Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9657FF4C47611EFA3634E6B762E951A.roa
File: F9657FF4C47611EFA3634E6B762E951A.roa (raw, json)
Hash identifier: 2GC50lWFC2HPb0SO/Y8m3/G8KvkV3vpESHaQ1ZjIhJg=
Subject key identifier: 80:F4:9B:15:A2:05:D3:A3:D4:6C:28:D0:19:27:77:D5:2C:CA:FA:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012AD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9657FF4C47611EFA3634E6B762E951A.roa
Signing time: Fri 27 Dec 2024 17:21:14 +0000
ROA not before: Fri 27 Dec 2024 17:21:11 +0000
ROA not after: Wed 24 Dec 2025 17:21:11 +0000
asID: 137184
IP address blocks: 154.198.4.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76496 (0x12ad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 17:21:11 2024 GMT
Not After : Dec 24 17:21:11 2025 GMT
Subject: CN=676ee20a-6672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:1d:ff:91:e4:f1:88:1e:4c:45:59:d2:f8:
c1:e4:b4:36:38:91:fd:71:7d:44:dc:b9:6e:93:c2:
59:5e:5a:e2:45:9c:70:ef:7f:f9:3b:a1:a1:08:c6:
65:43:ae:4a:c4:ab:49:ee:9e:ba:e2:de:44:59:23:
15:00:20:e9:6b:c9:7f:34:fa:8b:b3:1a:8f:f4:b3:
0d:77:2c:62:1c:23:86:8d:7e:cf:33:b1:fa:f6:a5:
b4:42:a6:36:9f:8a:4b:ec:39:ee:ba:6f:85:49:0e:
8c:a9:ee:e5:92:59:20:5f:ff:3f:24:5b:aa:71:08:
48:99:b1:c9:4d:45:f8:0f:ea:69:40:5d:a8:a0:35:
25:26:72:35:eb:bc:fa:12:9d:be:ee:4d:31:1b:a1:
69:80:c1:4a:b5:b1:bd:6c:49:98:a3:dc:05:ab:7b:
ed:52:75:fd:58:49:6f:6a:0a:ac:36:cb:fb:9d:a5:
a2:08:bf:4f:ea:7e:5d:fd:d7:78:51:34:1d:39:61:
75:cc:65:87:54:51:22:60:4e:08:b4:13:59:5f:62:
da:ee:b5:8b:a8:a5:49:0a:26:19:dc:b4:5d:fa:82:
70:2c:46:1e:50:0b:b5:d0:fa:ef:3b:29:c4:cb:ae:
0b:8b:66:f9:71:55:33:d9:22:43:57:1a:32:0a:d5:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F4:9B:15:A2:05:D3:A3:D4:6C:28:D0:19:27:77:D5:2C:CA:FA:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9657FF4C47611EFA3634E6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.4.0/23
Signature Algorithm: sha256WithRSAEncryption
25:cc:90:79:ea:e5:3e:31:e0:07:ea:f4:dd:65:b3:05:6c:45:
26:92:50:db:36:76:ac:72:ec:9c:a7:a9:92:99:3e:c2:18:23:
29:70:65:16:b6:76:52:54:84:e0:be:94:23:88:82:f9:76:f0:
49:01:7a:9f:60:11:95:78:cc:b6:2b:64:40:6c:4f:e2:36:2c:
58:1a:05:bc:2b:d0:54:90:3e:ff:97:1e:9e:f7:6a:9e:ff:70:
aa:c5:d6:ed:24:56:99:3a:fd:78:8f:3a:58:ec:79:20:6f:10:
67:09:fe:26:d2:db:14:2b:ce:c6:28:b4:f3:d0:45:54:da:8a:
15:84:d9:87:c4:f4:6b:6d:ae:b6:c9:ff:33:d0:8d:a0:2c:35:
d7:31:6f:4e:6d:8d:f1:2e:51:81:cd:bd:29:f2:b7:73:e0:eb:
09:a8:4c:1d:8e:87:35:9f:df:ee:05:8a:8e:53:9c:09:b7:e7:
f9:cb:53:a2:00:32:8b:7f:2e:b9:13:b2:a8:4a:01:78:92:0e:
0d:83:16:ac:44:e8:04:28:84:64:6c:1b:46:a9:1d:fc:c8:a1:
b5:1f:f0:28:93:68:11:11:00:d7:fd:77:48:79:20:1d:4b:6a:
b6:b5:c7:9d:92:9f:4b:a6:c8:02:9a:c4:18:03:61:ca:7f:e8:
ad:08:a4:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASrQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MTcyMTExWhcNMjUxMjI0MTcyMTExWjAYMRYw
FAYDVQQDEw02NzZlZTIwYS02NjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt/Yd/5Hk8YgeTEVZ0vjB5LQ2OJH9cX1E3Lluk8JZXlriRZxw73/5O6Gh
CMZlQ65KxKtJ7p664t5EWSMVACDpa8l/NPqLsxqP9LMNdyxiHCOGjX7PM7H69qW0
QqY2n4pL7Dnuum+FSQ6Mqe7lklkgX/8/JFuqcQhImbHJTUX4D+ppQF2ooDUlJnI1
67z6Ep2+7k0xG6FpgMFKtbG9bEmYo9wFq3vtUnX9WElvagqsNsv7naWiCL9P6n5d
/dd4UTQdOWF1zGWHVFEiYE4ItBNZX2La7rWLqKVJCiYZ3LRd+oJwLEYeUAu10Prv
OynEy64Li2b5cVUz2SJDVxoyCtXgDwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFID0
mxWiBdOj1Gwo0Bknd9UsyvqRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GOTY1N0ZGNEM0NzYxMUVGQTM2MzRFNkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsYEMA0GCSqGSIb3DQEB
CwUAA4IBAQAlzJB56uU+MeAH6vTdZbMFbEUmklDbNnascuycp6mSmT7CGCMpcGUW
tnZSVITgvpQjiIL5dvBJAXqfYBGVeMy2K2RAbE/iNixYGgW8K9BUkD7/lx6e92qe
/3CqxdbtJFaZOv14jzpY7HkgbxBnCf4m0tsUK87GKLTz0EVU2ooVhNmHxPRrba62
yf8z0I2gLDXXMW9ObY3xLlGBzb0p8rdz4OsJqEwdjoc1n9/uBYqOU5wJt+f5y1Oi
ADKLfy65E7KoSgF4kg4NgxasROgEKIRkbBtGqR38yKG1H/Aok2gREQDX/XdIeSAd
S2q2tcedkp9LpsgCmsQYA2HKf+itCKTv
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:49 2025 by rpki-client