Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7AA70BAC34C11EFAEED8B85762E951A.roa
File: E7AA70BAC34C11EFAEED8B85762E951A.roa (raw, json)
Hash identifier: EaqIXP/NxrTqbjEGmK1TPN0UgEphlvlibB6AG0b29Bo=
Subject key identifier: CE:29:3E:D7:06:E2:28:07:7B:EB:EA:5B:96:69:2B:5C:B3:4E:94:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012581
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7AA70BAC34C11EFAEED8B85762E951A.roa
Signing time: Thu 26 Dec 2024 05:47:34 +0000
ROA not before: Thu 26 Dec 2024 05:47:31 +0000
ROA not after: Thu 11 Dec 2025 05:47:31 +0000
asID: 984
IP address blocks: 154.211.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75137 (0x12581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 05:47:31 2024 GMT
Not After : Dec 11 05:47:31 2025 GMT
Subject: CN=676cedf6-7c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:86:5c:fb:f0:5c:16:fb:a9:87:25:4d:fa:
ba:10:1f:27:4c:e6:40:68:28:aa:21:06:b2:c3:a5:
f4:55:d5:d8:59:b1:51:cc:1f:68:f5:24:a1:17:59:
db:8c:3e:08:64:bb:b1:72:54:57:31:53:7b:84:66:
22:72:a6:1e:90:9b:66:ac:72:fa:8e:2a:81:f4:0d:
ed:75:81:e7:38:5b:a4:3e:94:29:5c:57:e5:f7:d0:
de:58:3a:20:32:51:80:83:cb:90:77:80:5f:3d:24:
7a:aa:d4:91:b1:b0:d1:de:f9:0a:30:dc:8e:3c:7d:
88:c2:f9:3a:44:1d:c5:a7:ed:32:33:99:c9:aa:ef:
c0:18:cf:c9:3f:f6:ef:88:e3:f2:bf:a7:96:76:54:
f1:bf:43:57:16:b2:f0:84:ba:67:58:38:9b:87:ed:
5a:67:80:cd:df:2a:43:ee:da:41:14:6f:a2:02:c5:
f1:f3:ff:a4:ac:20:59:f2:90:82:df:69:bc:07:20:
36:ab:88:ab:36:6c:d6:37:99:5f:bd:2e:b4:f0:17:
0d:47:39:c5:31:9c:9f:5b:65:91:92:e4:ba:b4:6e:
d6:86:75:5d:7f:a8:10:12:9b:19:2a:3d:30:1e:e1:
a4:05:8c:eb:e9:b6:3e:e0:dd:0a:0d:ca:69:5f:70:
79:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:29:3E:D7:06:E2:28:07:7B:EB:EA:5B:96:69:2B:5C:B3:4E:94:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7AA70BAC34C11EFAEED8B85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.215.0/24
Signature Algorithm: sha256WithRSAEncryption
08:20:64:fe:da:40:4c:de:28:6f:cc:73:44:02:a7:74:f3:cc:
04:56:5d:ef:44:3d:5f:2b:70:a9:4b:9b:69:73:fe:78:5b:96:
c1:62:3f:fa:88:09:23:83:6a:e2:a9:48:8d:92:bc:07:b9:b6:
fc:09:34:30:b5:ac:52:bc:72:85:c8:54:6a:8e:29:05:3c:1a:
d0:2d:76:7d:8a:04:1f:a3:82:09:20:c0:4f:35:4b:29:ce:bc:
7f:66:7c:0f:8b:8f:0f:1b:ec:7d:25:17:df:0e:68:6d:32:76:
54:72:0e:4c:ed:4d:d9:15:ca:12:ff:ed:4a:9f:7c:96:e4:73:
f5:bf:25:04:3b:f9:ca:1e:e9:24:bb:b9:d5:85:f1:83:4d:eb:
90:40:7e:98:c6:20:2d:6d:0e:30:fc:69:d1:cd:e8:0a:8c:53:
66:d6:e8:48:18:96:72:42:dc:4d:f8:49:c0:80:b8:a0:82:79:
b8:c7:8f:6d:1e:60:80:f2:a3:5d:af:ce:ff:b0:37:82:9f:41:
10:c6:0b:f2:0f:d3:75:90:ae:d1:54:16:59:14:6c:56:97:49:
58:65:84:f8:fe:94:37:97:4d:0a:16:a7:a7:2c:d7:f3:7b:67:
c8:9a:b7:e1:31:49:3b:8c:e5:94:ea:42:5c:3f:82:11:ad:dd:
59:c0:bb:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASWBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDU0NzMxWhcNMjUxMjExMDU0NzMxWjAYMRYw
FAYDVQQDEw02NzZjZWRmNi03YzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvC6GXPvwXBb7qYclTfq6EB8nTOZAaCiqIQayw6X0VdXYWbFRzB9o9SSh
F1nbjD4IZLuxclRXMVN7hGYicqYekJtmrHL6jiqB9A3tdYHnOFukPpQpXFfl99De
WDogMlGAg8uQd4BfPSR6qtSRsbDR3vkKMNyOPH2Iwvk6RB3Fp+0yM5nJqu/AGM/J
P/bviOPyv6eWdlTxv0NXFrLwhLpnWDibh+1aZ4DN3ypD7tpBFG+iAsXx8/+krCBZ
8pCC32m8ByA2q4irNmzWN5lfvS608BcNRznFMZyfW2WRkuS6tG7WhnVdf6gQEpsZ
Kj0wHuGkBYzr6bY+4N0KDcppX3B52wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM4p
PtcG4igHe+vqW5ZpK1yzTpQfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FN0FBNzBCQUMzNEMxMUVGQUVFRDhCODU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtPXMA0GCSqGSIb3DQEB
CwUAA4IBAQAIIGT+2kBM3ihvzHNEAqd088wEVl3vRD1fK3CpS5tpc/54W5bBYj/6
iAkjg2riqUiNkrwHubb8CTQwtaxSvHKFyFRqjikFPBrQLXZ9igQfo4IJIMBPNUsp
zrx/ZnwPi48PG+x9JRffDmhtMnZUcg5M7U3ZFcoS/+1Kn3yW5HP1vyUEO/nKHukk
u7nVhfGDTeuQQH6YxiAtbQ4w/GnRzegKjFNm1uhIGJZyQtxN+EnAgLiggnm4x49t
HmCA8qNdr87/sDeCn0EQxgvyD9N1kK7RVBZZFGxWl0lYZYT4/pQ3l00KFqenLNfz
e2fImrfhMUk7jOWU6kJcP4IRrd1ZwLu2
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:50 2025 by rpki-client