Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0845E8CC0C711EF86A3BE6B762E951A.roa
File: D0845E8CC0C711EF86A3BE6B762E951A.roa (raw, json)
Hash identifier: qjyJKclFcaLCEtC9mJs7eIUWpVJS1Jwe9/9HKudljtI=
Subject key identifier: 97:4E:B3:25:48:42:21:19:B5:82:3A:ED:7D:8A:96:7B:67:F9:15:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011DCC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0845E8CC0C711EF86A3BE6B762E951A.roa
Signing time: Mon 23 Dec 2024 00:49:50 +0000
ROA not before: Mon 23 Dec 2024 00:00:47 +0000
ROA not after: Wed 10 Dec 2025 00:00:47 +0000
asID: 984
IP address blocks: 154.82.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73164 (0x11dcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 00:00:47 2024 GMT
Not After : Dec 10 00:00:47 2025 GMT
Subject: CN=6768b3ae-80dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:e7:47:bf:81:3b:1c:94:8a:05:da:45:90:
8b:d7:63:fd:e2:ed:a3:f0:6d:9d:ce:09:a3:d6:1b:
1b:71:c7:e9:1e:7c:2a:5c:01:12:c9:1a:60:d6:5e:
63:24:91:fb:2c:4e:1c:af:01:8f:b3:77:5f:9a:c4:
3a:75:b9:2c:a9:ac:f2:54:2d:c5:00:65:08:93:53:
fe:8c:cb:e6:c0:c5:2c:e2:30:bf:97:af:41:f9:e9:
5a:e3:7c:74:fa:7c:d3:e8:31:c4:85:8f:0a:88:2f:
ea:19:8e:b1:37:52:31:10:4b:ac:2b:2c:1f:c7:6e:
54:b4:84:ae:4f:30:99:3d:00:7e:9e:f9:9f:93:17:
a9:68:15:c4:41:2d:b7:66:7a:0c:b5:9b:21:50:98:
a7:a1:21:ea:25:97:25:7f:b9:64:b9:e5:91:44:41:
56:82:bb:42:13:ce:b5:60:11:df:45:d4:6c:2d:03:
8e:74:75:c1:0e:9f:a2:fc:a7:2d:47:66:a4:7c:b1:
0c:44:d2:01:94:a5:8c:23:dc:fa:30:ae:62:0c:cc:
95:3a:79:2e:df:c3:d2:97:7f:6d:f6:9d:33:00:96:
81:85:07:8b:f7:6e:f4:e6:27:d6:9a:f1:25:5d:bb:
e2:ff:3e:fe:c4:60:2d:07:36:a4:66:66:f6:04:ab:
2c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4E:B3:25:48:42:21:19:B5:82:3A:ED:7D:8A:96:7B:67:F9:15:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0845E8CC0C711EF86A3BE6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.217.0/24
Signature Algorithm: sha256WithRSAEncryption
33:be:de:40:1d:88:ec:cb:ac:e9:b8:e0:db:65:c3:58:19:ce:
d4:06:48:58:da:e1:28:b9:b5:18:5a:90:01:72:3b:26:83:8f:
2d:d3:9b:d7:3a:20:f6:85:a9:6a:ab:80:a3:61:45:62:c3:9e:
6d:33:9e:db:7f:e2:ab:14:97:84:d6:f0:c8:8a:12:1e:40:93:
54:ac:9f:e0:c0:b1:87:4b:82:d4:53:c3:25:39:4d:84:41:97:
d4:a2:06:c9:14:68:9e:c6:36:f2:9a:e1:39:3f:15:69:94:de:
03:67:42:f4:31:3a:5c:71:a4:a4:d3:e8:0d:20:e3:84:29:e0:
7e:69:2c:f3:46:e9:1d:77:b3:60:49:ec:68:79:e8:a0:91:59:
cb:c6:64:51:ab:39:ee:6c:82:43:f5:b0:87:07:0b:aa:c6:47:
f7:81:12:61:38:a4:e2:66:7e:f7:ba:41:bf:f4:3d:5c:1b:64:
7d:67:41:7e:90:88:ab:62:9b:a4:9b:b4:c2:48:24:49:16:8b:
b5:12:e4:4a:22:29:3e:cc:ba:7e:1d:31:28:dd:bc:b3:e2:aa:
86:12:9d:42:2c:eb:13:08:48:8b:7a:0a:c1:4f:de:ad:93:65:
90:ed:ec:ab:6d:fe:44:ad:65:d5:21:da:4e:63:71:86:81:23:
97:ab:f3:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR3MMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDAwMDQ3WhcNMjUxMjEwMDAwMDQ3WjAYMRYw
FAYDVQQDEw02NzY4YjNhZS04MGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt7vnR7+BOxyUigXaRZCL12P94u2j8G2dzgmj1hsbccfpHnwqXAESyRpg
1l5jJJH7LE4crwGPs3dfmsQ6dbksqazyVC3FAGUIk1P+jMvmwMUs4jC/l69B+ela
43x0+nzT6DHEhY8KiC/qGY6xN1IxEEusKywfx25UtISuTzCZPQB+nvmfkxepaBXE
QS23ZnoMtZshUJinoSHqJZclf7lkueWRREFWgrtCE861YBHfRdRsLQOOdHXBDp+i
/KctR2akfLEMRNIBlKWMI9z6MK5iDMyVOnku38PSl39t9p0zAJaBhQeL92705ifW
mvElXbvi/z7+xGAtBzakZmb2BKssiwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJdO
syVIQiEZtYI67X2Klntn+RUpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMDg0NUU4Q0MwQzcxMUVGODZBM0JFNkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlLZMA0GCSqGSIb3DQEB
CwUAA4IBAQAzvt5AHYjsy6zpuODbZcNYGc7UBkhY2uEoubUYWpABcjsmg48t05vX
OiD2halqq4CjYUViw55tM57bf+KrFJeE1vDIihIeQJNUrJ/gwLGHS4LUU8MlOU2E
QZfUogbJFGiexjbymuE5PxVplN4DZ0L0MTpccaSk0+gNIOOEKeB+aSzzRukdd7Ng
SexoeeigkVnLxmRRqznubIJD9bCHBwuqxkf3gRJhOKTiZn73ukG/9D1cG2R9Z0F+
kIirYpukm7TCSCRJFou1EuRKIik+zLp+HTEo3byz4qqGEp1CLOsTCEiLegrBT96t
k2WQ7eyrbf5ErWXVIdpOY3GGgSOXq/Pr
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:43 2025 by rpki-client