Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C903BA68C5EA11EF89B26AA1762E951A.roa
File: C903BA68C5EA11EF89B26AA1762E951A.roa (raw, json)
Hash identifier: hXXJTzpTAKInANVvKR4YcBTn0vw8HNC6OKuU/1z7wtc=
Subject key identifier: EA:01:43:9D:3F:84:09:66:71:87:C4:11:9A:0C:52:45:98:51:76:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C903BA68C5EA11EF89B26AA1762E951A.roa
Signing time: Sun 29 Dec 2024 13:42:46 +0000
ROA not before: Sun 29 Dec 2024 13:42:42 +0000
ROA not after: Sun 12 Dec 2027 13:42:42 +0000
asID: 17561
IP address blocks: 154.211.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77218 (0x12da2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 13:42:42 2024 GMT
Not After : Dec 12 13:42:42 2027 GMT
Subject: CN=677151d6-ebd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:94:42:09:8d:9d:5d:a2:ba:66:81:d0:f6:
d8:bc:b0:7b:24:47:d8:79:74:c0:f0:ac:af:25:72:
7e:bd:fd:72:b8:91:fc:40:fb:89:de:d7:4c:97:e4:
c3:32:74:8f:7e:c1:7b:de:19:e4:13:e0:fa:2e:f7:
95:76:29:23:52:28:ce:27:ce:f3:78:a6:f4:66:21:
df:c5:d0:c6:85:3f:a3:49:6f:a5:bb:e3:df:72:e4:
12:a7:13:93:39:71:04:11:3b:82:4d:44:94:b4:bc:
4a:2f:24:ff:ec:75:c4:43:57:b1:7c:4e:8e:70:db:
f3:5a:cf:8f:f3:8d:97:be:1c:12:80:35:47:fe:15:
c0:0b:e5:46:ee:10:53:7e:cc:1c:69:dc:17:00:38:
5f:c4:dd:87:67:41:1b:32:8e:4d:22:9f:ef:4d:b7:
74:4f:21:e4:14:fe:7f:a1:2e:24:8f:bd:a9:48:c7:
e6:01:27:89:6c:65:12:64:14:fd:7a:50:96:9e:64:
eb:0d:1b:13:d8:63:ca:87:cb:ee:5c:6f:dd:03:a2:
eb:e8:40:d6:6a:39:b8:76:33:f9:6d:65:c7:32:df:
1b:a1:88:1e:47:41:b6:32:aa:9f:91:d7:91:bb:fa:
fe:78:23:f4:a7:a7:da:e9:f9:07:32:07:38:c0:bc:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:01:43:9D:3F:84:09:66:71:87:C4:11:9A:0C:52:45:98:51:76:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C903BA68C5EA11EF89B26AA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.24.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:7e:37:38:41:6e:e6:09:bc:9a:60:26:46:6a:55:5b:96:8b:
db:d7:2f:cf:98:88:8e:42:4b:ed:c4:ae:0c:27:ae:79:57:75:
43:05:9d:d8:f2:17:c4:f8:cd:67:cf:09:09:9e:2c:2f:fb:7b:
00:e1:39:98:50:83:7b:72:f8:63:37:41:06:c8:ab:bf:ee:e7:
6f:03:d4:24:47:3e:e3:6e:b4:d9:41:08:16:33:be:59:83:d3:
c0:5e:76:1f:b8:03:52:c8:48:73:cd:b7:c7:5c:bc:17:19:bb:
69:48:3b:8e:15:80:9a:59:1c:bc:fe:a8:68:25:b0:d4:de:e3:
5c:ba:b2:0c:96:32:c6:90:38:2f:8b:3b:c3:c3:bd:32:1c:f1:
eb:92:8f:5d:07:e8:ba:0e:52:69:ed:7c:7d:da:4d:fb:75:76:
39:06:41:a4:76:40:25:59:f1:c5:6b:ec:50:a9:aa:76:c6:b2:
af:28:2f:23:af:eb:13:79:91:70:c4:ae:52:80:d6:e7:cd:28:
1f:97:55:6a:e6:48:7e:29:0c:7f:55:34:2a:00:85:b3:5b:54:
19:bd:d4:8b:4d:6f:c7:5a:75:c9:b3:1f:69:d7:06:1b:f1:c5:
24:6b:e1:63:a2:83:9b:61:da:ae:ca:c0:b8:4a:70:f5:bf:57:
72:cd:8d:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS2iMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTM0MjQyWhcNMjcxMjEyMTM0MjQyWjAYMRYw
FAYDVQQDEw02NzcxNTFkNi1lYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp5+UQgmNnV2iumaB0PbYvLB7JEfYeXTA8KyvJXJ+vf1yuJH8QPuJ3tdM
l+TDMnSPfsF73hnkE+D6LveVdikjUijOJ87zeKb0ZiHfxdDGhT+jSW+lu+PfcuQS
pxOTOXEEETuCTUSUtLxKLyT/7HXEQ1exfE6OcNvzWs+P842XvhwSgDVH/hXAC+VG
7hBTfswcadwXADhfxN2HZ0EbMo5NIp/vTbd0TyHkFP5/oS4kj72pSMfmASeJbGUS
ZBT9elCWnmTrDRsT2GPKh8vuXG/dA6Lr6EDWajm4djP5bWXHMt8boYgeR0G2Mqqf
kdeRu/r+eCP0p6fa6fkHMgc4wLy8zQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOoB
Q50/hAlmcYfEEZoMUkWYUXajMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DOTAzQkE2OEM1RUExMUVGODlCMjZBQTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtMYMA0GCSqGSIb3DQEB
CwUAA4IBAQC9fjc4QW7mCbyaYCZGalVblovb1y/PmIiOQkvtxK4MJ655V3VDBZ3Y
8hfE+M1nzwkJniwv+3sA4TmYUIN7cvhjN0EGyKu/7udvA9QkRz7jbrTZQQgWM75Z
g9PAXnYfuANSyEhzzbfHXLwXGbtpSDuOFYCaWRy8/qhoJbDU3uNcurIMljLGkDgv
izvDw70yHPHrko9dB+i6DlJp7Xx92k37dXY5BkGkdkAlWfHFa+xQqap2xrKvKC8j
r+sTeZFwxK5SgNbnzSgfl1Vq5kh+KQx/VTQqAIWzW1QZvdSLTW/HWnXJsx9p1wYb
8cUka+FjooObYdquysC4SnD1v1dyzY2V
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:40 2025 by rpki-client