Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E97F0DCD8A311EFAB35A089762E951A.roa
File: 1E97F0DCD8A311EFAB35A089762E951A.roa (raw, json)
Hash identifier: v2KeD69VZ3RoE9HHi18yo92GqLNvJO+vuiVx1v+18Pw=
Subject key identifier: 24:38:24:56:75:C7:AC:9A:A0:6F:8C:56:97:A6:3C:42:AF:40:A5:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E82
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E97F0DCD8A311EFAB35A089762E951A.roa
Signing time: Wed 22 Jan 2025 09:27:38 +0000
ROA not before: Wed 22 Jan 2025 09:27:33 +0000
ROA not after: Tue 04 Feb 2025 09:27:33 +0000
asID: 8796
IP address blocks: 154.201.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81538 (0x13e82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 09:27:33 2025 GMT
Not After : Feb 4 09:27:33 2025 GMT
Subject: CN=6790ba0a-2030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2f:b9:13:ba:fe:33:01:30:0b:f7:4c:77:8e:
77:9e:88:fd:41:9f:55:ab:48:bb:1f:f2:aa:d1:03:
f6:ab:af:41:11:e2:68:53:ef:9f:1a:89:c7:b4:b2:
10:92:12:26:c7:48:38:ec:08:de:2d:c2:57:9b:c1:
35:17:5f:f3:50:c2:59:fe:3f:fb:26:cb:96:0a:ed:
61:4d:08:19:d0:a1:10:f3:d3:07:5e:1e:10:bb:4b:
dd:2f:56:f1:f6:76:52:8d:4d:05:6b:f5:5e:df:d2:
90:04:e5:99:1c:df:54:dc:09:8f:b9:85:79:ea:11:
ba:03:e5:cc:32:a6:3e:53:ce:6b:99:2e:4c:53:a7:
74:6c:31:e9:fb:dd:a8:ce:fb:f0:fe:6f:9b:f7:6a:
8c:3b:d0:b7:e2:07:6f:60:d0:52:40:7e:12:61:50:
22:41:57:93:4d:c9:fe:8a:90:ca:5a:af:7c:b5:3f:
a4:39:d7:40:e3:cb:d4:ac:bc:2e:ad:4f:0c:0d:ca:
c1:a5:61:07:9e:5b:66:20:4c:1b:b3:a9:1e:88:8d:
ac:45:13:e0:4a:14:be:a0:bd:13:23:59:a7:0d:cc:
4b:46:cf:c3:47:74:76:3b:f4:f7:05:18:3e:ce:35:
97:10:ad:61:f5:57:cf:80:2f:36:61:0a:3b:9a:09:
a0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:38:24:56:75:C7:AC:9A:A0:6F:8C:56:97:A6:3C:42:AF:40:A5:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E97F0DCD8A311EFAB35A089762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:d4:cc:18:76:4c:b0:5f:d5:69:4e:64:bf:49:13:7e:84:f3:
22:e8:ad:16:e9:da:ac:1e:fa:8e:6a:67:40:de:67:38:c4:24:
b5:1b:5b:3c:b7:31:10:58:36:3b:15:53:ee:76:bc:03:ab:70:
23:2f:73:8b:b1:ec:87:23:d1:a5:ca:87:7b:58:f7:b1:2c:88:
fb:97:99:ac:c5:06:54:20:99:34:30:10:bb:28:c3:ba:d2:84:
6d:92:27:07:fc:d5:b0:a9:76:b4:49:ab:97:b2:84:b9:01:60:
46:5e:36:51:c1:8c:4d:1d:73:1b:d1:79:ce:c5:40:05:9d:c7:
05:01:6d:4e:6d:2e:56:18:4f:8e:c4:4f:76:1e:47:e7:37:56:
c9:83:66:a0:6e:8e:56:a0:14:c7:38:d1:af:a1:99:11:78:9e:
7d:f5:13:37:e9:d1:aa:82:e8:27:06:66:70:3f:65:32:03:6f:
c2:80:03:e4:a0:28:1d:60:f9:b1:c5:ca:6b:20:21:56:ce:06:
49:a4:fb:84:9e:9d:ef:e7:a7:58:fc:38:d0:48:18:54:e7:a7:
48:be:eb:02:af:b9:cb:3a:0e:37:39:b0:da:65:33:d1:cb:78:
2a:20:f3:6c:0e:19:b8:64:25:f9:fa:7e:1b:3e:8f:9e:31:b7:
0e:c5:b7:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT6CMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMDkyNzMzWhcNMjUwMjA0MDkyNzMzWjAYMRYw
FAYDVQQDEw02NzkwYmEwYS0yMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9C+5E7r+MwEwC/dMd453noj9QZ9Vq0i7H/Kq0QP2q69BEeJoU++fGonH
tLIQkhImx0g47AjeLcJXm8E1F1/zUMJZ/j/7JsuWCu1hTQgZ0KEQ89MHXh4Qu0vd
L1bx9nZSjU0Fa/Ve39KQBOWZHN9U3AmPuYV56hG6A+XMMqY+U85rmS5MU6d0bDHp
+92ozvvw/m+b92qMO9C34gdvYNBSQH4SYVAiQVeTTcn+ipDKWq98tT+kOddA48vU
rLwurU8MDcrBpWEHnltmIEwbs6keiI2sRRPgShS+oL0TI1mnDcxLRs/DR3R2O/T3
BRg+zjWXEK1h9VfPgC82YQo7mgmgaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCQ4
JFZ1x6yaoG+MVpemPEKvQKVnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRTk3RjBEQ0Q4QTMxMUVGQUIzNUEwODk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmslIMA0GCSqGSIb3DQEB
CwUAA4IBAQB+1MwYdkywX9VpTmS/SRN+hPMi6K0W6dqsHvqOamdA3mc4xCS1G1s8
tzEQWDY7FVPudrwDq3AjL3OLseyHI9Glyod7WPexLIj7l5msxQZUIJk0MBC7KMO6
0oRtkicH/NWwqXa0SauXsoS5AWBGXjZRwYxNHXMb0XnOxUAFnccFAW1ObS5WGE+O
xE92HkfnN1bJg2agbo5WoBTHONGvoZkReJ599RM36dGqgugnBmZwP2UyA2/CgAPk
oCgdYPmxxcprICFWzgZJpPuEnp3v56dY/DjQSBhU56dIvusCr7nLOg43ObDaZTPR
y3gqIPNsDhm4ZCX5+n4bPo+eMbcOxbfg
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:56:23 2025 by rpki-client