Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9F61430C1B811EFA8B7B272762E951A.roa
File: F9F61430C1B811EFA8B7B272762E951A.roa (raw, json)
Hash identifier: 1D2ihYT5HrWxuJSRngvE4DBmdFgk5jRifCgT0fhcY0c=
Subject key identifier: D0:53:30:57:37:C8:D2:33:24:57:B6:D4:CF:FD:DA:EA:63:88:4D:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9F61430C1B811EFA8B7B272762E951A.roa
Signing time: Tue 24 Dec 2024 05:36:08 +0000
ROA not before: Tue 24 Dec 2024 05:36:05 +0000
ROA not after: Wed 10 Dec 2025 05:36:05 +0000
asID: 984
IP address blocks: 154.193.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74195 (0x121d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:36:05 2024 GMT
Not After : Dec 10 05:36:05 2025 GMT
Subject: CN=676a4848-c1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:82:93:23:39:94:e4:b8:47:13:95:15:13:a4:
a3:cf:f2:bb:f3:89:ed:c9:3e:7d:f1:0b:a2:80:09:
79:6e:14:62:c5:8b:d3:6d:c6:d2:96:61:35:2a:43:
35:f4:e4:d7:21:32:6a:f7:60:3e:3e:5a:7f:cc:0a:
0a:71:a1:96:3e:66:e0:c9:fe:03:e4:b3:16:92:bd:
60:bb:28:07:8d:a6:ab:cd:09:96:cd:03:76:ca:4d:
bb:02:0b:4c:33:6b:96:fd:8f:13:03:84:36:02:2d:
76:4a:e0:b3:20:77:82:02:d0:ac:60:f8:e2:0e:27:
8b:c5:4a:38:99:ca:17:39:32:e4:f3:b4:f7:60:ec:
01:77:a7:73:80:8e:fd:f5:3d:1c:46:b1:a6:fb:f6:
3e:31:a8:e6:68:03:0f:20:2c:27:7b:08:1d:a9:87:
19:ee:b1:02:83:df:4b:67:1a:d7:f8:41:23:94:34:
59:3f:46:a1:28:7a:ad:fe:8c:98:88:b0:62:b7:20:
6c:3b:43:15:a6:52:6e:60:3c:0d:bf:50:8c:3f:88:
50:39:ea:7e:39:99:9b:64:c1:1a:de:48:b3:06:40:
db:f3:36:1d:f8:3a:0f:1e:dc:3f:28:73:5d:b6:0b:
a1:fc:f0:17:66:29:fc:41:3c:e6:78:6b:e5:fe:b6:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:53:30:57:37:C8:D2:33:24:57:B6:D4:CF:FD:DA:EA:63:88:4D:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9F61430C1B811EFA8B7B272762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.163.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:10:62:7c:f0:4c:0c:62:4f:40:40:61:bf:e5:d7:57:31:46:
49:67:93:cc:aa:8f:24:61:66:60:a8:19:21:c9:07:d7:38:c9:
31:ed:87:74:b1:5b:43:5a:ae:4e:0c:35:56:b1:10:13:74:c2:
b5:ed:0a:9e:15:72:9d:51:c2:90:d1:ea:dc:68:71:c8:dc:a3:
e1:67:e0:a8:2b:8e:20:20:a3:bc:7a:9d:35:c2:41:2a:21:b4:
75:e6:6d:4a:11:67:66:93:ee:d0:90:76:fd:e3:31:2a:63:f8:
91:f3:c0:10:82:1f:0a:dc:68:ce:d0:94:1f:81:bb:11:c1:de:
72:e8:8c:c1:a7:87:b0:27:40:db:58:1c:3f:2a:bd:be:88:a5:
e0:b5:58:5f:93:99:ad:5d:78:bb:17:f0:17:e5:73:fb:52:9c:
5c:d8:79:f6:83:94:e5:5c:45:c0:b4:ec:00:54:43:29:9f:09:
d7:cc:24:b2:d9:94:3d:0e:0f:b8:33:2f:38:86:43:1e:9d:41:
76:f9:56:77:df:68:9c:3f:3d:23:ce:a1:35:a4:e5:35:a2:05:
f7:91:d0:85:04:12:e5:e2:1d:e5:99:3f:da:a5:1d:71:80:ac:
1d:c4:fc:9d:44:de:58:ca:eb:88:5f:9e:d2:ed:44:4e:2b:4c:
db:18:f8:5f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASHTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDUzNjA1WhcNMjUxMjEwMDUzNjA1WjAYMRYw
FAYDVQQDEw02NzZhNDg0OC1jMWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1YKTIzmU5LhHE5UVE6Sjz/K784ntyT598QuigAl5bhRixYvTbcbSlmE1
KkM19OTXITJq92A+Plp/zAoKcaGWPmbgyf4D5LMWkr1guygHjaarzQmWzQN2yk27
AgtMM2uW/Y8TA4Q2Ai12SuCzIHeCAtCsYPjiDieLxUo4mcoXOTLk87T3YOwBd6dz
gI799T0cRrGm+/Y+MajmaAMPICwnewgdqYcZ7rECg99LZxrX+EEjlDRZP0ahKHqt
/oyYiLBityBsO0MVplJuYDwNv1CMP4hQOep+OZmbZMEa3kizBkDb8zYd+DoPHtw/
KHNdtguh/PAXZin8QTzmeGvl/rZwPwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNBT
MFc3yNIzJFe21M/92upjiE0LMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GOUY2MTQzMEMxQjgxMUVGQThCN0IyNzI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsGjMA0GCSqGSIb3DQEB
CwUAA4IBAQCdEGJ88EwMYk9AQGG/5ddXMUZJZ5PMqo8kYWZgqBkhyQfXOMkx7Yd0
sVtDWq5ODDVWsRATdMK17QqeFXKdUcKQ0ercaHHI3KPhZ+CoK44gIKO8ep01wkEq
IbR15m1KEWdmk+7QkHb94zEqY/iR88AQgh8K3GjO0JQfgbsRwd5y6IzBp4ewJ0Db
WBw/Kr2+iKXgtVhfk5mtXXi7F/AX5XP7Upxc2Hn2g5TlXEXAtOwAVEMpnwnXzCSy
2ZQ9Dg+4My84hkMenUF2+VZ332icPz0jzqE1pOU1ogX3kdCFBBLl4h3lmT/apR1x
gKwdxPydRN5YyuuIX57S7UROK0zbGPhf
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:52:59 2025 by rpki-client