Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D02DF34ECDE211EF9B037455762E951A.roa
File: D02DF34ECDE211EF9B037455762E951A.roa (raw, json)
Hash identifier: FMAdPxXuRLRtq/0jJxY3KRnqbCiUoyiMWX14m6bshLI=
Subject key identifier: FB:A1:1F:57:E1:33:DA:DF:5F:7E:63:CD:F3:45:44:70:97:20:4F:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137CD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D02DF34ECDE211EF9B037455762E951A.roa
Signing time: Wed 08 Jan 2025 17:05:51 +0000
ROA not before: Wed 08 Jan 2025 17:05:46 +0000
ROA not after: Sat 03 Jan 2026 17:05:46 +0000
asID: 984
IP address blocks: 154.89.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79821 (0x137cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:05:46 2025 GMT
Not After : Jan 3 17:05:46 2026 GMT
Subject: CN=677eb06f-92d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:d9:10:eb:a4:0a:cd:bf:29:06:0e:87:9b:
17:75:3f:53:fe:7d:69:ea:26:b4:7c:ca:f2:31:bf:
fb:47:11:b1:5d:ab:f4:d3:5a:b1:be:e1:80:8c:a6:
ea:07:7f:f7:82:24:c1:96:df:d3:4d:40:aa:1f:34:
9c:3c:56:8d:85:88:6e:28:27:46:22:77:cb:e5:2d:
52:55:98:47:3a:3b:6a:d9:c0:33:00:ba:df:3e:cd:
14:9a:e8:08:f2:37:72:36:4a:bd:c9:d7:0f:b0:79:
cc:aa:ce:c8:36:7f:65:ec:7a:f9:39:7b:2d:9a:18:
83:41:ba:8b:fe:25:72:2c:33:89:c6:eb:18:5e:10:
e8:07:65:10:a9:6f:0d:16:8d:94:e2:a3:c3:cc:26:
09:52:1d:47:7c:8a:0a:86:09:bd:db:46:ff:ec:08:
5f:bc:fd:a3:ab:e0:ea:1f:e0:2b:04:9b:ad:1a:95:
7f:4a:71:90:58:5e:ec:31:a1:5c:dc:85:55:af:51:
74:de:38:97:90:3a:8f:8a:0f:08:50:84:65:e8:ae:
9f:a3:f9:4f:23:84:63:45:35:1d:a1:63:4b:d1:38:
ae:26:bf:1b:fa:45:bd:91:85:1c:ab:a8:bf:93:34:
be:1f:90:b2:6e:34:92:c6:b9:be:9e:cb:44:a9:48:
66:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A1:1F:57:E1:33:DA:DF:5F:7E:63:CD:F3:45:44:70:97:20:4F:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D02DF34ECDE211EF9B037455762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.181.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e2:d6:00:73:df:92:e5:b5:62:34:d1:b2:2c:de:13:e0:5b:
37:2b:2f:69:b1:0b:48:f8:af:1e:1d:bf:ef:7c:33:13:9e:03:
6a:db:86:27:0c:c4:5b:f7:bc:b5:f3:af:3a:4b:f5:6a:d1:00:
39:30:b8:56:a2:8c:db:95:fc:18:33:e3:1d:58:9a:0a:9c:1f:
b1:9b:1c:f4:3e:07:76:fc:18:cb:38:9f:d2:f9:7b:cf:7b:99:
1c:e7:88:30:6f:8c:56:65:08:52:32:14:85:1a:36:73:8c:5e:
e7:5b:ae:65:e5:fa:a3:07:30:1f:a4:75:00:3e:e2:db:a0:d4:
1d:82:e4:d5:37:48:cd:ac:d5:c2:7f:63:f2:e7:d8:83:de:24:
d7:98:60:3b:07:a1:d0:35:4e:79:17:4e:40:5e:ab:15:11:b7:
91:b7:8b:b5:d8:0e:98:85:e0:d0:e1:3f:a0:ab:6d:2d:05:d5:
2e:4d:0c:16:69:fc:2c:d8:93:a7:39:ca:ea:f3:8f:5e:50:16:
da:21:91:8f:4d:68:b4:51:f4:a6:a2:d0:a1:56:05:a2:b0:20:
7d:14:aa:e7:b6:1f:00:df:10:7d:18:4c:06:20:05:1a:b2:04:
7c:0c:cf:2c:97:5a:2e:f1:89:0c:be:fd:a1:e5:9d:dd:78:d8:
97:76:88:a9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATfNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MTcwNTQ2WhcNMjYwMTAzMTcwNTQ2WjAYMRYw
FAYDVQQDEw02NzdlYjA2Zi05MmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqFPZEOukCs2/KQYOh5sXdT9T/n1p6ia0fMryMb/7RxGxXav001qxvuGA
jKbqB3/3giTBlt/TTUCqHzScPFaNhYhuKCdGInfL5S1SVZhHOjtq2cAzALrfPs0U
mugI8jdyNkq9ydcPsHnMqs7INn9l7Hr5OXstmhiDQbqL/iVyLDOJxusYXhDoB2UQ
qW8NFo2U4qPDzCYJUh1HfIoKhgm920b/7AhfvP2jq+DqH+ArBJutGpV/SnGQWF7s
MaFc3IVVr1F03jiXkDqPig8IUIRl6K6fo/lPI4RjRTUdoWNL0TiuJr8b+kW9kYUc
q6i/kzS+H5CybjSSxrm+nstEqUhmHQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPuh
H1fhM9rfX35jzfNFRHCXIE9lMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMDJERjM0RUNERTIxMUVGOUIwMzc0NTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlm1MA0GCSqGSIb3DQEB
CwUAA4IBAQCo4tYAc9+S5bViNNGyLN4T4Fs3Ky9psQtI+K8eHb/vfDMTngNq24Yn
DMRb97y18686S/Vq0QA5MLhWoozblfwYM+MdWJoKnB+xmxz0Pgd2/BjLOJ/S+XvP
e5kc54gwb4xWZQhSMhSFGjZzjF7nW65l5fqjBzAfpHUAPuLboNQdguTVN0jNrNXC
f2Py59iD3iTXmGA7B6HQNU55F05AXqsVEbeRt4u12A6YheDQ4T+gq20tBdUuTQwW
afws2JOnOcrq849eUBbaIZGPTWi0UfSmotChVgWisCB9FKrnth8A3xB9GEwGIAUa
sgR8DM8sl1ou8YkMvv2h5Z3deNiXdoip
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:26 2025 by rpki-client