Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E7AD082BEB811EFA6456C84762E951A.roa
File: 2E7AD082BEB811EFA6456C84762E951A.roa (raw, json)
Hash identifier: IzFSSkpr4RCjKW3+qvk8S0qaDPwf1e6nEyMFUcJZBqM=
Subject key identifier: 1E:7A:AA:78:93:40:BB:35:03:A0:83:FD:9C:32:0B:FC:E7:6F:60:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E7AD082BEB811EFA6456C84762E951A.roa
Signing time: Fri 20 Dec 2024 09:52:53 +0000
ROA not before: Fri 20 Dec 2024 09:52:50 +0000
ROA not after: Sun 02 Feb 2025 09:52:50 +0000
asID: 202656
IP address blocks: 154.218.26.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72918 (0x11cd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 09:52:50 2024 GMT
Not After : Feb 2 09:52:50 2025 GMT
Subject: CN=67653e75-e326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:a1:ff:b5:52:6b:53:d8:0e:2f:71:5d:ce:
66:ea:94:0a:c4:ef:ef:13:ca:70:1e:4b:c3:83:f9:
92:a4:d6:f7:90:b0:c2:8e:dd:91:db:3a:e7:b3:4a:
70:c2:a0:29:fb:de:5c:f2:b4:7f:fe:ca:df:2f:2c:
ae:33:29:07:21:28:8e:c7:7e:e9:3c:fc:97:5b:e4:
37:d3:4b:45:57:57:3d:b1:48:04:be:42:57:9c:98:
8d:c6:a0:e2:56:45:a3:71:ea:8b:2c:d8:f9:cf:c4:
4d:0c:43:4f:ef:1d:ef:8f:24:ed:84:9b:dd:43:51:
6c:eb:98:f8:96:ea:35:f3:d1:76:41:bb:8a:7a:fa:
00:e8:a2:e7:4b:f7:9e:c2:6d:5d:4e:2e:1e:40:25:
36:ae:49:09:5a:aa:92:1b:ab:e2:1b:02:75:78:8d:
57:98:5d:06:7d:4c:4e:07:20:b6:a3:76:7b:79:82:
52:9c:79:1c:34:aa:ac:17:fc:a0:3b:d5:be:a0:91:
58:ee:52:d8:94:d8:18:2f:fe:f9:82:9d:d5:b9:98:
57:db:3f:ed:f9:cc:fb:c7:2d:dd:48:19:51:e5:66:
e5:68:b2:1a:13:e9:66:47:ce:f1:6b:ed:26:18:fa:
0d:0c:a3:04:1f:00:27:12:14:24:e7:25:ea:da:d0:
23:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7A:AA:78:93:40:BB:35:03:A0:83:FD:9C:32:0B:FC:E7:6F:60:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E7AD082BEB811EFA6456C84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.26.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:bb:8e:f7:7a:5c:ee:ae:bc:c2:05:75:df:26:59:8a:a6:7c:
9c:0b:51:fa:b7:93:a9:cd:84:32:c8:13:57:44:9e:fa:ab:ac:
9e:0d:ef:9f:73:70:d4:65:11:a3:da:a2:f2:74:67:1a:60:1f:
ea:8c:6c:e6:6b:f7:09:c0:01:12:10:0e:86:ff:11:8e:a0:c2:
f4:ff:93:cd:c8:56:6e:71:ce:b2:75:75:7b:24:26:60:d7:8a:
d3:d6:4a:1b:55:62:cf:4f:7a:d0:6c:51:d4:f9:20:0c:37:7e:
0e:e0:c6:8d:59:f5:91:09:42:70:7a:9a:bf:b0:c4:07:eb:93:
ae:7f:f1:b5:37:05:e5:ab:09:50:26:84:6b:b5:d1:5a:5c:c9:
aa:51:de:93:f2:b6:a7:96:36:08:82:79:29:ae:0b:78:8c:a3:
4c:94:86:c3:78:cb:1c:be:28:43:70:dd:c8:56:1f:04:5b:b1:
c6:0c:05:cb:c9:44:3a:84:88:df:86:f4:f6:3b:ef:40:10:ba:
83:0a:11:e9:31:67:66:a7:9d:92:c6:d1:75:ef:5c:bf:28:7d:
16:7e:7f:9c:02:63:4e:9f:6a:f0:f7:67:59:c8:ee:37:8e:79:
15:44:5a:43:10:fe:e4:b0:6a:09:17:2a:3d:ad:79:1a:8c:63:
3f:46:9f:42
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARzWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIwMDk1MjUwWhcNMjUwMjAyMDk1MjUwWjAYMRYw
FAYDVQQDEw02NzY1M2U3NS1lMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwbeh/7VSa1PYDi9xXc5m6pQKxO/vE8pwHkvDg/mSpNb3kLDCjt2R2zrn
s0pwwqAp+95c8rR//srfLyyuMykHISiOx37pPPyXW+Q300tFV1c9sUgEvkJXnJiN
xqDiVkWjceqLLNj5z8RNDENP7x3vjyTthJvdQ1Fs65j4luo189F2QbuKevoA6KLn
S/eewm1dTi4eQCU2rkkJWqqSG6viGwJ1eI1XmF0GfUxOByC2o3Z7eYJSnHkcNKqs
F/ygO9W+oJFY7lLYlNgYL/75gp3VuZhX2z/t+cz7xy3dSBlR5WblaLIaE+lmR87x
a+0mGPoNDKMEHwAnEhQk5yXq2tAj1QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB56
qniTQLs1A6CD/ZwyC/znb2CuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRTdBRDA4MkJFQjgxMUVGQTY0NTZDODQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmtoaMA0GCSqGSIb3DQEB
CwUAA4IBAQCtu473elzurrzCBXXfJlmKpnycC1H6t5OpzYQyyBNXRJ76q6yeDe+f
c3DUZRGj2qLydGcaYB/qjGzma/cJwAESEA6G/xGOoML0/5PNyFZucc6ydXV7JCZg
14rT1kobVWLPT3rQbFHU+SAMN34O4MaNWfWRCUJwepq/sMQH65Ouf/G1NwXlqwlQ
JoRrtdFaXMmqUd6T8ranljYIgnkprgt4jKNMlIbDeMscvihDcN3IVh8EW7HGDAXL
yUQ6hIjfhvT2O+9AELqDChHpMWdmp52SxtF171y/KH0Wfn+cAmNOn2rw92dZyO43
jnkVRFpDEP7ksGoJFyo9rXkajGM/Rp9C
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:01:51 2025 by rpki-client