Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD5CBDACD2DB11EFB2842751762E951A.roa
File: FD5CBDACD2DB11EFB2842751762E951A.roa (raw, json)
Hash identifier: 8vvjK34GMJuf3rToebCjDvdwOpks3ERjakPmzCmZk3Y=
Subject key identifier: 15:AF:5E:4B:2F:C6:FB:95:4A:46:43:09:00:8C:35:0F:AF:A8:C9:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B65
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD5CBDACD2DB11EFB2842751762E951A.roa
Signing time: Wed 15 Jan 2025 00:59:36 +0000
ROA not before: Wed 15 Jan 2025 00:00:32 +0000
ROA not after: Fri 12 Dec 2025 00:00:32 +0000
asID: 984
IP address blocks: 154.81.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80741 (0x13b65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 00:00:32 2025 GMT
Not After : Dec 12 00:00:32 2025 GMT
Subject: CN=67870878-3cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:22:3d:d5:a3:a3:45:95:a7:56:87:86:6f:b9:
e1:b1:eb:2f:25:0c:3b:79:02:a2:26:33:61:aa:27:
0b:dc:ec:f9:fe:f9:c5:d3:f4:bd:8a:15:1c:bf:71:
3a:02:99:55:f8:a3:f2:00:f3:44:8e:a5:d4:9e:b7:
48:26:74:b3:34:e7:d8:01:59:5e:96:50:e6:ec:38:
6f:10:b0:83:f0:57:95:97:e5:cb:f9:ee:a4:c6:15:
08:d5:a8:99:21:b9:11:74:6b:37:29:0f:d3:55:97:
12:32:8f:49:74:ff:8b:eb:5a:0f:51:2c:38:9e:ca:
ff:3a:11:79:49:c1:53:bd:b6:4f:45:7a:6e:ca:e6:
55:30:5f:58:08:5d:04:54:80:57:b8:30:26:c2:ee:
51:c5:6b:af:f1:09:89:e3:b4:05:eb:15:62:3f:7d:
1a:f3:03:bf:c0:92:4c:d8:ad:20:e4:50:59:60:7f:
b1:eb:22:82:87:f7:37:41:78:78:0a:3b:c3:f6:67:
a2:8c:04:03:74:89:6a:b0:5a:75:0b:3c:90:8b:08:
f3:c9:91:fc:15:3c:87:9b:b3:53:b2:9b:4d:bc:27:
b0:40:00:b9:00:65:15:99:b1:22:38:b6:b6:44:da:
1b:81:8d:bd:88:27:00:a3:cc:88:c0:1c:d3:63:c3:
e2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AF:5E:4B:2F:C6:FB:95:4A:46:43:09:00:8C:35:0F:AF:A8:C9:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD5CBDACD2DB11EFB2842751762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.184.0/24
Signature Algorithm: sha256WithRSAEncryption
03:7c:82:5c:a6:3a:e9:2c:66:0e:8d:58:a8:dd:d2:a0:80:37:
65:58:ae:0f:29:80:b1:42:fe:c9:49:ce:d4:18:c2:60:c7:8b:
00:9a:9d:f1:ef:aa:84:64:6b:e4:5d:bf:34:8d:71:34:12:3c:
5f:fa:cd:93:87:ae:80:d6:56:f3:b9:56:f4:39:a8:ef:71:37:
04:b6:ba:b5:5f:a1:31:01:9b:81:f4:9d:c1:62:fb:6d:a9:e9:
e3:6c:56:e5:ed:d1:77:44:79:54:81:7a:02:73:63:20:8c:0f:
7b:44:0e:fe:a7:9a:65:ce:c5:52:29:b0:d4:0e:8b:b1:1a:ff:
a2:6d:56:f0:e8:05:1c:fc:fc:fb:8f:15:08:77:5c:b4:52:9d:
4b:91:15:41:64:98:bf:ce:13:66:fd:7c:5e:ac:e4:a7:8b:d4:
34:92:c5:e9:d7:20:91:08:0a:73:89:fc:83:1e:45:d2:24:f2:
2d:49:48:0b:bf:03:8f:33:43:56:55:d4:70:f9:be:43:ec:76:
cc:41:54:49:d7:ff:21:c5:35:3e:b4:45:af:8d:3a:d4:8e:fa:
d6:af:7e:94:9c:54:a0:9a:ae:71:d6:e9:51:69:d7:ed:d1:64:
f4:9f:31:d6:d3:4b:e5:3c:32:aa:3d:ec:5b:e5:54:23:26:4d:
f7:88:be:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATtlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE1MDAwMDMyWhcNMjUxMjEyMDAwMDMyWjAYMRYw
FAYDVQQDEw02Nzg3MDg3OC0zY2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4iI91aOjRZWnVoeGb7nhsesvJQw7eQKiJjNhqicL3Oz5/vnF0/S9ihUc
v3E6AplV+KPyAPNEjqXUnrdIJnSzNOfYAVlellDm7DhvELCD8FeVl+XL+e6kxhUI
1aiZIbkRdGs3KQ/TVZcSMo9JdP+L61oPUSw4nsr/OhF5ScFTvbZPRXpuyuZVMF9Y
CF0EVIBXuDAmwu5RxWuv8QmJ47QF6xViP30a8wO/wJJM2K0g5FBZYH+x6yKCh/c3
QXh4CjvD9meijAQDdIlqsFp1CzyQiwjzyZH8FTyHm7NTsptNvCewQAC5AGUVmbEi
OLa2RNobgY29iCcAo8yIwBzTY8PitwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBWv
XksvxvuVSkZDCQCMNQ+vqMm6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRDVDQkRBQ0QyREIxMUVGQjI4NDI3NTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlG4MA0GCSqGSIb3DQEB
CwUAA4IBAQADfIJcpjrpLGYOjVio3dKggDdlWK4PKYCxQv7JSc7UGMJgx4sAmp3x
76qEZGvkXb80jXE0Ejxf+s2Th66A1lbzuVb0OajvcTcEtrq1X6ExAZuB9J3BYvtt
qenjbFbl7dF3RHlUgXoCc2MgjA97RA7+p5plzsVSKbDUDouxGv+ibVbw6AUc/Pz7
jxUId1y0Up1LkRVBZJi/zhNm/XxerOSni9Q0ksXp1yCRCApzifyDHkXSJPItSUgL
vwOPM0NWVdRw+b5D7HbMQVRJ1/8hxTU+tEWvjTrUjvrWr36UnFSgmq5x1ulRadft
0WT0nzHW00vlPDKqPexb5VQjJk33iL6N
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:24:06 2025 by rpki-client