Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/480E7D48AD5E11EFB4A5744C762E951A.roa
File: 480E7D48AD5E11EFB4A5744C762E951A.roa (raw, json)
Hash identifier: ZHH29luYBucPQPUXg5NMDpasDHIr6FsFpl262u1O8H4=
Subject key identifier: 5F:A8:5C:E3:B1:52:43:3C:0D:DC:F5:35:A2:F6:57:8D:60:6E:26:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0114F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/480E7D48AD5E11EFB4A5744C762E951A.roa
Signing time: Thu 28 Nov 2024 07:56:32 +0000
ROA not before: Thu 28 Nov 2024 07:56:28 +0000
ROA not after: Tue 11 Feb 2025 07:56:28 +0000
asID: 22773
IP address blocks: 154.194.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70905 (0x114f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 28 07:56:28 2024 GMT
Not After : Feb 11 07:56:28 2025 GMT
Subject: CN=67482230-c491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c4:08:b8:1b:df:bd:8b:39:34:ed:c9:da:0f:
7e:a4:1c:53:58:16:09:d1:f7:06:d9:d1:bf:10:1f:
c9:c5:25:d4:9d:7a:67:e8:58:b2:0d:dd:ef:be:36:
d3:36:ac:06:33:76:e8:5a:00:23:b3:6f:0e:77:68:
3f:9b:34:7a:8d:ec:34:d1:e0:89:b3:ea:05:42:b2:
da:6b:57:7c:84:a7:ee:4a:32:44:86:51:52:14:56:
17:e6:e0:84:c9:82:5d:15:67:b1:c0:3e:7b:5c:03:
e4:9d:4e:73:98:d1:73:3b:f6:ff:26:c7:42:ee:67:
96:d5:68:29:a4:99:f5:ba:85:c5:5d:aa:2a:77:d9:
b3:3a:e1:d3:52:8b:c3:90:84:b7:29:b2:97:c2:f7:
b1:05:a7:b9:fd:dc:2e:23:a5:d4:fc:ef:91:32:a8:
c1:b3:a2:7e:37:2d:24:0b:e6:a5:82:7a:0c:de:7e:
91:f4:18:7c:6d:35:f6:5a:fc:e7:ba:50:5b:26:cb:
cc:b8:a7:f9:d6:22:b1:74:e8:ca:40:3a:0b:97:16:
75:b1:57:25:c6:44:ed:95:2a:b3:66:04:7c:53:1c:
bf:66:9f:01:0e:59:ea:c5:a9:21:69:78:ba:30:aa:
ba:82:1e:4c:01:3b:13:58:d4:e8:3a:92:3c:fd:f0:
1b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A8:5C:E3:B1:52:43:3C:0D:DC:F5:35:A2:F6:57:8D:60:6E:26:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/480E7D48AD5E11EFB4A5744C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:77:75:f2:4c:42:31:cc:1e:ad:5d:ae:17:d9:b8:e7:d7:27:
94:38:b1:f3:ba:27:0f:e9:bb:32:d9:f3:06:63:3f:ee:54:64:
01:df:d3:23:33:3d:fa:1d:b7:3b:c7:70:2b:0c:1e:6c:f5:20:
aa:10:2a:47:e4:bb:9c:9e:1d:1d:be:bf:d6:e4:e2:c1:2b:df:
96:54:55:08:d5:db:d9:8d:76:ce:0b:c6:be:d2:74:3a:19:4f:
b4:12:3f:e6:65:46:1b:5c:93:8c:3e:1e:78:31:8b:5f:2c:9e:
d8:54:eb:1d:6e:a2:60:e3:29:d4:d2:71:4f:5f:f8:a8:f1:9f:
01:72:bf:d7:e1:56:d2:27:bb:de:de:48:b7:ea:da:c4:5c:a3:
4d:76:86:a6:72:18:73:49:8b:0b:15:39:ee:2a:13:f6:fc:86:
7b:b1:1a:05:67:44:0f:8d:da:64:1b:76:14:b6:9a:d5:11:ee:
09:1d:98:53:3f:f6:38:89:5e:77:08:2c:26:39:f7:97:23:2d:
48:47:e7:3c:99:4e:b8:38:d6:72:ce:64:c5:d9:7c:ad:59:89:
16:e6:2e:8a:aa:d9:2f:41:26:80:f1:06:b5:ac:72:f7:fb:76:
c3:d9:7e:38:a5:dd:fc:cc:c4:11:db:b7:15:d5:25:1e:b9:e6:
e2:0a:b6:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDART5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTI4MDc1NjI4WhcNMjUwMjExMDc1NjI4WjAYMRYw
FAYDVQQDEw02NzQ4MjIzMC1jNDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7MQIuBvfvYs5NO3J2g9+pBxTWBYJ0fcG2dG/EB/JxSXUnXpn6FiyDd3v
vjbTNqwGM3boWgAjs28Od2g/mzR6jew00eCJs+oFQrLaa1d8hKfuSjJEhlFSFFYX
5uCEyYJdFWexwD57XAPknU5zmNFzO/b/JsdC7meW1WgppJn1uoXFXaoqd9mzOuHT
UovDkIS3KbKXwvexBae5/dwuI6XU/O+RMqjBs6J+Ny0kC+algnoM3n6R9Bh8bTX2
WvznulBbJsvMuKf51iKxdOjKQDoLlxZ1sVclxkTtlSqzZgR8Uxy/Zp8BDlnqxakh
aXi6MKq6gh5MATsTWNToOpI8/fAbGwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF+o
XOOxUkM8Ddz1NaL2V41gbibPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80ODBFN0Q0OEFENUUxMUVGQjRBNTc0NEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsIYMA0GCSqGSIb3DQEB
CwUAA4IBAQCpd3XyTEIxzB6tXa4X2bjn1yeUOLHzuicP6bsy2fMGYz/uVGQB39Mj
Mz36Hbc7x3ArDB5s9SCqECpH5Lucnh0dvr/W5OLBK9+WVFUI1dvZjXbOC8a+0nQ6
GU+0Ej/mZUYbXJOMPh54MYtfLJ7YVOsdbqJg4ynU0nFPX/io8Z8Bcr/X4VbSJ7ve
3ki36trEXKNNdoamchhzSYsLFTnuKhP2/IZ7sRoFZ0QPjdpkG3YUtprVEe4JHZhT
P/Y4iV53CCwmOfeXIy1IR+c8mU64ONZyzmTF2XytWYkW5i6KqtkvQSaA8Qa1rHL3
+3bD2X44pd38zMQR27cV1SUeuebiCraL
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:30:34 2025 by rpki-client