Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2276D50F81811EF995FBE9C762E951A.roa
File: D2276D50F81811EF995FBE9C762E951A.roa (raw, json)
Hash identifier: fN7wF9/pFvPvjRGhW9t5srngSwaTinU3H1K6dA9TipU=
Subject key identifier: 8F:FF:CA:D5:67:09:E3:36:F1:E3:E4:4A:6B:A1:22:0A:0E:70:01:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017006
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2276D50F81811EF995FBE9C762E951A.roa
Signing time: Mon 03 Mar 2025 10:18:16 +0000
ROA not before: Mon 03 Mar 2025 10:18:12 +0000
ROA not after: Wed 30 Apr 2025 10:18:12 +0000
asID: 63139
IP address blocks: 154.94.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94214 (0x17006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 10:18:12 2025 GMT
Not After : Apr 30 10:18:12 2025 GMT
Subject: CN=67c581e8-daf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:0e:5d:e0:c5:d8:e2:5e:35:f8:d4:5e:86:
45:7e:67:c1:81:7c:7a:43:45:98:4a:5f:8b:d2:6a:
67:ec:e4:19:de:fd:a2:58:93:02:bf:e2:63:fa:25:
5e:52:9f:37:91:98:e0:ce:11:f7:81:ba:89:a9:03:
b2:ae:c1:04:bb:90:36:38:58:1d:89:05:8b:b1:31:
d5:68:ee:7e:27:70:c2:04:62:dd:b6:b3:ca:2d:85:
47:ba:af:9d:c3:28:c6:06:88:db:9b:08:15:09:2a:
b3:1f:3f:28:4c:19:f1:e0:03:0c:af:33:69:72:01:
26:ba:47:12:76:34:de:77:8b:c8:15:f1:54:d3:d5:
f3:e6:97:b5:1f:62:c5:ba:ca:53:e4:68:c0:cd:4d:
b2:cd:ab:83:d8:cb:9e:8e:e0:80:c3:77:62:3b:5d:
15:7e:8b:c9:92:8a:08:6a:ba:e2:99:96:1c:cf:ad:
7a:d2:a2:c6:e1:45:bb:4b:02:35:4c:3b:c2:5e:85:
5b:11:51:e0:6a:a2:b6:96:50:d2:03:67:68:9e:03:
c3:30:d2:5b:48:04:2e:16:9a:85:de:b0:9e:14:67:
4e:ee:5d:15:1e:de:6d:96:05:58:9e:5e:50:f1:0d:
6a:6e:16:7c:76:b3:f4:d9:55:af:77:5d:d3:88:25:
a3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FF:CA:D5:67:09:E3:36:F1:E3:E4:4A:6B:A1:22:0A:0E:70:01:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2276D50F81811EF995FBE9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.127.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:4c:b5:83:92:c5:c3:87:7f:fd:e3:f2:6f:f4:36:b7:ec:1a:
46:37:de:24:b2:35:e9:fb:1f:a5:77:43:76:29:26:de:72:ad:
68:25:73:fc:95:a2:45:dc:6b:f5:41:b1:2f:29:92:b7:03:68:
79:36:f1:8a:cb:21:c6:0b:97:7a:29:0c:51:05:38:eb:e5:e6:
d1:1c:dd:e8:07:e1:97:0e:86:39:8d:fe:f4:0b:9b:04:d2:ec:
12:cf:77:98:ad:4b:18:a9:0e:e0:04:6c:23:24:03:7e:e3:8a:
1a:07:c9:bb:a6:f9:2e:8f:9a:24:7d:5f:23:57:00:cb:9f:62:
89:a9:51:da:39:f8:6a:ea:e8:6c:c4:53:4b:8f:63:1d:87:a2:
d9:f1:1a:6a:fc:6e:5e:48:51:1e:39:ff:50:df:7d:62:46:f4:
9b:d5:03:64:31:6d:40:d8:90:48:f6:22:bd:e9:43:2d:60:9c:
f0:b8:0a:71:ed:aa:a8:42:ae:b9:7e:89:6b:6b:78:02:15:d3:
51:14:dc:ca:59:46:b4:ff:fe:41:f3:2c:1f:71:35:f9:8d:07:
94:e3:9e:57:02:c1:cc:79:1a:d9:0f:9a:52:a9:e9:e0:29:73:
65:ac:96:48:f7:22:bc:ce:55:d1:7d:76:16:9e:7d:12:14:6a:
5a:e5:83:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXAGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAzMTAxODEyWhcNMjUwNDMwMTAxODEyWjAYMRYw
FAYDVQQDEw02N2M1ODFlOC1kYWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArWYOXeDF2OJeNfjUXoZFfmfBgXx6Q0WYSl+L0mpn7OQZ3v2iWJMCv+Jj
+iVeUp83kZjgzhH3gbqJqQOyrsEEu5A2OFgdiQWLsTHVaO5+J3DCBGLdtrPKLYVH
uq+dwyjGBojbmwgVCSqzHz8oTBnx4AMMrzNpcgEmukcSdjTed4vIFfFU09Xz5pe1
H2LFuspT5GjAzU2yzauD2MuejuCAw3diO10VfovJkooIarrimZYcz6160qLG4UW7
SwI1TDvCXoVbEVHgaqK2llDSA2dongPDMNJbSAQuFpqF3rCeFGdO7l0VHt5tlgVY
nl5Q8Q1qbhZ8drP02VWvd13TiCWjfwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFI//
ytVnCeM28ePkSmuhIgoOcAGYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMjI3NkQ1MEY4MTgxMUVGOTk1RkJFOUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5/MA0GCSqGSIb3DQEB
CwUAA4IBAQC3TLWDksXDh3/94/Jv9Da37BpGN94ksjXp+x+ld0N2KSbecq1oJXP8
laJF3Gv1QbEvKZK3A2h5NvGKyyHGC5d6KQxRBTjr5ebRHN3oB+GXDoY5jf70C5sE
0uwSz3eYrUsYqQ7gBGwjJAN+44oaB8m7pvkuj5okfV8jVwDLn2KJqVHaOfhq6uhs
xFNLj2Mdh6LZ8Rpq/G5eSFEeOf9Q331iRvSb1QNkMW1A2JBI9iK96UMtYJzwuApx
7aqoQq65folra3gCFdNRFNzKWUa0//5B8ywfcTX5jQeU455XAsHMeRrZD5pSqeng
KXNlrJZI9yK8zlXRfXYWnn0SFGpa5YN7
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:45:23 2025 by rpki-client