Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BB7B272CADE11EFBB848695762E951A.roa
File: 0BB7B272CADE11EFBB848695762E951A.roa (raw, json)
Hash identifier: Bsr8ZRAa1BzNmPHOWuWbbkDxQjaUAmUWnjc/rnc4Mxc=
Subject key identifier: 0C:EF:91:7D:B3:8E:9C:95:D4:CD:CB:8A:40:C6:A8:81:9B:D8:1A:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013555
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BB7B272CADE11EFBB848695762E951A.roa
Signing time: Sat 04 Jan 2025 20:54:10 +0000
ROA not before: Sun 05 Jan 2025 20:54:06 +0000
ROA not after: Tue 04 Feb 2025 20:54:06 +0000
asID: 203020
IP address blocks: 154.197.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79189 (0x13555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 20:54:06 2025 GMT
Not After : Feb 4 20:54:06 2025 GMT
Subject: CN=67799ff2-20ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:c8:a8:da:83:a6:a9:ec:f2:69:00:7d:ed:
a8:ef:97:71:79:9f:4c:6e:42:9e:be:37:16:53:f4:
c6:ea:87:63:5b:e8:38:d2:bc:56:05:16:32:4e:50:
0d:8a:90:a4:84:f9:2c:09:3c:5f:90:46:eb:b4:f8:
6b:f6:ba:ef:96:0b:12:1e:f3:9f:c5:7b:8a:79:db:
bc:08:5f:12:e4:8d:73:16:74:11:d0:c5:60:91:16:
a1:4e:f7:88:b7:59:f4:47:ca:ab:c8:4c:b8:68:51:
97:44:9d:6a:a5:42:d5:53:45:81:72:36:08:5f:1b:
65:ce:4f:3c:af:ff:51:7b:4f:de:36:36:19:71:e6:
ad:59:11:84:69:9f:6c:96:49:d0:d5:79:fd:d9:48:
7f:f3:91:b9:6a:64:1f:83:40:cf:cb:35:d0:15:9f:
60:65:77:8f:81:7e:95:62:ab:32:2b:e6:9e:93:a5:
9e:ee:be:ff:de:60:49:a0:58:d6:cd:5e:a1:64:39:
81:5f:0e:ea:d3:a5:e0:07:e6:cf:34:9e:f2:29:8c:
8e:bb:cc:99:60:74:02:13:dc:60:bd:ab:60:36:6f:
43:6a:51:36:25:56:79:2f:d2:88:6b:22:52:ed:9c:
9e:a6:8a:38:d5:70:50:c3:d9:2d:df:51:61:bc:ee:
e9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EF:91:7D:B3:8E:9C:95:D4:CD:CB:8A:40:C6:A8:81:9B:D8:1A:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BB7B272CADE11EFBB848695762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.120.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:c5:f5:8f:04:3a:5d:88:17:64:26:55:9e:5b:2f:c0:36:9e:
e3:0e:06:ac:80:05:74:74:0c:40:79:68:bd:a3:39:82:60:4c:
e2:c7:8a:43:1a:c9:98:2a:0f:7b:37:de:03:77:36:3d:f2:ea:
e5:ce:d0:b6:08:87:0c:a0:fa:be:77:c8:8c:91:26:ce:33:2b:
70:77:c3:70:88:ea:24:1f:19:7b:d6:45:33:5e:ca:0d:0b:32:
27:85:d5:cf:88:ae:97:a6:74:b9:88:b1:ee:cf:e2:b1:0e:29:
7e:46:e9:70:0f:d4:ea:be:77:72:2f:38:e1:fa:a6:9d:d2:5b:
de:60:28:d4:d3:b5:fc:c5:0d:f8:78:a3:c8:66:6f:04:c9:47:
f9:66:ac:6e:b4:85:14:a4:6f:52:f9:af:1a:d1:5d:35:4d:b8:
46:84:97:26:10:cf:9f:37:9c:6a:4b:cb:40:bf:0d:9d:f6:de:
77:24:6f:75:69:66:c8:56:28:39:13:8d:fc:c5:bc:52:53:7b:
9c:94:5e:09:3e:27:f9:f2:cf:5a:4c:11:20:37:37:d7:eb:79:
a8:ef:19:26:fc:89:dc:04:3b:b0:b6:2a:c3:4a:69:ed:00:d2:
31:51:da:61:a7:69:79:91:48:89:82:f5:aa:30:fa:3f:d0:ed:
56:85:5f:c2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATVVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA1MjA1NDA2WhcNMjUwMjA0MjA1NDA2WjAYMRYw
FAYDVQQDEw02Nzc5OWZmMi0yMGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtnbIqNqDpqns8mkAfe2o75dxeZ9MbkKevjcWU/TG6odjW+g40rxWBRYy
TlANipCkhPksCTxfkEbrtPhr9rrvlgsSHvOfxXuKedu8CF8S5I1zFnQR0MVgkRah
TveIt1n0R8qryEy4aFGXRJ1qpULVU0WBcjYIXxtlzk88r/9Re0/eNjYZceatWRGE
aZ9slknQ1Xn92Uh/85G5amQfg0DPyzXQFZ9gZXePgX6VYqsyK+aek6We7r7/3mBJ
oFjWzV6hZDmBXw7q06XgB+bPNJ7yKYyOu8yZYHQCE9xgvatgNm9DalE2JVZ5L9KI
ayJS7Zyepoo41XBQw9kt31FhvO7pAQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAzv
kX2zjpyV1M3LikDGqIGb2BqMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQkI3QjI3MkNBREUxMUVGQkI4NDg2OTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsV4MA0GCSqGSIb3DQEB
CwUAA4IBAQDSxfWPBDpdiBdkJlWeWy/ANp7jDgasgAV0dAxAeWi9ozmCYEzix4pD
GsmYKg97N94DdzY98urlztC2CIcMoPq+d8iMkSbOMytwd8NwiOokHxl71kUzXsoN
CzInhdXPiK6XpnS5iLHuz+KxDil+RulwD9TqvndyLzjh+qad0lveYCjU07X8xQ34
eKPIZm8EyUf5ZqxutIUUpG9S+a8a0V01TbhGhJcmEM+fN5xqS8tAvw2d9t53JG91
aWbIVig5E438xbxSU3uclF4JPif58s9aTBEgNzfX63mo7xkm/IncBDuwtirDSmnt
ANIxUdphp2l5kUiJgvWqMPo/0O1WhV/C
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:43:30 2025 by rpki-client