Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1B330ACC0EC11EF84135E69762E951A.roa
File: C1B330ACC0EC11EF84135E69762E951A.roa (raw, json)
Hash identifier: Fnys87VsvdPS9vr8lrkYwcVJIvoiWTwyKEwOjoDup64=
Subject key identifier: 12:0C:4B:FD:63:E3:BB:BA:36:37:1E:10:34:BE:70:EC:92:F2:6D:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1B330ACC0EC11EF84135E69762E951A.roa
Signing time: Mon 23 Dec 2024 05:14:17 +0000
ROA not before: Mon 23 Dec 2024 05:14:13 +0000
ROA not after: Wed 10 Dec 2025 05:14:13 +0000
asID: 984
IP address blocks: 154.90.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73522 (0x11f32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:14:13 2024 GMT
Not After : Dec 10 05:14:13 2025 GMT
Subject: CN=6768f1a9-0653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:b0:70:12:3c:fa:8f:17:45:01:ed:0f:d1:
db:ea:d0:a2:17:6c:eb:5d:2f:d8:08:7f:5b:db:37:
f8:59:3e:b7:9e:e3:d2:8c:7a:5b:e8:ee:6f:27:f3:
78:1a:ee:8e:04:7b:1a:b8:ea:6a:f4:82:b8:3f:82:
c0:11:8e:43:e9:99:1e:af:fe:d6:59:7d:60:15:50:
e3:dd:43:0f:99:23:12:62:69:ee:30:c3:34:67:45:
36:bd:d9:18:0f:d8:b6:85:13:07:86:2a:73:74:52:
22:2a:92:f4:7e:3a:ed:c0:50:d0:67:0c:8b:55:89:
2c:89:a0:c0:c3:30:d3:10:5c:7e:d0:9a:a9:a5:98:
37:bd:89:c1:63:4c:ff:b8:f4:19:97:7d:f4:a1:77:
d1:fc:1d:4f:f7:c8:2f:59:bf:51:37:8c:d1:d7:06:
3f:07:80:f7:25:ee:dd:bd:98:51:cd:9a:1f:4e:32:
d3:82:4a:d7:f3:43:c1:89:8d:86:20:0f:38:2b:ce:
d5:42:fa:2e:75:9e:da:86:78:09:92:2e:04:21:da:
9a:c8:a2:29:6c:06:10:68:12:38:b4:33:de:db:77:
d3:e2:8b:6a:b3:1e:9c:59:98:22:3e:2c:f7:d9:a0:
76:ee:a9:da:47:e0:03:00:95:ce:c0:13:7a:48:26:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0C:4B:FD:63:E3:BB:BA:36:37:1E:10:34:BE:70:EC:92:F2:6D:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1B330ACC0EC11EF84135E69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.79.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:0f:1a:be:a0:d0:56:1c:75:27:a1:06:8f:c6:05:5a:c4:95:
71:6d:66:09:67:ac:54:71:b0:95:8d:da:cd:22:50:67:21:5d:
6a:cd:21:d4:32:44:09:6d:0b:b2:30:9b:ee:99:f6:33:11:0f:
9f:e7:d5:01:6a:d2:16:ca:48:3d:9f:f0:03:a3:11:60:e8:e0:
75:16:af:0d:95:4a:81:10:62:2b:fa:36:9b:9f:f6:ed:eb:ba:
40:31:10:47:52:fd:48:9a:f3:31:a8:4a:64:d0:00:af:57:53:
73:2c:c8:b7:13:a6:5d:86:d9:65:73:65:3a:66:bb:5a:32:16:
89:3b:b0:57:52:c3:33:b0:a4:f4:f2:a3:cc:e9:f4:05:d0:21:
4d:37:02:ff:dc:15:8a:64:2c:af:f9:83:d3:28:8f:59:bc:46:
24:97:38:2c:cb:d7:82:1d:4b:7d:09:9f:1b:69:62:fe:47:73:
b0:17:6c:0e:6f:ec:81:0e:6c:55:2a:bf:f2:d7:47:53:fd:3e:
bf:1b:48:59:ee:d2:0e:58:42:48:a6:4b:be:96:cd:b4:fe:15:
95:e6:fb:96:52:7b:88:2b:b5:c0:38:0b:ca:75:f6:b3:0e:41:
64:80:1c:d5:17:51:31:47:91:78:bd:d9:94:0a:18:1f:cf:ad:
4f:54:df:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR8yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDUxNDEzWhcNMjUxMjEwMDUxNDEzWjAYMRYw
FAYDVQQDEw02NzY4ZjFhOS0wNjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsq6wcBI8+o8XRQHtD9Hb6tCiF2zrXS/YCH9b2zf4WT63nuPSjHpb6O5v
J/N4Gu6OBHsauOpq9IK4P4LAEY5D6Zker/7WWX1gFVDj3UMPmSMSYmnuMMM0Z0U2
vdkYD9i2hRMHhipzdFIiKpL0fjrtwFDQZwyLVYksiaDAwzDTEFx+0JqppZg3vYnB
Y0z/uPQZl330oXfR/B1P98gvWb9RN4zR1wY/B4D3Je7dvZhRzZofTjLTgkrX80PB
iY2GIA84K87VQvoudZ7ahngJki4EIdqayKIpbAYQaBI4tDPe23fT4otqsx6cWZgi
Piz32aB27qnaR+ADAJXOwBN6SCZVFwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBIM
S/1j47u6NjceEDS+cOyS8m0mMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMUIzMzBBQ0MwRUMxMUVGODQxMzVFNjk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlpPMA0GCSqGSIb3DQEB
CwUAA4IBAQCPDxq+oNBWHHUnoQaPxgVaxJVxbWYJZ6xUcbCVjdrNIlBnIV1qzSHU
MkQJbQuyMJvumfYzEQ+f59UBatIWykg9n/ADoxFg6OB1Fq8NlUqBEGIr+jabn/bt
67pAMRBHUv1ImvMxqEpk0ACvV1NzLMi3E6Zdhtllc2U6ZrtaMhaJO7BXUsMzsKT0
8qPM6fQF0CFNNwL/3BWKZCyv+YPTKI9ZvEYklzgsy9eCHUt9CZ8baWL+R3OwF2wO
b+yBDmxVKr/y10dT/T6/G0hZ7tIOWEJIpku+ls20/hWV5vuWUnuIK7XAOAvKdfaz
DkFkgBzVF1ExR5F4vdmUChgfz61PVN+M
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:32 2025 by rpki-client