYDVQQDEw02NzY1N2VkMi0zNmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqUOUgXN+OE5GPaq6p1JfW/lViuFTy88X/5zlwPgYEJjq69+ptit1YMeR
5KseuQVxoanPtVIMUESIOCrwluWpmdgY9ujftltKMS39XT8vtpg38/Mj51AMILu7
Rso0fXQ3pAc800qu7yQEJQungBcegXjYJlVvkILprESURqBiefaUPH0IhcYy/zOG
DUZBZvuIvyed23e2Qbiw49OHacChsU9VA4ctOUap4g9xZs6v+YZK9u5K4p72JPEE
Es9EPvxB0H4L0raJjN4aE9CcUfoUcySaRQjwrj23qi3e7l+BffgB+xUtyopDvsbC
gXGcFp0sHHU65LhKXf49mFfmwk1OSwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE0C
GRcINLQwJPQZrKLh0Pw+7GiRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QjgyRjQzMkJFREUxMUVGQjM4RjNCNzE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlQgMA0GCSqGSIb3DQEB
CwUAA4IBAQBs46sj1eqzFuFZh5DqCe8I4cMXaZeg9Wv09NIUO7P/rpbbIG2i627T
llq3ZxSYbAwkWuzX6QZ4odgK8aeXkPc0u3oMkvmDLe/jevqLcYOIsaVttohc4qdy
cxvDNCPHq68KE+UviTvCRlV28k4RDi089mdmLyikdtLHuM014gq3jrXZi3ckk1Ug
AwysCS90SjechDFUqwh9nBT9FH/04S3VxKpDGdwFnIHHwdpARVTa1vRdkH9X9cCr
FTC4WdhUoqq73RXTVowCGcjrAV2B4AzWtxmH8N0zB5L20jtdOKI8/XuClrRvfK/v
mNQPq/vv9MmsGESAQi18DzuZMdV5Ocv5
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:47:13 2025 by rpki-client