Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7B8BBB0C0CC11EFBAF5188D762E951A.roa
File: A7B8BBB0C0CC11EFBAF5188D762E951A.roa (raw, json)
Hash identifier: 7LlfbfPGzvlKLtLVtmP4HYsZ9B9ZtHgNgX70UZeHQh8=
Subject key identifier: 7C:4A:D4:F7:65:85:99:CB:39:C5:60:A5:DA:F8:BA:8A:72:CF:EA:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7B8BBB0C0CC11EFBAF5188D762E951A.roa
Signing time: Mon 23 Dec 2024 01:24:29 +0000
ROA not before: Mon 23 Dec 2024 01:24:26 +0000
ROA not after: Wed 10 Dec 2025 01:24:26 +0000
asID: 984
IP address blocks: 154.82.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73230 (0x11e0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:24:26 2024 GMT
Not After : Dec 10 01:24:26 2025 GMT
Subject: CN=6768bbcd-9653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:70:94:8c:45:64:b7:83:7f:07:37:df:c0:
51:53:67:0f:da:44:30:ce:48:3e:2e:f2:70:80:58:
b3:f3:ea:8e:2a:87:ea:a8:cb:f7:a6:3b:62:50:09:
85:c8:ed:4d:0c:69:a3:fa:ca:6c:69:ad:7b:4f:af:
7d:c5:ff:12:27:2e:35:0f:d1:74:f2:50:0e:c5:69:
02:ad:9a:17:1f:1d:67:d0:2c:19:12:6c:56:45:d4:
17:6f:d7:44:ab:f6:bc:f1:bc:0d:12:43:ab:b5:3e:
60:70:db:05:10:7b:15:3a:ad:cd:a4:f9:8a:b5:f4:
13:1b:c7:ed:1f:80:e4:0c:1a:9c:e3:d7:0e:bc:fa:
51:82:87:df:d6:35:75:a7:5d:02:30:a7:3c:92:b7:
01:f0:2c:6d:0b:69:4a:7e:bc:36:1f:f9:d0:05:9e:
db:fd:92:c8:cb:db:06:81:d5:77:a1:89:6b:83:e1:
03:8a:c9:6c:47:73:27:6f:62:97:2b:b8:9e:af:80:
4b:e7:0d:43:73:24:94:18:d2:58:13:cf:6c:86:dd:
d3:aa:8e:7e:83:4c:81:8a:34:7f:d0:99:72:32:0a:
eb:1f:30:b9:ba:04:c5:3a:5c:10:f0:5f:e8:58:70:
3d:8f:e5:bf:05:e1:05:d8:f7:a4:36:58:2c:6e:a9:
d8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4A:D4:F7:65:85:99:CB:39:C5:60:A5:DA:F8:BA:8A:72:CF:EA:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7B8BBB0C0CC11EFBAF5188D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d6:fd:68:fc:e6:78:0d:5d:2b:e9:a1:0f:96:1e:dd:5f:11:
cb:76:d0:42:ba:cb:38:85:e5:83:fa:2e:91:9b:7d:d2:24:92:
46:14:3e:bc:ba:09:35:e3:21:27:f5:c2:58:24:0f:dc:fe:b0:
77:ae:8e:86:9f:4e:65:e0:81:36:bb:17:19:70:88:a7:9b:99:
08:ef:f6:2c:2d:01:b2:02:50:9c:48:1e:b9:a2:b5:ae:50:da:
75:2a:7b:71:36:94:bb:0f:23:74:d9:56:a3:60:27:5e:c6:ca:
45:bf:1d:6a:fe:57:b5:df:0f:ec:1f:24:92:6b:7c:09:04:3b:
92:bc:20:5d:fa:c5:2d:4a:82:29:ff:55:4b:b6:9d:86:5e:8a:
fa:43:ed:21:11:79:44:85:b0:bb:03:03:4a:cf:ab:fb:c4:ee:
69:ec:b5:f0:59:b4:8f:52:5a:41:d7:75:11:4a:b9:cf:46:32:
5c:f2:ff:52:eb:1d:bd:51:76:69:1a:cb:ac:f7:b6:9f:cc:e1:
50:e8:f5:e0:b1:43:e4:12:af:20:6f:49:84:22:e6:d5:a7:d6:
50:fa:9e:06:9d:7f:8f:03:ac:e4:61:d7:04:30:8a:b9:ce:bb:
a8:74:a3:68:ba:df:bc:82:df:82:22:79:a8:fb:8c:2d:47:2e:
02:a1:c9:53
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR4OMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDEyNDI2WhcNMjUxMjEwMDEyNDI2WjAYMRYw
FAYDVQQDEw02NzY4YmJjZC05NjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtwlwlIxFZLeDfwc338BRU2cP2kQwzkg+LvJwgFiz8+qOKofqqMv3pjti
UAmFyO1NDGmj+spsaa17T699xf8SJy41D9F08lAOxWkCrZoXHx1n0CwZEmxWRdQX
b9dEq/a88bwNEkOrtT5gcNsFEHsVOq3NpPmKtfQTG8ftH4DkDBqc49cOvPpRgoff
1jV1p10CMKc8krcB8CxtC2lKfrw2H/nQBZ7b/ZLIy9sGgdV3oYlrg+EDislsR3Mn
b2KXK7ier4BL5w1DcySUGNJYE89sht3Tqo5+g0yBijR/0JlyMgrrHzC5ugTFOlwQ
8F/oWHA9j+W/BeEF2PekNlgsbqnY8wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHxK
1PdlhZnLOcVgpdr4uopyz+pGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BN0I4QkJCMEMwQ0MxMUVGQkFGNTE4OEQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlL6MA0GCSqGSIb3DQEB
CwUAA4IBAQAf1v1o/OZ4DV0r6aEPlh7dXxHLdtBCuss4heWD+i6Rm33SJJJGFD68
ugk14yEn9cJYJA/c/rB3ro6Gn05l4IE2uxcZcIinm5kI7/YsLQGyAlCcSB65orWu
UNp1KntxNpS7DyN02VajYCdexspFvx1q/le13w/sHySSa3wJBDuSvCBd+sUtSoIp
/1VLtp2GXor6Q+0hEXlEhbC7AwNKz6v7xO5p7LXwWbSPUlpB13URSrnPRjJc8v9S
6x29UXZpGsus97afzOFQ6PXgsUPkEq8gb0mEIubVp9ZQ+p4GnX+PA6zkYdcEMIq5
zruodKNout+8gt+CInmo+4wtRy4CoclT
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:50 2025 by rpki-client