Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B462040B21C11EFADF968B7762E951A.roa
File: 2B462040B21C11EFADF968B7762E951A.roa (raw, json)
Hash identifier: mleWjgaDsODk1or+M2kCvOVaIsvoosSUGjCcQ5my0eE=
Subject key identifier: 20:B0:A9:28:B7:42:43:D0:A4:86:08:45:31:40:34:1C:F6:7B:02:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B462040B21C11EFADF968B7762E951A.roa
Signing time: Wed 04 Dec 2024 08:45:53 +0000
ROA not before: Wed 04 Dec 2024 08:45:49 +0000
ROA not after: Sat 01 Feb 2025 08:45:49 +0000
asID: 138915
IP address blocks: 154.94.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71666 (0x117f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 08:45:49 2024 GMT
Not After : Feb 1 08:45:49 2025 GMT
Subject: CN=675016c1-0809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:60:19:4f:9f:6c:4f:c6:13:5b:50:76:6a:
ff:af:2b:55:4f:e8:cd:12:29:e5:3d:d5:3e:f4:bd:
f1:3f:a4:f4:eb:9c:63:e5:5f:36:6d:a8:1b:b5:00:
b9:04:f1:3c:9a:3b:72:2f:2a:22:23:9b:ce:a5:ed:
e1:c8:e5:47:a8:1a:dc:4a:76:92:07:95:af:51:e0:
fe:4f:d0:03:64:4b:09:02:00:92:f3:ee:93:e8:99:
88:cd:a3:60:6d:b3:50:a7:ac:0f:07:9a:5c:73:a9:
0c:c7:c2:c8:ea:30:0b:e7:c7:b9:9c:46:17:d0:b7:
91:cd:aa:9b:f9:e7:7f:d5:1a:74:c1:84:16:40:89:
95:3d:f3:98:82:9c:70:6f:8f:94:15:e2:c1:e3:a1:
3d:63:2e:9e:b0:01:1e:e1:cb:b4:01:64:65:ec:df:
92:09:52:35:82:ff:d4:9d:57:c1:7b:82:be:62:41:
3f:7b:8a:a9:30:d2:12:55:e3:1c:43:64:4c:4d:46:
e6:88:43:de:04:32:e7:53:37:19:18:63:b2:5e:2f:
62:04:a6:32:b3:1b:4c:e0:60:04:b9:d0:e5:1f:55:
81:3e:f6:46:bb:e1:10:fd:d4:1a:cd:96:8a:e0:69:
49:97:56:99:d4:07:d6:23:f5:37:99:6b:b1:57:a9:
e8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B0:A9:28:B7:42:43:D0:A4:86:08:45:31:40:34:1C:F6:7B:02:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B462040B21C11EFADF968B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.116.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:64:67:36:87:82:5f:67:74:cd:35:db:04:64:57:0d:80:3f:
f0:5d:26:bf:0b:b4:b5:a9:d7:b2:9b:38:77:7b:8c:34:d9:51:
b7:21:d7:0d:fa:db:46:91:0f:53:69:8e:80:39:c4:86:2d:30:
84:b7:69:19:28:46:86:36:d0:a1:ba:e5:7a:db:d4:0b:ab:17:
e4:b8:e3:63:3a:f9:6d:5d:e8:7b:de:68:f5:b3:59:bd:f9:79:
a5:e3:9d:09:6b:7a:cb:ef:48:a8:98:64:f0:81:37:d3:7d:da:
06:15:a1:a9:aa:40:86:8c:42:64:03:b6:3e:c8:2f:16:97:68:
6c:4c:34:3a:8f:fe:46:74:6a:70:b7:08:9f:71:6c:07:96:52:
ce:1f:27:76:1a:8f:75:cf:f9:98:57:cd:84:ab:54:e7:77:16:
4c:2c:a3:fb:0c:93:a0:85:d1:ea:92:5c:7a:1d:30:72:5a:b2:
bf:83:49:ba:c9:64:69:58:34:ec:e9:96:e0:7c:b0:25:c8:6e:
c8:e5:4d:7d:dd:99:ec:6d:8e:d3:37:2e:14:6c:33:61:9f:e2:
5f:14:de:bb:45:39:ed:2e:16:8d:24:ad:b1:10:0f:b4:98:4b:
af:c6:6a:4c:ba:80:58:d4:71:f8:9b:4f:d7:b9:e1:bc:bc:df:
9c:25:f9:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARfyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjA0MDg0NTQ5WhcNMjUwMjAxMDg0NTQ5WjAYMRYw
FAYDVQQDEw02NzUwMTZjMS0wODA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvG9gGU+fbE/GE1tQdmr/rytVT+jNEinlPdU+9L3xP6T065xj5V82bagb
tQC5BPE8mjtyLyoiI5vOpe3hyOVHqBrcSnaSB5WvUeD+T9ADZEsJAgCS8+6T6JmI
zaNgbbNQp6wPB5pcc6kMx8LI6jAL58e5nEYX0LeRzaqb+ed/1Rp0wYQWQImVPfOY
gpxwb4+UFeLB46E9Yy6esAEe4cu0AWRl7N+SCVI1gv/UnVfBe4K+YkE/e4qpMNIS
VeMcQ2RMTUbmiEPeBDLnUzcZGGOyXi9iBKYysxtM4GAEudDlH1WBPvZGu+EQ/dQa
zZaK4GlJl1aZ1AfWI/U3mWuxV6noxwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCCw
qSi3QkPQpIYIRTFANBz2ewJjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQjQ2MjA0MEIyMUMxMUVGQURGOTY4Qjc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml50MA0GCSqGSIb3DQEB
CwUAA4IBAQC8ZGc2h4JfZ3TNNdsEZFcNgD/wXSa/C7S1qdeymzh3e4w02VG3IdcN
+ttGkQ9TaY6AOcSGLTCEt2kZKEaGNtChuuV629QLqxfkuONjOvltXeh73mj1s1m9
+Xml450Ja3rL70iomGTwgTfTfdoGFaGpqkCGjEJkA7Y+yC8Wl2hsTDQ6j/5GdGpw
twifcWwHllLOHyd2Go91z/mYV82Eq1TndxZMLKP7DJOghdHqklx6HTByWrK/g0m6
yWRpWDTs6ZbgfLAlyG7I5U193ZnsbY7TNy4UbDNhn+JfFN67RTntLhaNJK2xEA+0
mEuvxmpMuoBY1HH4m0/XueG8vN+cJfkF
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:44:06 2025 by rpki-client