Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9221821ACF2611EF95567A6B762E951A.roa
File: 9221821ACF2611EF95567A6B762E951A.roa (raw, json)
Hash identifier: AAWVv2FmvYfB6S+7XKmQsoK2iQqQxv5Sm00uY/zyV44=
Subject key identifier: AA:77:CC:C4:23:C2:C6:36:26:B7:22:4E:9F:5E:A5:46:FD:83:55:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9221821ACF2611EF95567A6B762E951A.roa
Signing time: Fri 10 Jan 2025 07:43:24 +0000
ROA not before: Fri 10 Jan 2025 07:43:20 +0000
ROA not after: Fri 16 Jan 2026 07:43:20 +0000
asID: 138965
IP address blocks: 154.223.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80301 (0x139ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 07:43:20 2025 GMT
Not After : Jan 16 07:43:20 2026 GMT
Subject: CN=6780cf9c-c0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:32:f0:cb:44:6d:52:05:2d:d3:5d:ee:67:
a9:81:50:79:33:f3:fa:68:0c:53:3f:0b:69:93:55:
24:bb:6a:fc:e2:88:06:ef:86:3c:66:22:ac:1a:13:
2c:14:c4:9f:c3:1e:9c:76:7e:f5:71:10:1b:3b:26:
48:dc:28:61:eb:d9:26:9a:68:be:3e:92:11:fb:9c:
6c:05:d6:23:3a:17:07:74:67:b0:d6:b2:fc:6a:f2:
f4:a2:86:12:e1:9b:c9:16:e9:b9:de:d3:ca:8b:a8:
34:1c:b4:d1:1b:e0:75:cb:bd:60:78:66:29:2c:ce:
e7:a6:3b:72:25:08:b0:07:03:4b:57:98:74:e6:fd:
63:97:05:12:91:02:a8:d5:b0:cd:57:e2:3a:56:5d:
c6:7d:ac:64:5a:20:fb:0a:7f:1a:66:94:f4:16:30:
c4:d4:a4:4a:94:00:14:0b:75:70:47:b6:eb:d3:a6:
58:1a:ec:63:a3:a3:f1:76:78:81:77:21:41:1f:d3:
af:25:01:93:f8:4b:ac:dc:fc:95:bd:42:6f:e9:97:
9e:2a:a0:c2:d4:bb:6e:b5:6f:ff:a2:8d:3e:19:95:
bf:8a:3a:c8:47:03:f3:b3:35:84:3a:0d:0a:19:88:
5e:d4:48:02:00:d6:af:16:f2:8b:28:c1:e1:6a:a6:
da:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:77:CC:C4:23:C2:C6:36:26:B7:22:4E:9F:5E:A5:46:FD:83:55:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9221821ACF2611EF95567A6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.8.0/21
Signature Algorithm: sha256WithRSAEncryption
d1:63:5e:79:8c:c9:f2:d5:d8:f7:c3:2c:bf:5f:7c:0a:b6:66:
fe:77:f2:59:c4:6e:0e:6a:5b:d7:6f:3c:79:6f:41:24:18:44:
d4:e2:88:6b:15:71:4e:3a:84:8e:59:0c:de:29:2c:a1:37:d7:
97:b6:13:37:39:f0:1d:0f:a7:76:aa:6b:05:9d:cf:7a:24:fb:
ab:39:e2:53:a4:ce:9a:11:c4:28:f4:c3:9e:16:93:ef:79:83:
ee:a6:17:14:a5:22:6e:d5:0b:3c:1e:2f:da:cd:86:e9:87:1d:
9c:df:36:8c:4f:03:97:22:a7:b8:99:1f:c1:92:54:3a:4c:6c:
c3:2f:d7:82:20:92:0d:8d:c1:e5:fd:ec:a1:d1:3f:92:4c:f9:
d9:40:0c:60:70:7e:42:19:e2:d6:fa:30:1d:24:f1:8d:d5:44:
0c:51:1c:01:f6:b2:32:e6:ee:15:c0:94:46:60:f9:34:01:e8:
36:81:5c:8a:bc:b6:4a:a3:e9:82:3e:f2:04:f0:1f:e5:a1:ef:
8b:07:d1:1b:75:0a:85:93:ca:7a:42:29:a3:a5:99:d8:23:4d:
67:b4:f3:36:ef:0b:8d:9b:00:ed:bd:38:73:b2:fa:1d:c7:c0:
b6:bd:62:f8:69:a1:63:ac:35:95:a6:5e:dc:7f:be:63:75:ab:
eb:bd:3a:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATmtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTEwMDc0MzIwWhcNMjYwMTE2MDc0MzIwWjAYMRYw
FAYDVQQDEw02NzgwY2Y5Yy1jMGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtbEy8MtEbVIFLdNd7mepgVB5M/P6aAxTPwtpk1Uku2r84ogG74Y8ZiKs
GhMsFMSfwx6cdn71cRAbOyZI3Chh69kmmmi+PpIR+5xsBdYjOhcHdGew1rL8avL0
ooYS4ZvJFum53tPKi6g0HLTRG+B1y71geGYpLM7npjtyJQiwBwNLV5h05v1jlwUS
kQKo1bDNV+I6Vl3GfaxkWiD7Cn8aZpT0FjDE1KRKlAAUC3VwR7br06ZYGuxjo6Px
dniBdyFBH9OvJQGT+Eus3PyVvUJv6ZeeKqDC1LtutW//oo0+GZW/ijrIRwPzszWE
Og0KGYhe1EgCANavFvKLKMHhaqbawwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKp3
zMQjwsY2JrciTp9epUb9g1XeMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MjIxODIxQUNGMjYxMUVGOTU1NjdBNkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmt8IMA0GCSqGSIb3DQEB
CwUAA4IBAQDRY155jMny1dj3wyy/X3wKtmb+d/JZxG4OalvXbzx5b0EkGETU4ohr
FXFOOoSOWQzeKSyhN9eXthM3OfAdD6d2qmsFnc96JPurOeJTpM6aEcQo9MOeFpPv
eYPuphcUpSJu1Qs8Hi/azYbphx2c3zaMTwOXIqe4mR/BklQ6TGzDL9eCIJINjcHl
/eyh0T+STPnZQAxgcH5CGeLW+jAdJPGN1UQMURwB9rIy5u4VwJRGYPk0Aeg2gVyK
vLZKo+mCPvIE8B/loe+LB9EbdQqFk8p6QimjpZnYI01ntPM27wuNmwDtvThzsvod
x8C2vWL4aaFjrDWVpl7cf75jdavrvTo8
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:23 2025 by rpki-client