Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/030AF938DA4511EF95222289762E951A.roa
File: 030AF938DA4511EF95222289762E951A.roa (raw, json)
Hash identifier: SNTRPLUgPwR5nXJJ5Cy2HttAJWiZUftycOUPfVlZ6m4=
Subject key identifier: 6B:8F:50:8F:62:B9:89:F3:7E:FC:1F:05:75:14:FD:5F:C1:0B:41:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/030AF938DA4511EF95222289762E951A.roa
Signing time: Fri 24 Jan 2025 11:19:01 +0000
ROA not before: Fri 24 Jan 2025 11:18:57 +0000
ROA not after: Fri 28 Feb 2025 11:18:57 +0000
asID: 62240
IP address blocks: 154.196.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83454 (0x145fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:18:57 2025 GMT
Not After : Feb 28 11:18:57 2025 GMT
Subject: CN=67937725-82ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:43:bb:0d:ef:95:3f:44:bf:e4:3f:57:67:
a9:14:b8:88:05:7e:ce:f9:25:15:f4:f2:7b:97:28:
70:64:bc:01:a9:32:ba:26:44:d0:5b:fb:b8:15:ca:
22:12:4a:11:d3:26:25:f3:9c:db:e4:b1:63:b3:91:
74:40:78:f2:27:21:18:a1:06:95:72:b0:09:54:01:
9e:9d:75:1d:c4:b7:5d:c2:59:8a:74:46:ab:f4:0e:
80:70:c8:9c:63:18:d2:7d:2a:1f:9e:ad:87:0d:34:
b4:a7:ca:72:f0:d5:e1:e2:ef:46:7d:5a:4f:c7:f9:
cb:e3:8c:bc:2f:ba:c8:2f:41:62:ef:a8:c4:e4:f3:
b9:3b:ef:b4:40:20:9d:0b:13:17:a3:2f:79:33:1b:
77:40:78:d2:13:f6:78:a1:88:9b:65:08:6a:77:51:
70:a9:7b:66:4b:81:25:d4:f7:f2:0d:b1:8c:02:6e:
af:03:91:bb:94:99:3c:28:24:5f:bf:e2:75:4c:65:
8e:26:06:fe:d0:da:3c:79:4c:3c:2c:79:fc:86:8b:
e5:cb:e9:a9:0c:7a:de:e6:04:d6:0d:ac:23:22:df:
06:0d:43:10:a7:60:ff:b2:e8:73:b9:eb:85:c1:07:
72:5c:5b:ec:da:3a:78:25:5e:f9:d8:4b:fa:10:be:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8F:50:8F:62:B9:89:F3:7E:FC:1F:05:75:14:FD:5F:C1:0B:41:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/030AF938DA4511EF95222289762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.80.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:dc:56:ef:26:66:2f:9e:85:a8:00:21:b5:35:df:a8:2a:c7:
ad:46:78:13:78:1a:26:26:4c:47:62:5a:2d:64:f6:5c:e2:fc:
1c:d2:9b:4f:70:92:fa:0f:c0:11:ca:b5:34:c5:bf:8d:67:56:
99:60:b6:77:57:1a:05:f9:e4:f5:a5:98:57:48:2f:f8:03:89:
91:ad:df:8f:47:f2:75:62:6b:f1:86:f3:d3:13:f9:e6:29:24:
3a:cb:12:02:c6:ad:6a:32:91:c8:f2:d0:46:b9:45:47:f2:4c:
91:7c:78:e5:fd:87:52:13:50:05:d5:63:41:fa:50:1c:f3:45:
86:f6:84:a5:40:14:4f:34:7d:86:44:19:52:4c:35:7e:b1:c8:
8f:7e:9e:df:3e:7b:d4:cd:dd:d7:6f:76:bc:59:dc:4b:e5:92:
29:93:51:ce:90:04:35:37:74:ca:06:de:ba:1e:5c:03:13:47:
88:45:ce:ae:9a:c6:a9:15:18:ae:1d:56:a7:1e:f3:83:5d:4e:
f8:c8:1f:6f:cc:ac:c6:64:cd:d4:11:57:6b:60:64:50:73:9f:
a0:ef:89:17:ce:8b:bc:2a:24:0a:0b:fb:c1:cc:53:d7:4b:c6:
23:a1:b6:b3:3e:76:dd:7d:23:31:b9:9d:c4:5f:cd:25:11:6b:
2e:1c:00:c4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUX+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTExODU3WhcNMjUwMjI4MTExODU3WjAYMRYw
FAYDVQQDEw02NzkzNzcyNS04MmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx0NDuw3vlT9Ev+Q/V2epFLiIBX7O+SUV9PJ7lyhwZLwBqTK6JkTQW/u4
FcoiEkoR0yYl85zb5LFjs5F0QHjyJyEYoQaVcrAJVAGenXUdxLddwlmKdEar9A6A
cMicYxjSfSofnq2HDTS0p8py8NXh4u9GfVpPx/nL44y8L7rIL0Fi76jE5PO5O++0
QCCdCxMXoy95Mxt3QHjSE/Z4oYibZQhqd1FwqXtmS4El1PfyDbGMAm6vA5G7lJk8
KCRfv+J1TGWOJgb+0No8eUw8LHn8hovly+mpDHre5gTWDawjIt8GDUMQp2D/suhz
ueuFwQdyXFvs2jp4JV752Ev6EL6byQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGuP
UI9iuYnzfvwfBXUU/V/BC0HxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMzBBRjkzOERBNDUxMUVGOTUyMjIyODk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsRQMA0GCSqGSIb3DQEB
CwUAA4IBAQCx3FbvJmYvnoWoACG1Nd+oKsetRngTeBomJkxHYlotZPZc4vwc0ptP
cJL6D8ARyrU0xb+NZ1aZYLZ3VxoF+eT1pZhXSC/4A4mRrd+PR/J1YmvxhvPTE/nm
KSQ6yxICxq1qMpHI8tBGuUVH8kyRfHjl/YdSE1AF1WNB+lAc80WG9oSlQBRPNH2G
RBlSTDV+sciPfp7fPnvUzd3Xb3a8WdxL5ZIpk1HOkAQ1N3TKBt66HlwDE0eIRc6u
msapFRiuHVanHvODXU74yB9vzKzGZM3UEVdrYGRQc5+g74kXzou8KiQKC/vBzFPX
S8YjobazPnbdfSMxuZ3EX80lEWsuHADE
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:16 2025 by rpki-client