Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADAAE09AC26E11EFB64B6284762E951A.roa
File: ADAAE09AC26E11EFB64B6284762E951A.roa (raw, json)
Hash identifier: N70D4/yQOf7Zq2Ql7debr6xFwV00RyZF+zsrdvoQpxk=
Subject key identifier: 45:9B:35:0D:D1:90:FD:8B:58:0A:CB:1F:4B:B9:C0:83:D6:BD:D4:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01244A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADAAE09AC26E11EFB64B6284762E951A.roa
Signing time: Wed 25 Dec 2024 03:16:49 +0000
ROA not before: Wed 25 Dec 2024 03:16:45 +0000
ROA not after: Wed 10 Dec 2025 03:16:45 +0000
asID: 984
IP address blocks: 154.211.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74826 (0x1244a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:16:45 2024 GMT
Not After : Dec 10 03:16:45 2025 GMT
Subject: CN=676b7921-0d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:37:32:d2:fd:09:56:f9:0b:49:5e:ce:ca:a6:
d3:05:e3:ce:03:3a:c5:f1:22:bc:ad:0d:91:8f:cc:
52:b1:83:f9:99:7d:cd:33:b8:51:8f:5b:63:a5:a6:
65:62:31:99:2c:68:e5:7b:b8:4b:c8:dc:47:c9:7e:
e0:51:4d:39:e4:08:2c:5f:f0:9b:70:e4:13:b0:b5:
e1:1e:11:35:27:80:4c:4c:91:99:89:96:84:e1:f0:
87:55:d8:ac:74:57:1f:99:26:0d:cc:90:4a:b8:b8:
cb:38:92:a9:2d:fa:93:cf:b6:c9:a9:49:58:27:cc:
ba:fa:c4:7a:53:e9:9e:eb:0c:a8:aa:34:79:85:87:
4d:2f:c1:4a:c3:49:7d:c2:27:7a:74:b4:f6:b6:4a:
80:3e:33:03:42:3e:52:70:f9:e1:26:94:18:c5:d7:
24:64:f2:5b:fb:f0:9d:f9:f7:e7:d3:96:29:29:22:
99:97:07:e2:c4:8c:13:59:0e:7e:b8:82:fa:d0:b3:
f1:da:f6:e9:f3:c3:3a:88:82:8c:62:fe:3c:51:e9:
29:d9:15:e2:6a:62:17:12:05:3f:c9:6e:f8:56:c2:
09:4f:5d:b8:c8:99:b5:ca:db:39:7b:a6:df:27:e4:
c5:75:18:29:2f:1b:90:a6:f0:0b:4c:15:93:5a:af:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9B:35:0D:D1:90:FD:8B:58:0A:CB:1F:4B:B9:C0:83:D6:BD:D4:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADAAE09AC26E11EFB64B6284762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.177.0/24
Signature Algorithm: sha256WithRSAEncryption
94:42:74:de:a2:8d:50:b2:ea:70:9e:42:8c:da:1e:14:d6:07:
64:4f:b3:09:3d:62:04:48:98:dd:31:4e:10:20:5a:3a:39:5e:
2b:33:35:91:e4:d4:5d:12:51:25:36:51:e9:85:b3:0f:d4:0e:
11:28:a1:34:cf:f6:21:53:5f:c0:4c:3e:c1:59:65:73:0e:ac:
7b:e8:81:8a:56:68:98:c3:54:a4:c1:1e:00:ef:c7:b5:de:80:
49:08:05:71:d9:ce:a5:85:b2:d8:61:23:84:08:66:cb:dc:65:
09:d9:87:d5:b4:80:d6:c5:4e:d4:8b:1c:4c:7d:da:bd:59:80:
1b:8a:ac:1a:ce:72:ab:08:3d:de:18:4c:21:9f:13:69:6b:ac:
e2:73:a5:10:2d:2e:46:b0:87:76:0b:cb:98:4c:56:10:2b:20:
7b:f8:7a:d1:a3:08:60:54:04:f4:72:99:8a:8c:6c:13:90:c2:
d8:8e:d0:5a:6e:3a:41:5c:ac:88:4d:01:a7:66:b1:5d:16:30:
f3:b9:34:c7:db:19:f4:a3:fc:a0:cb:e9:17:3f:0b:a7:42:c8:
25:81:15:8d:09:cd:0a:09:84:ce:4d:8c:4c:88:90:80:c5:eb:
8a:bd:59:7e:2c:a4:57:d9:99:84:43:e7:93:dc:08:9c:4c:19:
30:1f:e6:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASRKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDMxNjQ1WhcNMjUxMjEwMDMxNjQ1WjAYMRYw
FAYDVQQDEw02NzZiNzkyMS0wZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4jcy0v0JVvkLSV7OyqbTBePOAzrF8SK8rQ2Rj8xSsYP5mX3NM7hRj1tj
paZlYjGZLGjle7hLyNxHyX7gUU055AgsX/CbcOQTsLXhHhE1J4BMTJGZiZaE4fCH
VdisdFcfmSYNzJBKuLjLOJKpLfqTz7bJqUlYJ8y6+sR6U+me6wyoqjR5hYdNL8FK
w0l9wid6dLT2tkqAPjMDQj5ScPnhJpQYxdckZPJb+/Cd+ffn05YpKSKZlwfixIwT
WQ5+uIL60LPx2vbp88M6iIKMYv48Uekp2RXiamIXEgU/yW74VsIJT124yJm1yts5
e6bfJ+TFdRgpLxuQpvALTBWTWq+G7QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEWb
NQ3RkP2LWArLH0u5wIPWvdRgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BREFBRTA5QUMyNkUxMUVGQjY0QjYyODQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtOxMA0GCSqGSIb3DQEB
CwUAA4IBAQCUQnTeoo1QsupwnkKM2h4U1gdkT7MJPWIESJjdMU4QIFo6OV4rMzWR
5NRdElElNlHphbMP1A4RKKE0z/YhU1/ATD7BWWVzDqx76IGKVmiYw1SkwR4A78e1
3oBJCAVx2c6lhbLYYSOECGbL3GUJ2YfVtIDWxU7UixxMfdq9WYAbiqwaznKrCD3e
GEwhnxNpa6zic6UQLS5GsId2C8uYTFYQKyB7+HrRowhgVAT0cpmKjGwTkMLYjtBa
bjpBXKyITQGnZrFdFjDzuTTH2xn0o/ygy+kXPwunQsglgRWNCc0KCYTOTYxMiJCA
xeuKvVl+LKRX2ZmEQ+eT3AicTBkwH+aN
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:28 2025 by rpki-client