Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A95C13A2F56211EFA5E1C693762E951A.roa
File: A95C13A2F56211EFA5E1C693762E951A.roa (raw, json)
Hash identifier: BfMPs2zqrEve+VwCJ4gGH3ofVhrcxzUEBdVClkWQFho=
Subject key identifier: 41:2C:DE:34:D1:93:3A:3F:6C:27:F3:B6:21:6B:B7:9F:00:5E:11:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A95C13A2F56211EFA5E1C693762E951A.roa
Signing time: Thu 27 Feb 2025 23:29:17 +0000
ROA not before: Thu 27 Feb 2025 23:29:01 +0000
ROA not after: Fri 11 Apr 2025 23:29:01 +0000
asID: 63139
IP address blocks: 154.203.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92580 (0x169a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 23:29:01 2025 GMT
Not After : Apr 11 23:29:01 2025 GMT
Subject: CN=67c0f54d-f1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ab:e8:19:37:61:5a:7a:5c:47:81:a8:67:ef:
c9:44:5c:5a:41:93:0d:e1:d0:a7:f9:1f:dc:76:25:
55:64:7e:04:70:e5:14:4b:b2:2e:9d:9e:52:d6:fe:
b7:ea:3f:f8:ec:de:69:9a:be:c2:cd:f1:a8:17:1f:
44:58:88:8d:bc:05:8b:55:ad:fc:62:18:d9:17:7b:
e1:19:29:51:ef:0e:59:f7:aa:e0:6a:b0:09:a3:c7:
0b:44:64:ad:72:3b:f6:e4:f6:d8:21:72:42:5e:49:
2b:bb:24:3d:05:d4:22:90:84:77:00:41:0d:81:4d:
03:9a:c4:12:a1:f0:f9:5f:6f:0d:b5:68:e5:7e:ec:
71:27:17:11:34:ee:84:8f:f4:fe:c1:df:d3:59:0d:
10:58:ee:99:ce:6b:95:b5:70:5d:62:e1:f2:20:40:
2e:8d:70:cc:e9:69:14:a2:2b:56:91:27:f9:39:ec:
98:f8:d8:81:6a:61:6b:0e:f7:e7:ec:85:11:cc:11:
65:b7:c6:0b:12:01:13:a3:ca:3b:77:42:a0:1a:cb:
53:02:ca:11:c4:93:7a:fa:ff:8d:97:37:1c:74:14:
13:fb:6c:55:13:28:64:59:ab:72:95:ae:c5:24:7e:
61:22:99:ab:72:61:73:e3:fa:3e:28:df:21:3a:76:
04:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2C:DE:34:D1:93:3A:3F:6C:27:F3:B6:21:6B:B7:9F:00:5E:11:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A95C13A2F56211EFA5E1C693762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.180.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e8:5f:59:95:80:05:c7:94:dc:fb:85:09:c0:40:5e:28:73:
20:88:15:4a:a0:91:58:25:03:32:e4:fd:a6:bd:02:10:a0:50:
4e:4b:4e:5f:86:22:30:f5:5c:9c:06:93:47:e9:c3:b5:87:88:
88:15:96:de:cf:09:c7:91:56:01:87:71:2a:c5:52:a6:2c:8b:
a6:31:d9:32:7b:21:3d:97:45:ee:d7:d9:42:35:84:86:0d:9a:
24:71:ed:de:1f:3a:eb:15:81:76:34:57:9a:1f:e4:d1:8c:c4:
f8:ae:7f:08:99:46:aa:e8:61:f9:f1:eb:2e:07:0a:38:5c:95:
e5:81:e0:65:63:1f:c9:15:3b:1c:bc:28:53:0c:f7:02:b9:c1:
15:2d:20:5c:ec:2e:c3:20:1d:bf:e5:7c:b4:68:ee:ed:1d:14:
7b:56:fb:a1:c8:44:19:ff:38:7e:9c:d9:88:20:ac:63:36:7d:
34:22:cd:50:86:10:ee:f6:6d:87:cd:2f:9c:a0:22:e2:56:99:
75:91:ad:6c:b9:a3:81:3e:97:df:3d:e5:99:0c:ae:b2:1e:08:
63:d6:22:a7:a2:22:c2:a8:97:2c:23:05:82:c7:f7:4d:ca:08:
36:a0:c3:64:09:63:94:c9:cf:1b:12:36:88:54:36:41:12:9b:
82:3f:2d:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWmkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MjMyOTAxWhcNMjUwNDExMjMyOTAxWjAYMRYw
FAYDVQQDEw02N2MwZjU0ZC1mMWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp6voGTdhWnpcR4GoZ+/JRFxaQZMN4dCn+R/cdiVVZH4EcOUUS7IunZ5S
1v636j/47N5pmr7CzfGoFx9EWIiNvAWLVa38YhjZF3vhGSlR7w5Z96rgarAJo8cL
RGStcjv25PbYIXJCXkkruyQ9BdQikIR3AEENgU0DmsQSofD5X28NtWjlfuxxJxcR
NO6Ej/T+wd/TWQ0QWO6ZzmuVtXBdYuHyIEAujXDM6WkUoitWkSf5OeyY+NiBamFr
Dvfn7IURzBFlt8YLEgETo8o7d0KgGstTAsoRxJN6+v+NlzccdBQT+2xVEyhkWaty
la7FJH5hIpmrcmFz4/o+KN8hOnYE1QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEEs
3jTRkzo/bCfztiFrt58AXhH+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BOTVDMTNBMkY1NjIxMUVGQTVFMUM2OTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsu0MA0GCSqGSIb3DQEB
CwUAA4IBAQAJ6F9ZlYAFx5Tc+4UJwEBeKHMgiBVKoJFYJQMy5P2mvQIQoFBOS05f
hiIw9VycBpNH6cO1h4iIFZbezwnHkVYBh3EqxVKmLIumMdkyeyE9l0Xu19lCNYSG
DZokce3eHzrrFYF2NFeaH+TRjMT4rn8ImUaq6GH58esuBwo4XJXlgeBlYx/JFTsc
vChTDPcCucEVLSBc7C7DIB2/5Xy0aO7tHRR7VvuhyEQZ/zh+nNmIIKxjNn00Is1Q
hhDu9m2HzS+coCLiVpl1ka1suaOBPpffPeWZDK6yHghj1iKnoiLCqJcsIwWCx/dN
ygg2oMNkCWOUyc8bEjaIVDZBEpuCPy0z
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:47 2025 by rpki-client