Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40DFA7D4DA2E11EF9FCA5D6E762E951A.roa
File: 40DFA7D4DA2E11EF9FCA5D6E762E951A.roa (raw, json)
Hash identifier: 4u3wcyJ0hf/GkeFqvQIK0mohYykL0jGkZCk+MAWVqt0=
Subject key identifier: 6C:59:F1:7F:E6:AF:2E:6F:6E:81:87:8F:92:91:D6:31:CE:3C:37:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014477
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40DFA7D4DA2E11EF9FCA5D6E762E951A.roa
Signing time: Fri 24 Jan 2025 08:36:06 +0000
ROA not before: Fri 24 Jan 2025 08:36:03 +0000
ROA not after: Wed 05 Mar 2025 08:36:03 +0000
asID: 202656
IP address blocks: 154.221.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83063 (0x14477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:36:03 2025 GMT
Not After : Mar 5 08:36:03 2025 GMT
Subject: CN=679350f6-673c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ab:e6:d2:24:46:53:78:77:8c:a9:8b:60:8d:
28:a7:9d:c7:b1:84:46:08:89:9c:5e:f5:db:83:66:
e2:92:dd:0d:0b:e9:a5:46:09:5a:e3:e6:94:56:9c:
04:01:e6:8e:0e:53:4e:c7:0c:76:a4:9d:7a:29:cd:
19:19:20:98:d2:4b:80:60:2d:f1:3e:8d:77:84:02:
c9:f1:d2:0f:98:d2:12:fa:20:99:f3:0b:04:a1:a4:
b1:a0:fe:2d:4e:e8:62:3a:70:a2:85:b6:e3:bc:66:
91:4a:91:7f:91:4a:e8:5c:fa:6a:1e:95:94:74:0e:
40:7d:d7:71:94:66:91:a5:26:c8:36:02:cd:e9:b7:
8d:df:16:0a:8f:a1:6a:a5:6a:bb:03:d7:12:22:f7:
6f:8f:5f:b4:3a:f1:36:89:d2:bc:f1:ce:f9:b7:5c:
11:89:ae:dc:b3:f5:74:34:09:1a:71:31:bd:6a:d6:
96:df:1c:06:75:bd:0d:d7:23:2d:6a:08:b6:f6:96:
03:ee:67:b7:8a:ee:88:b6:8d:c9:5e:1f:04:07:53:
f9:ba:3b:44:59:be:41:a3:c7:ff:28:96:ec:fd:5b:
a3:68:68:df:41:97:40:ea:b8:5e:2d:7a:96:69:98:
b4:8e:e2:54:6b:91:5c:24:fe:89:37:c0:d7:f1:22:
a7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:59:F1:7F:E6:AF:2E:6F:6E:81:87:8F:92:91:D6:31:CE:3C:37:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40DFA7D4DA2E11EF9FCA5D6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.54.0/24
Signature Algorithm: sha256WithRSAEncryption
29:32:f4:37:15:66:47:1a:48:61:5d:57:0b:dc:17:db:ba:69:
46:87:06:02:03:6d:e1:4e:e6:61:67:f6:b1:74:0c:44:03:cf:
df:d2:ca:12:2d:bf:61:e5:0b:fd:47:3d:5d:6a:85:7c:31:0f:
66:00:75:44:12:d0:49:37:ef:14:19:c0:87:eb:8a:c7:7f:6e:
b9:81:37:41:15:04:70:94:da:c3:ba:ce:c4:4b:b8:75:5a:75:
59:bc:e8:6f:10:d1:d6:a6:c6:19:76:36:aa:75:d7:4b:f5:4d:
84:7d:90:31:63:19:b2:0e:69:f7:5f:93:96:ab:5d:be:dd:08:
83:49:e9:5e:6d:74:44:e4:a4:06:37:7b:66:2c:30:e7:cb:24:
d1:af:9c:84:2d:c3:20:b9:7c:c4:a1:51:e5:42:72:48:69:33:
6d:78:f8:ca:e9:a5:1c:36:44:fc:54:2a:5b:8d:e2:bb:86:6d:
5d:bb:ce:76:cd:a8:d3:9c:ee:f0:57:cb:f0:84:82:73:69:17:
44:0e:e0:53:c9:3b:bd:9c:44:20:08:77:02:3f:f8:2d:d4:bc:
c2:11:f9:d7:a9:35:dd:bc:2c:e4:24:eb:5b:96:52:31:b3:31:
1f:17:2c:13:ec:4a:90:d9:da:e9:8b:71:51:69:21:46:2f:87:
fa:7f:71:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUR3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MDgzNjAzWhcNMjUwMzA1MDgzNjAzWjAYMRYw
FAYDVQQDEw02NzkzNTBmNi02NzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3avm0iRGU3h3jKmLYI0op53HsYRGCImcXvXbg2bikt0NC+mlRgla4+aU
VpwEAeaODlNOxwx2pJ16Kc0ZGSCY0kuAYC3xPo13hALJ8dIPmNIS+iCZ8wsEoaSx
oP4tTuhiOnCihbbjvGaRSpF/kUroXPpqHpWUdA5AfddxlGaRpSbINgLN6beN3xYK
j6FqpWq7A9cSIvdvj1+0OvE2idK88c75t1wRia7cs/V0NAkacTG9ataW3xwGdb0N
1yMtagi29pYD7me3iu6Ito3JXh8EB1P5ujtEWb5Bo8f/KJbs/VujaGjfQZdA6rhe
LXqWaZi0juJUa5FcJP6JN8DX8SKnvQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGxZ
8X/mry5vboGHj5KR1jHOPDfTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MERGQTdENERBMkUxMUVGOUZDQTVENkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt02MA0GCSqGSIb3DQEB
CwUAA4IBAQApMvQ3FWZHGkhhXVcL3BfbumlGhwYCA23hTuZhZ/axdAxEA8/f0soS
Lb9h5Qv9Rz1daoV8MQ9mAHVEEtBJN+8UGcCH64rHf265gTdBFQRwlNrDus7ES7h1
WnVZvOhvENHWpsYZdjaqdddL9U2EfZAxYxmyDmn3X5OWq12+3QiDSelebXRE5KQG
N3tmLDDnyyTRr5yELcMguXzEoVHlQnJIaTNtePjK6aUcNkT8VCpbjeK7hm1du852
zajTnO7wV8vwhIJzaRdEDuBTyTu9nEQgCHcCP/gt1LzCEfnXqTXdvCzkJOtbllIx
szEfFywT7EqQ2drpi3FRaSFGL4f6f3FW
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:58 2025 by rpki-client