Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AC0F63CC3D511EF85453B62762E951A.roa
File: 9AC0F63CC3D511EF85453B62762E951A.roa (raw, json)
Hash identifier: G9wO2Uwwj3DltRdTsOOlWWC+WvRPyKxNQ4ElNvC7dVE=
Subject key identifier: E7:7E:81:B2:98:77:B6:8B:11:34:E1:83:97:04:BB:12:97:2D:CB:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01286E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AC0F63CC3D511EF85453B62762E951A.roa
Signing time: Thu 26 Dec 2024 22:06:06 +0000
ROA not before: Thu 26 Dec 2024 22:06:03 +0000
ROA not after: Sun 12 Dec 2027 22:06:03 +0000
asID: 17561
IP address blocks: 154.84.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75886 (0x1286e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:06:03 2024 GMT
Not After : Dec 12 22:06:03 2027 GMT
Subject: CN=676dd34e-ecf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:18:90:ad:0b:39:cd:da:0a:34:5b:74:89:
f2:b0:34:1d:7b:87:d3:63:42:1c:a6:00:6e:64:d0:
f6:19:8a:cd:7f:7e:f1:06:37:9e:55:4b:43:b2:80:
c0:55:43:0f:34:ab:44:1f:f8:7d:47:92:24:23:d4:
91:a9:7b:da:de:d7:9a:06:04:36:dc:cb:fc:ec:60:
74:c6:6e:bd:be:b6:26:a6:46:cb:d6:87:3a:5f:a9:
cc:91:66:54:d3:00:4e:bf:f6:de:1a:7e:05:36:5d:
d1:83:ee:59:ce:e7:93:ba:27:a6:fc:3e:32:04:40:
fa:f1:38:2a:7c:7c:56:59:e7:5b:a3:83:33:7c:3c:
4b:9d:a9:28:40:e1:e8:49:4e:a1:3f:ef:2b:75:d0:
d1:fd:5e:01:5a:2e:d3:35:65:8d:3f:93:52:cd:ee:
11:82:e9:7c:57:f5:f4:ca:fc:3f:8c:e3:0b:3b:32:
7b:c4:2e:69:92:f1:b1:63:49:ca:59:ae:f1:de:c5:
71:74:e3:eb:f3:57:6b:58:12:fc:74:b6:c1:27:58:
48:cb:03:1d:a1:61:ee:57:a0:2d:cb:ae:30:4f:b6:
12:e8:8e:d1:25:6c:2a:f5:56:70:6a:d4:e6:ad:e7:
39:08:db:44:d9:87:da:cd:c2:7e:96:a2:a2:f4:3a:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7E:81:B2:98:77:B6:8B:11:34:E1:83:97:04:BB:12:97:2D:CB:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AC0F63CC3D511EF85453B62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.129.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ca:35:1f:6c:0b:3e:7a:77:67:d1:2a:d2:e4:ac:38:d1:69:
ea:ae:2e:7d:ec:b9:d1:ca:8d:2e:51:3f:94:35:3b:e2:4e:0e:
b0:bf:b8:ca:9e:d3:35:1f:e8:a6:01:12:43:87:8f:bc:35:42:
06:23:de:38:34:12:74:a4:21:97:b4:5f:70:82:28:04:9d:a0:
37:47:be:40:51:ac:2e:b0:46:5d:37:46:49:fa:93:44:a4:f7:
18:3a:43:80:75:56:4f:96:01:47:d1:25:84:91:ab:3e:b2:20:
00:5a:71:98:d6:2b:92:bf:9d:b4:1f:72:5f:66:16:d8:b0:ee:
4b:19:f0:2e:85:d5:c7:e4:7c:62:43:bd:64:90:65:76:e4:9d:
71:79:8d:82:30:9b:73:e9:9e:ae:a3:d0:6d:9a:26:91:d4:3c:
79:70:29:6d:b4:b6:12:40:39:e3:64:ed:eb:df:84:15:1c:04:
78:0e:22:ad:8a:0c:91:5d:1c:70:db:59:d6:0a:09:97:d4:4b:
9d:6c:51:43:b2:32:56:fe:b3:00:21:ad:77:75:2d:53:3d:30:
c3:e1:96:8f:f2:b7:b1:76:dc:f0:bb:b7:f4:85:b3:63:d1:8d:
5c:94:60:1a:db:8e:35:9c:7c:0a:84:99:75:84:f7:f4:be:ad:
1d:8d:94:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAShuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjIwNjAzWhcNMjcxMjEyMjIwNjAzWjAYMRYw
FAYDVQQDEw02NzZkZDM0ZS1lY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs8sYkK0LOc3aCjRbdInysDQde4fTY0IcpgBuZND2GYrNf37xBjeeVUtD
soDAVUMPNKtEH/h9R5IkI9SRqXva3teaBgQ23Mv87GB0xm69vrYmpkbL1oc6X6nM
kWZU0wBOv/beGn4FNl3Rg+5ZzueTuiem/D4yBED68TgqfHxWWedbo4MzfDxLnako
QOHoSU6hP+8rddDR/V4BWi7TNWWNP5NSze4Rgul8V/X0yvw/jOMLOzJ7xC5pkvGx
Y0nKWa7x3sVxdOPr81drWBL8dLbBJ1hIywMdoWHuV6Aty64wT7YS6I7RJWwq9VZw
atTmrec5CNtE2YfazcJ+lqKi9DqC2wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOd+
gbKYd7aLETThg5cEuxKXLctzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QUMwRjYzQ0MzRDUxMUVGODU0NTNCNjI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlSBMA0GCSqGSIb3DQEB
CwUAA4IBAQCZyjUfbAs+endn0SrS5Kw40Wnqri597LnRyo0uUT+UNTviTg6wv7jK
ntM1H+imARJDh4+8NUIGI944NBJ0pCGXtF9wgigEnaA3R75AUawusEZdN0ZJ+pNE
pPcYOkOAdVZPlgFH0SWEkas+siAAWnGY1iuSv520H3JfZhbYsO5LGfAuhdXH5Hxi
Q71kkGV25J1xeY2CMJtz6Z6uo9BtmiaR1Dx5cClttLYSQDnjZO3r34QVHAR4DiKt
igyRXRxw21nWCgmX1EudbFFDsjJW/rMAIa13dS1TPTDD4ZaP8rexdtzwu7f0hbNj
0Y1clGAa2441nHwKhJl1hPf0vq0djZQz
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:49:42 2025 by rpki-client