Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/131C3A98D3F211EFA7B8E84A762E951A.roa
File: 131C3A98D3F211EFA7B8E84A762E951A.roa (raw, json)
Hash identifier: dQHS80fPuzYkWGrWLTPMy6ZQcGq7qhnbNfKATswIVpE=
Subject key identifier: 87:D4:D6:5A:1D:B1:F9:9F:E8:8A:19:BE:0A:B8:C2:A2:51:FD:22:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/131C3A98D3F211EFA7B8E84A762E951A.roa
Signing time: Thu 16 Jan 2025 10:10:13 +0000
ROA not before: Thu 16 Jan 2025 10:10:09 +0000
ROA not after: Sun 16 Mar 2025 10:10:09 +0000
asID: 17561
IP address blocks: 154.197.94.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80836 (0x13bc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 10:10:09 2025 GMT
Not After : Mar 16 10:10:09 2025 GMT
Subject: CN=6788db05-3d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:51:c3:9e:a3:07:ef:c7:dc:39:01:e2:21:36:
bf:09:9d:43:b9:67:28:ea:f3:31:fe:3d:f8:a4:9d:
cf:c8:f1:f0:64:32:3a:e3:c2:da:c9:1c:7a:51:eb:
56:86:27:b3:57:9b:2f:97:cb:6d:f3:7b:b3:53:fd:
87:4d:dd:c0:05:93:4d:77:4b:69:c9:89:b4:30:9f:
b2:73:16:2f:1c:71:b8:41:1f:5d:2e:c6:a6:11:de:
2c:db:0a:cb:df:df:06:6d:31:d5:a5:db:74:59:ef:
71:cc:24:04:39:9c:7c:02:dd:f2:29:52:56:22:53:
54:80:12:fb:9a:87:b4:41:42:0e:11:e6:a0:55:77:
80:0f:26:9c:08:1e:ec:c4:4f:57:7a:2e:6c:57:91:
8f:4a:9a:60:3d:06:65:ea:cd:c7:8f:f5:2d:7d:2b:
69:d0:6a:0a:99:d5:9a:41:ea:7b:54:0e:3b:27:15:
1f:7c:ec:a3:19:0e:c4:bd:bb:b1:2c:a5:3a:89:40:
47:4f:05:24:43:5b:6e:50:7f:64:99:2b:ab:d2:ca:
6a:2c:e3:59:77:aa:11:d4:7c:67:f5:82:f2:1b:bd:
98:f0:dc:45:48:1d:7b:47:ec:ed:82:b2:18:92:5a:
a4:fa:e0:0f:32:e9:c5:82:45:17:8b:8d:1b:5c:da:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D4:D6:5A:1D:B1:F9:9F:E8:8A:19:BE:0A:B8:C2:A2:51:FD:22:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/131C3A98D3F211EFA7B8E84A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.94.0/23
Signature Algorithm: sha256WithRSAEncryption
90:37:01:f2:90:09:8b:f5:84:13:6e:6d:0b:6e:2a:42:82:f2:
bc:0c:19:73:f1:b8:64:be:a2:0f:a4:71:59:76:e9:c3:22:e3:
f0:10:b6:fb:23:a7:b3:22:b4:42:d3:b6:23:26:bb:e8:a9:9b:
d5:d4:6b:2a:1a:6d:6b:fb:f4:a5:72:a6:c8:37:17:f4:b1:60:
ff:de:3f:b0:24:eb:b1:89:f8:66:ae:96:dd:9c:25:f8:29:8d:
4a:c3:8c:10:3a:89:51:60:df:62:15:ef:07:d2:22:51:cd:13:
d2:b6:a8:0d:32:fe:86:77:f4:20:c9:e0:eb:ad:2d:39:a3:e8:
22:bd:be:0b:f3:5b:a1:84:52:ae:9b:fb:dc:c0:c8:77:86:14:
72:d1:c4:e5:ac:f4:81:dc:3e:bd:4f:bc:bf:96:1e:44:d8:2b:
dc:5c:2a:de:b8:21:07:ec:a6:b4:a8:53:b5:d5:c9:d6:29:dc:
2d:99:64:5f:61:19:98:75:cd:7a:17:43:99:11:29:96:ea:f7:
e3:ae:32:49:24:f6:7f:85:7b:5a:4a:84:94:f2:32:be:4b:4d:
33:d7:dc:91:83:b4:39:7f:3a:15:22:fd:0e:cb:0c:6f:24:9e:
92:2c:88:c6:ae:b9:b3:1f:8d:79:a9:97:da:ad:ac:4a:27:dd:
0d:d9:7e:5b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATvEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE2MTAxMDA5WhcNMjUwMzE2MTAxMDA5WjAYMRYw
FAYDVQQDEw02Nzg4ZGIwNS0zZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1lHDnqMH78fcOQHiITa/CZ1DuWco6vMx/j34pJ3PyPHwZDI648LayRx6
UetWhiezV5svl8tt83uzU/2HTd3ABZNNd0tpyYm0MJ+ycxYvHHG4QR9dLsamEd4s
2wrL398GbTHVpdt0We9xzCQEOZx8At3yKVJWIlNUgBL7moe0QUIOEeagVXeADyac
CB7sxE9Xei5sV5GPSppgPQZl6s3Hj/UtfStp0GoKmdWaQep7VA47JxUffOyjGQ7E
vbuxLKU6iUBHTwUkQ1tuUH9kmSur0spqLONZd6oR1Hxn9YLyG72Y8NxFSB17R+zt
grIYklqk+uAPMunFgkUXi40bXNqisQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIfU
1lodsfmf6IoZvgq4wqJR/SJxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMzFDM0E5OEQzRjIxMUVGQTdCOEU4NEE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsVeMA0GCSqGSIb3DQEB
CwUAA4IBAQCQNwHykAmL9YQTbm0LbipCgvK8DBlz8bhkvqIPpHFZdunDIuPwELb7
I6ezIrRC07YjJrvoqZvV1GsqGm1r+/SlcqbINxf0sWD/3j+wJOuxifhmrpbdnCX4
KY1Kw4wQOolRYN9iFe8H0iJRzRPStqgNMv6Gd/QgyeDrrS05o+givb4L81uhhFKu
m/vcwMh3hhRy0cTlrPSB3D69T7y/lh5E2CvcXCreuCEH7Ka0qFO11cnWKdwtmWRf
YRmYdc16F0OZESmW6vfjrjJJJPZ/hXtaSoSU8jK+S00z19yRg7Q5fzoVIv0Oywxv
JJ6SLIjGrrmzH415qZfaraxKJ90N2X5b
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:38 2025 by rpki-client