Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11E91824DEDA11EF97CE1F82762E951A.roa
File: 11E91824DEDA11EF97CE1F82762E951A.roa (raw, json)
Hash identifier: vT48FgvWYDNm2WFOqUdygvJ+n+kq9CrnXk7eQpx7AXo=
Subject key identifier: 83:90:0D:65:86:2C:16:62:F4:83:F5:D6:8D:40:33:55:8B:C3:B1:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11E91824DEDA11EF97CE1F82762E951A.roa
Signing time: Thu 30 Jan 2025 07:16:06 +0000
ROA not before: Thu 30 Jan 2025 07:16:01 +0000
ROA not after: Sat 01 Mar 2025 07:16:01 +0000
asID: 147176
IP address blocks: 154.84.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85406 (0x14d9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 30 07:16:01 2025 GMT
Not After : Mar 1 07:16:01 2025 GMT
Subject: CN=679b2736-24a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:38:74:eb:92:fc:fb:e8:e8:49:f6:88:90:
b8:b3:f3:21:fc:c2:f6:0f:94:cd:71:76:4f:2f:58:
c1:df:85:44:c2:2e:c7:bc:c6:03:d3:55:9b:84:7d:
c3:3c:08:66:31:c8:02:6c:01:a7:83:ad:84:30:13:
ed:39:3a:75:c4:b4:4e:7d:49:94:ba:c1:15:2e:91:
f2:c8:58:eb:ca:7a:66:af:6a:73:75:66:a3:6d:78:
49:c7:cc:db:26:19:08:69:28:34:de:fd:f5:d3:c9:
43:e8:8a:a2:c5:0d:b1:33:32:1f:21:c7:dd:e3:2b:
d2:34:b2:2b:fa:d9:e0:31:57:15:09:5a:15:e5:d2:
37:4a:12:29:78:58:b2:c3:6b:b2:e9:f0:37:06:b7:
32:56:5a:8e:11:e6:ba:f6:0d:b2:12:4b:20:ec:60:
bf:bf:cd:5b:c9:9c:a3:68:43:eb:20:99:81:d7:bb:
93:30:a6:35:c8:ab:ec:fc:34:2a:1b:21:0c:b8:3b:
38:33:ad:95:02:49:3f:c4:9f:93:36:48:cb:9c:7c:
47:b7:3e:ff:2c:4f:9f:4a:c0:1c:b9:c3:ad:f7:d6:
ac:bc:e0:bc:10:05:fb:44:9f:78:7b:2f:70:08:34:
26:a0:08:d6:bd:e1:61:62:59:09:0a:b4:9f:64:6d:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:90:0D:65:86:2C:16:62:F4:83:F5:D6:8D:40:33:55:8B:C3:B1:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11E91824DEDA11EF97CE1F82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.153.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:f8:b7:04:f9:d8:eb:2a:56:c0:8d:c3:68:b6:a9:d3:5e:86:
61:9b:5c:79:4a:d1:ba:09:a7:a8:1f:4d:85:89:ab:4c:bf:82:
b2:14:db:87:43:78:48:92:4d:08:69:19:c8:1b:44:fe:02:63:
3f:d6:56:57:67:0a:75:84:27:08:7a:bd:dd:f2:5d:f6:22:49:
6b:73:57:85:6b:f0:b0:90:0f:71:56:46:30:64:e4:0b:c8:c1:
15:05:ad:2a:9d:20:6c:ca:77:d7:93:ac:ee:06:20:12:fc:02:
fd:cb:3e:0d:e8:10:4e:cf:09:3c:a5:94:00:fb:18:da:5b:cb:
7c:9e:c9:1f:82:56:da:cc:8b:43:70:53:e7:db:32:96:83:19:
03:68:28:57:5c:f8:51:84:05:d1:b2:87:c3:a6:dc:8a:94:55:
04:f9:7e:68:e5:da:f2:79:5d:22:dc:e5:e0:98:3a:c7:21:fd:
44:d9:e0:74:9e:38:2f:bd:d4:5e:a5:fb:7d:12:bf:dd:e7:e3:
d3:6d:16:f6:da:45:ae:69:ae:8d:74:d7:a1:04:2e:fc:22:4b:
37:e6:6b:3a:87:33:d8:62:0f:55:23:90:e6:65:b7:bb:da:ea:
79:e9:e6:53:2d:2f:0a:0f:e9:6c:4e:b4:e8:13:b2:df:8c:dd:
62:2c:ba:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU2eMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTMwMDcxNjAxWhcNMjUwMzAxMDcxNjAxWjAYMRYw
FAYDVQQDEw02NzliMjczNi0yNGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2Ik4dOuS/Pvo6En2iJC4s/Mh/ML2D5TNcXZPL1jB34VEwi7HvMYD01Wb
hH3DPAhmMcgCbAGng62EMBPtOTp1xLROfUmUusEVLpHyyFjrynpmr2pzdWajbXhJ
x8zbJhkIaSg03v3108lD6IqixQ2xMzIfIcfd4yvSNLIr+tngMVcVCVoV5dI3ShIp
eFiyw2uy6fA3BrcyVlqOEea69g2yEksg7GC/v81byZyjaEPrIJmB17uTMKY1yKvs
/DQqGyEMuDs4M62VAkk/xJ+TNkjLnHxHtz7/LE+fSsAcucOt99asvOC8EAX7RJ94
ey9wCDQmoAjWveFhYlkJCrSfZG2gOwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIOQ
DWWGLBZi9IP11o1AM1WLw7FmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMUU5MTgyNERFREExMUVGOTdDRTFGODI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlSZMA0GCSqGSIb3DQEB
CwUAA4IBAQC1+LcE+djrKlbAjcNotqnTXoZhm1x5StG6CaeoH02FiatMv4KyFNuH
Q3hIkk0IaRnIG0T+AmM/1lZXZwp1hCcIer3d8l32Iklrc1eFa/CwkA9xVkYwZOQL
yMEVBa0qnSBsynfXk6zuBiAS/AL9yz4N6BBOzwk8pZQA+xjaW8t8nskfglbazItD
cFPn2zKWgxkDaChXXPhRhAXRsofDptyKlFUE+X5o5dryeV0i3OXgmDrHIf1E2eB0
njgvvdRepft9Er/d5+PTbRb22kWuaa6NdNehBC78Iks35ms6hzPYYg9VI5DmZbe7
2up56eZTLS8KD+lsTrToE7LfjN1iLLq2
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:06 2025 by rpki-client