Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC3D1904C0CC11EF89663C8F762E951A.roa
File: CC3D1904C0CC11EF89663C8F762E951A.roa (raw, json)
Hash identifier: /s/Qgeuj3FDh91fiPgvp+8+oknEAK26j96cTO8bCnqA=
Subject key identifier: B4:39:E7:3C:16:77:75:A6:AE:06:27:79:95:5F:74:4F:36:B8:45:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E10
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC3D1904C0CC11EF89663C8F762E951A.roa
Signing time: Mon 23 Dec 2024 01:25:30 +0000
ROA not before: Mon 23 Dec 2024 01:25:27 +0000
ROA not after: Wed 10 Dec 2025 01:25:27 +0000
asID: 984
IP address blocks: 154.82.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73232 (0x11e10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:25:27 2024 GMT
Not After : Dec 10 01:25:27 2025 GMT
Subject: CN=6768bc0a-5cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:b2:d5:04:09:03:4f:85:72:53:f2:12:3a:
8b:d9:a3:2e:51:f5:9f:06:e3:58:76:0a:fc:36:3c:
e0:d1:b5:23:21:85:1d:1b:4a:ea:f1:3c:51:6e:ab:
94:c4:1a:cc:ab:e0:68:a3:ef:13:40:ef:9b:2b:38:
33:02:4c:46:05:50:08:48:7d:03:cc:8b:c3:25:33:
04:e2:dc:f3:d8:e1:60:44:bc:2e:56:77:5e:89:96:
fb:c9:3f:fb:a1:e6:6b:21:d9:70:75:7f:42:a6:cc:
42:71:97:87:65:3b:8d:28:6e:d3:51:09:0d:78:b3:
10:81:57:e0:5b:74:a8:38:2c:79:30:4a:fd:32:ee:
8a:07:fd:d5:f8:ff:b9:b4:36:55:38:5c:df:e9:ee:
7e:84:55:d4:80:d2:66:a3:73:b2:6d:1c:40:4c:31:
f6:69:58:63:d2:64:ba:f9:29:72:32:78:76:e5:7c:
47:b9:5f:e3:6d:f1:1f:28:fd:f1:d7:68:04:f2:98:
ba:83:8c:ee:43:3f:50:8b:7d:ee:2a:6c:91:ec:1f:
4f:07:5d:c6:04:fd:ea:29:f9:a5:37:fd:b6:6a:5d:
4c:ea:a6:9e:f0:1c:35:65:ba:54:7a:c6:00:51:63:
14:38:c9:fb:eb:59:d0:ea:57:7c:e4:57:d7:b0:03:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:39:E7:3C:16:77:75:A6:AE:06:27:79:95:5F:74:4F:36:B8:45:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC3D1904C0CC11EF89663C8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.251.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:75:d0:8e:42:c7:71:98:6f:a3:fa:4e:50:7b:e3:62:c6:fc:
e9:3c:b6:b7:28:24:a0:d8:82:d5:99:2b:b4:84:03:b0:2d:b4:
57:91:df:31:50:e7:c1:c5:61:70:f1:78:4d:38:b8:b1:b6:00:
56:06:66:f8:48:6c:45:6a:92:32:8c:79:c5:70:8d:ee:06:75:
89:bb:19:ab:d6:37:22:e3:12:09:90:96:90:1a:62:dc:a1:b7:
23:f0:b3:cc:bf:bd:bb:97:0a:77:c8:6e:0e:4a:59:4e:1d:e3:
dd:cb:73:96:2a:69:c5:26:8d:2a:bd:47:6f:cb:ad:0d:8d:ac:
82:96:51:31:17:05:bc:77:4e:33:c1:53:fe:5d:09:a9:58:94:
9a:c1:fc:90:32:81:d3:b2:bf:c5:6b:aa:5a:ac:eb:8c:4a:fc:
59:f1:ed:cf:89:94:25:cf:10:be:ab:2d:19:a4:d7:17:78:83:
1a:1a:d4:e9:f9:ac:4d:52:45:32:2f:39:cc:95:1b:30:9a:02:
67:c4:0b:a0:e2:70:0b:db:54:ae:ed:59:92:a6:2d:eb:0f:02:
1a:9f:46:07:16:55:9a:dd:64:de:e7:ad:3a:40:7f:1c:ee:4b:
dd:f0:05:4b:91:d1:f2:c8:ea:d9:93:86:5e:ac:4c:a3:aa:cc:
61:6d:eb:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR4QMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDEyNTI3WhcNMjUxMjEwMDEyNTI3WjAYMRYw
FAYDVQQDEw02NzY4YmMwYS01Y2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArNWy1QQJA0+FclPyEjqL2aMuUfWfBuNYdgr8Njzg0bUjIYUdG0rq8TxR
bquUxBrMq+Boo+8TQO+bKzgzAkxGBVAISH0DzIvDJTME4tzz2OFgRLwuVndeiZb7
yT/7oeZrIdlwdX9CpsxCcZeHZTuNKG7TUQkNeLMQgVfgW3SoOCx5MEr9Mu6KB/3V
+P+5tDZVOFzf6e5+hFXUgNJmo3OybRxATDH2aVhj0mS6+SlyMnh25XxHuV/jbfEf
KP3x12gE8pi6g4zuQz9Qi33uKmyR7B9PB13GBP3qKfmlN/22al1M6qae8Bw1ZbpU
esYAUWMUOMn761nQ6ld85FfXsAOaYwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLQ5
5zwWd3WmrgYneZVfdE82uEWAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQzNEMTkwNEMwQ0MxMUVGODk2NjNDOEY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlL7MA0GCSqGSIb3DQEB
CwUAA4IBAQCsddCOQsdxmG+j+k5Qe+NixvzpPLa3KCSg2ILVmSu0hAOwLbRXkd8x
UOfBxWFw8XhNOLixtgBWBmb4SGxFapIyjHnFcI3uBnWJuxmr1jci4xIJkJaQGmLc
obcj8LPMv727lwp3yG4OSllOHePdy3OWKmnFJo0qvUdvy60NjayCllExFwW8d04z
wVP+XQmpWJSawfyQMoHTsr/Fa6parOuMSvxZ8e3PiZQlzxC+qy0ZpNcXeIMaGtTp
+axNUkUyLznMlRswmgJnxAug4nAL21Su7VmSpi3rDwIan0YHFlWa3WTe5606QH8c
7kvd8AVLkdHyyOrZk4ZerEyjqsxhbev4
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:40:25 2025 by rpki-client