Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/194306C8D98211EF8321C365762E951A.roa
File: 194306C8D98211EF8321C365762E951A.roa (raw, json)
Hash identifier: 1IpaOGw2m3pqXWcFmC867YLpeA6/Ox5foZoq0dyDnhA=
Subject key identifier: 5B:3B:D3:67:D0:3A:FA:8E:D9:DF:44:96:3E:3D:FF:35:FF:6E:0F:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/194306C8D98211EF8321C365762E951A.roa
Signing time: Thu 23 Jan 2025 12:03:46 +0000
ROA not before: Thu 23 Jan 2025 12:03:43 +0000
ROA not after: Fri 28 Feb 2025 12:03:43 +0000
asID: 62240
IP address blocks: 154.195.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82407 (0x141e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:03:43 2025 GMT
Not After : Feb 28 12:03:43 2025 GMT
Subject: CN=67923022-2541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dc:09:cb:36:fa:02:23:27:4a:c0:32:b0:cc:
3d:12:93:4a:95:26:f1:b3:19:f0:f8:ce:f7:75:7a:
38:66:aa:ad:23:72:fe:6e:78:f7:fd:bc:62:1b:90:
51:bb:85:39:53:92:ce:b1:19:a4:ba:ef:ea:21:ad:
b8:e3:76:af:25:bf:62:61:c4:00:27:37:f2:08:36:
f8:f0:c7:8e:2a:f8:78:c5:f4:ba:e2:05:22:14:49:
d1:cc:32:d0:be:d2:e7:30:04:79:35:40:e3:5a:e4:
be:4b:b6:74:36:b9:b3:bc:4b:00:59:4f:9b:49:6e:
38:ae:28:ec:bd:1f:ac:e3:b4:ce:07:5f:a7:03:48:
94:da:92:2e:17:ec:0e:7c:e7:6b:4e:f4:28:17:dd:
2f:de:12:95:58:36:67:76:24:2a:e7:ed:04:75:12:
f9:45:1c:ef:fe:78:07:90:df:54:3c:1c:a4:87:f7:
b3:38:90:91:be:65:ab:85:91:5a:e6:7f:d5:ab:a2:
0d:2c:b8:99:97:ef:b4:f1:11:cd:eb:21:3e:09:fd:
28:70:a4:b9:8c:4d:d5:80:25:c9:9e:8d:46:d7:53:
de:37:75:1e:73:03:20:d2:51:a9:15:a0:bd:ec:0a:
42:a0:dd:1a:65:59:37:77:ed:16:04:6a:65:b9:16:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3B:D3:67:D0:3A:FA:8E:D9:DF:44:96:3E:3D:FF:35:FF:6E:0F:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/194306C8D98211EF8321C365762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.179.0/24
Signature Algorithm: sha256WithRSAEncryption
64:2d:9e:e5:32:6b:56:e1:dd:69:32:b7:c4:e4:96:ca:13:c3:
b7:db:4b:82:b9:96:30:20:5a:4a:e5:12:2e:04:ae:d1:be:3a:
51:f2:de:5a:fe:ec:2a:57:83:94:71:04:74:24:33:24:6b:fe:
09:48:f3:fe:23:f6:85:be:50:14:c5:a3:c9:c3:ee:e5:64:e4:
04:d8:a5:27:6f:09:6a:c8:75:5f:a8:cd:7d:b1:3d:c1:9e:d2:
7c:99:19:75:e5:c9:75:fa:87:79:13:da:33:fc:0e:f4:82:24:
56:c6:67:0e:24:6a:be:22:1e:e8:ec:4e:af:95:21:cb:0c:61:
6d:e2:49:b9:c9:01:3e:3c:4f:d5:e8:81:91:6e:c9:b5:f7:a2:
26:dd:44:c9:e0:4b:84:4e:ea:b9:0b:1e:0f:a7:26:11:67:2e:
6e:c8:a8:81:ae:d9:3f:61:15:5c:2e:51:a2:24:0c:35:c7:b1:
aa:db:be:06:07:e8:07:28:94:ca:3d:fa:5f:8e:9b:04:05:ff:
1f:63:11:65:ae:74:f5:b1:90:48:06:b9:ab:ee:da:31:85:d9:
06:44:13:b5:2d:02:74:d7:2c:b9:f0:2b:92:07:32:1e:35:82:
40:b7:49:f3:2a:b4:89:98:58:0e:5a:27:f1:23:c7:f2:bc:ee:
4b:bd:cb:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUHnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTIwMzQzWhcNMjUwMjI4MTIwMzQzWjAYMRYw
FAYDVQQDEw02NzkyMzAyMi0yNTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw9wJyzb6AiMnSsAysMw9EpNKlSbxsxnw+M73dXo4ZqqtI3L+bnj3/bxi
G5BRu4U5U5LOsRmkuu/qIa2443avJb9iYcQAJzfyCDb48MeOKvh4xfS64gUiFEnR
zDLQvtLnMAR5NUDjWuS+S7Z0NrmzvEsAWU+bSW44rijsvR+s47TOB1+nA0iU2pIu
F+wOfOdrTvQoF90v3hKVWDZndiQq5+0EdRL5RRzv/ngHkN9UPBykh/ezOJCRvmWr
hZFa5n/Vq6INLLiZl++08RHN6yE+Cf0ocKS5jE3VgCXJno1G11PeN3UecwMg0lGp
FaC97ApCoN0aZVk3d+0WBGpluRYRJwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFs7
02fQOvqO2d9Elj49/zX/bg9AMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xOTQzMDZDOEQ5ODIxMUVGODMyMUMzNjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsOzMA0GCSqGSIb3DQEB
CwUAA4IBAQBkLZ7lMmtW4d1pMrfE5JbKE8O320uCuZYwIFpK5RIuBK7RvjpR8t5a
/uwqV4OUcQR0JDMka/4JSPP+I/aFvlAUxaPJw+7lZOQE2KUnbwlqyHVfqM19sT3B
ntJ8mRl15cl1+od5E9oz/A70giRWxmcOJGq+Ih7o7E6vlSHLDGFt4km5yQE+PE/V
6IGRbsm196Im3UTJ4EuETuq5Cx4PpyYRZy5uyKiBrtk/YRVcLlGiJAw1x7Gq274G
B+gHKJTKPfpfjpsEBf8fYxFlrnT1sZBIBrmr7toxhdkGRBO1LQJ01yy58CuSBzIe
NYJAt0nzKrSJmFgOWifxI8fyvO5Lvcus
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:13 2025 by rpki-client