Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4C1BADECBE711EF967199B7762E951A.roa
File: B4C1BADECBE711EF967199B7762E951A.roa (raw, json)
Hash identifier: 0AVMZ6PasDMj4My0aBL3/Gf1ZpL208sOEZYWft6Xryg=
Subject key identifier: 77:6D:A0:B8:CF:02:24:B1:90:EB:14:0F:33:3A:B1:1A:3C:5D:F5:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01358F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4C1BADECBE711EF967199B7762E951A.roa
Signing time: Mon 06 Jan 2025 04:35:50 +0000
ROA not before: Mon 06 Jan 2025 04:35:47 +0000
ROA not after: Fri 11 Apr 2025 04:35:47 +0000
asID: 150000
IP address blocks: 154.82.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79247 (0x1358f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 6 04:35:47 2025 GMT
Not After : Apr 11 04:35:47 2025 GMT
Subject: CN=677b5da6-d217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dc:96:ed:46:ba:8a:27:93:8b:26:c3:6b:56:
1c:58:b6:f8:f1:67:98:d8:3a:62:71:aa:82:f7:88:
55:71:cf:c1:48:85:46:47:c5:ce:e0:b5:e0:5d:22:
91:3f:31:23:1b:2a:68:25:16:d6:08:65:71:8a:77:
35:e3:bb:0f:5a:6c:6c:ea:12:b6:0b:5a:7d:56:f1:
73:c9:bb:35:70:55:24:3c:3e:a8:9a:8f:18:b1:cd:
40:93:b2:c1:1b:47:1e:1b:96:5c:f0:2c:4c:57:2a:
ec:f3:72:f4:85:3b:24:64:34:46:37:e4:a5:5d:1b:
2b:b2:ea:22:1e:dc:5b:ba:3e:71:0a:b4:76:90:52:
cc:8a:c7:5d:7a:8f:a3:46:31:79:98:41:25:93:04:
ac:36:55:73:e9:45:39:2c:41:d8:e9:9b:cb:52:56:
96:28:9d:ef:0b:ed:c8:12:25:37:f3:92:5d:93:4b:
8a:85:3c:31:d1:a9:68:47:0b:99:c8:6a:be:21:a5:
bd:c4:a7:c7:71:83:3c:bf:b9:22:dd:f0:de:d6:d5:
6f:16:45:02:f3:3f:18:0a:4f:67:78:d6:f4:e4:93:
85:8d:1d:be:c4:2b:fc:42:c8:c3:91:1d:94:17:2f:
90:e8:85:3a:2a:3c:7d:1a:db:34:fd:93:bc:3b:81:
75:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6D:A0:B8:CF:02:24:B1:90:EB:14:0F:33:3A:B1:1A:3C:5D:F5:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4C1BADECBE711EF967199B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.159.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a0:41:7b:ad:b3:1a:e8:f7:1d:2d:a4:a2:a5:61:97:60:c1:
44:65:6e:5e:58:73:e6:88:2f:45:61:95:3f:7d:c4:1f:7e:e1:
2b:b1:0d:ed:3a:5d:c6:5d:0b:d4:2c:2d:53:ad:a8:34:bf:7f:
3a:e5:65:2b:5f:b8:90:f8:ba:d1:bd:ba:f2:83:97:2a:06:52:
60:03:5b:a0:5b:15:97:5d:ce:d0:1c:95:dd:a5:78:14:0a:64:
c8:3a:a1:83:ed:f6:b4:a9:ee:0a:b7:04:76:7a:0e:c6:f4:59:
e6:9d:9b:12:1e:28:64:a7:93:9e:cb:14:65:e5:c7:b2:a6:99:
79:03:66:7d:7f:6d:58:2c:bf:40:4b:43:45:5f:aa:07:39:c3:
76:7c:ab:62:f9:ff:11:a9:6f:f8:05:36:43:ab:69:6b:ea:6d:
3b:b6:d4:4a:5b:e4:4d:4b:e1:43:12:a0:b8:81:ec:68:1c:1a:
c1:57:c1:51:8e:79:7a:ee:63:e1:c3:36:da:5e:d1:75:ac:7d:
1e:35:99:28:77:ba:fa:25:00:8a:c3:ff:61:92:80:a9:ae:43:
bb:dc:fc:b2:db:a7:44:40:bd:a2:f4:53:9c:1f:55:d9:05:02:
66:0f:11:e5:42:1d:04:42:45:f7:28:7b:50:24:bf:fe:01:50:
88:42:dd:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATWPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA2MDQzNTQ3WhcNMjUwNDExMDQzNTQ3WjAYMRYw
FAYDVQQDEw02NzdiNWRhNi1kMjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0tyW7Ua6iieTiybDa1YcWLb48WeY2DpicaqC94hVcc/BSIVGR8XO4LXg
XSKRPzEjGypoJRbWCGVxinc147sPWmxs6hK2C1p9VvFzybs1cFUkPD6omo8Ysc1A
k7LBG0ceG5Zc8CxMVyrs83L0hTskZDRGN+SlXRsrsuoiHtxbuj5xCrR2kFLMisdd
eo+jRjF5mEElkwSsNlVz6UU5LEHY6ZvLUlaWKJ3vC+3IEiU385Jdk0uKhTwx0alo
RwuZyGq+IaW9xKfHcYM8v7ki3fDe1tVvFkUC8z8YCk9neNb05JOFjR2+xCv8QsjD
kR2UFy+Q6IU6Kjx9Gts0/ZO8O4F15wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHdt
oLjPAiSxkOsUDzM6sRo8XfWMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNEMxQkFERUNCRTcxMUVGOTY3MTk5Qjc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlKfMA0GCSqGSIb3DQEB
CwUAA4IBAQBfoEF7rbMa6PcdLaSipWGXYMFEZW5eWHPmiC9FYZU/fcQffuErsQ3t
Ol3GXQvULC1Trag0v3865WUrX7iQ+LrRvbryg5cqBlJgA1ugWxWXXc7QHJXdpXgU
CmTIOqGD7fa0qe4KtwR2eg7G9FnmnZsSHihkp5OeyxRl5ceyppl5A2Z9f21YLL9A
S0NFX6oHOcN2fKti+f8RqW/4BTZDq2lr6m07ttRKW+RNS+FDEqC4gexoHBrBV8FR
jnl67mPhwzbaXtF1rH0eNZkod7r6JQCKw/9hkoCprkO73Pyy26dEQL2i9FOcH1XZ
BQJmDxHlQh0EQkX3KHtQJL/+AVCIQt1v
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:57 2025 by rpki-client