Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5F5E7B4C52B11EFBDD39666762E951A.roa
File: E5F5E7B4C52B11EFBDD39666762E951A.roa (raw, json)
Hash identifier: mT6oEtUpBQ+Z82gOwpwqd6q7X1xgtKKnymXtdh8vj68=
Subject key identifier: DE:D5:EC:41:BE:2E:04:B5:17:E7:7B:52:2F:41:04:C0:7A:98:B9:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BBD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5F5E7B4C52B11EFBDD39666762E951A.roa
Signing time: Sat 28 Dec 2024 14:56:20 +0000
ROA not before: Sat 28 Dec 2024 14:56:17 +0000
ROA not after: Fri 12 Dec 2025 14:56:17 +0000
asID: 984
IP address blocks: 154.204.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76733 (0x12bbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:56:17 2024 GMT
Not After : Dec 12 14:56:17 2025 GMT
Subject: CN=67701194-5b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ca:dc:4a:3b:af:62:27:bb:8e:a6:21:f3:a7:
2a:9d:a4:f0:8c:8c:39:ea:5e:7c:52:11:d6:9f:e9:
63:b1:01:7c:36:99:42:56:6b:de:bc:49:d9:e3:96:
db:02:60:69:38:03:99:f9:45:06:f6:e7:1c:82:95:
55:b0:7e:6a:7c:00:12:6e:84:ca:84:c0:9b:ad:31:
6d:8c:01:87:07:9f:fe:9b:dc:01:cd:ee:fc:a3:3a:
8a:43:a8:f4:c5:96:33:8f:35:b3:2b:53:cc:78:46:
13:28:6f:21:e5:9b:e2:fa:df:f0:fc:cb:1d:54:2f:
10:e3:8c:58:8a:94:ae:71:df:2e:0e:57:9f:d6:99:
67:f7:ca:ca:ac:0a:bf:93:67:bb:83:08:90:0e:c1:
1c:ba:5d:04:4a:12:4f:83:67:00:77:88:ac:db:4d:
bf:28:e5:79:6d:07:6c:8c:7b:2c:6b:6e:13:1f:0a:
45:d3:2e:22:d5:23:a5:5b:41:33:46:51:74:a0:92:
7a:8b:06:3f:d2:cb:4d:2b:86:5b:97:6d:6b:9b:3b:
d9:d1:64:3e:38:64:0d:55:28:1c:69:3c:05:8c:cc:
48:9f:89:3c:5d:97:8e:4a:93:7a:fe:a5:1d:25:60:
b7:1f:c7:48:99:88:9c:c5:e3:e3:39:2b:54:a9:f2:
30:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D5:EC:41:BE:2E:04:B5:17:E7:7B:52:2F:41:04:C0:7A:98:B9:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5F5E7B4C52B11EFBDD39666762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.71.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:a2:38:39:71:95:7e:43:50:0a:44:05:7f:5e:c8:6e:c1:27:
56:5f:ec:88:54:87:a8:44:06:4a:05:c9:b2:c4:3b:bd:1a:77:
81:73:f5:30:cc:95:8e:bc:3a:24:1c:b8:b7:15:19:df:7c:89:
3e:8e:d4:67:6e:ea:4c:34:ba:80:cd:15:bf:3c:aa:0b:03:39:
9b:a7:9b:d9:89:e3:f0:54:71:ba:96:53:d5:8a:bf:8f:c7:c4:
88:92:a4:ec:68:62:30:d8:d3:33:f5:de:2f:27:fe:28:76:2c:
5e:c5:d9:39:0a:5b:4d:66:7e:45:2b:cb:7e:ee:1d:bd:af:a7:
45:a2:8b:72:57:ad:94:33:45:7e:9b:07:f0:3d:94:6d:8b:14:
1c:b6:dd:e9:ed:84:c3:62:4e:0c:f7:af:be:d4:d4:cf:7b:2b:
86:bb:86:97:80:5a:2d:23:93:33:e1:4f:8b:db:ed:0d:57:10:
c1:c3:d5:ff:81:6c:54:d1:51:f2:20:b6:61:00:0e:3e:71:b7:
06:85:74:b5:bd:63:90:af:a7:df:35:58:07:eb:04:27:cc:6a:
18:f7:98:b4:2e:4d:84:8d:08:dc:92:ff:1d:41:db:a8:fd:09:
e1:89:bb:80:3e:4a:b9:ff:0a:dc:1c:8b:e4:3c:3b:6a:8c:06:
55:c6:af:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASu9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTQ1NjE3WhcNMjUxMjEyMTQ1NjE3WjAYMRYw
FAYDVQQDEw02NzcwMTE5NC01YjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3crcSjuvYie7jqYh86cqnaTwjIw56l58UhHWn+ljsQF8NplCVmvevEnZ
45bbAmBpOAOZ+UUG9uccgpVVsH5qfAASboTKhMCbrTFtjAGHB5/+m9wBze78ozqK
Q6j0xZYzjzWzK1PMeEYTKG8h5Zvi+t/w/MsdVC8Q44xYipSucd8uDlef1pln98rK
rAq/k2e7gwiQDsEcul0EShJPg2cAd4is202/KOV5bQdsjHssa24THwpF0y4i1SOl
W0EzRlF0oJJ6iwY/0stNK4Zbl21rmzvZ0WQ+OGQNVSgcaTwFjMxIn4k8XZeOSpN6
/qUdJWC3H8dImYicxePjOStUqfIwAQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN7V
7EG+LgS1F+d7Ui9BBMB6mLmnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNUY1RTdCNEM1MkIxMUVGQkREMzk2NjY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsxHMA0GCSqGSIb3DQEB
CwUAA4IBAQC6ojg5cZV+Q1AKRAV/XshuwSdWX+yIVIeoRAZKBcmyxDu9GneBc/Uw
zJWOvDokHLi3FRnffIk+jtRnbupMNLqAzRW/PKoLAzmbp5vZiePwVHG6llPVir+P
x8SIkqTsaGIw2NMz9d4vJ/4odixexdk5CltNZn5FK8t+7h29r6dFootyV62UM0V+
mwfwPZRtixQctt3p7YTDYk4M96++1NTPeyuGu4aXgFotI5Mz4U+L2+0NVxDBw9X/
gWxU0VHyILZhAA4+cbcGhXS1vWOQr6ffNVgH6wQnzGoY95i0Lk2EjQjckv8dQduo
/QnhibuAPkq5/wrcHIvkPDtqjAZVxq+B
-----END CERTIFICATE-----
Generated at Thu Apr 10 16:42:13 2025 by rpki-client