Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EF07ECCD96E11EF969D3D60762E951A.roa
File: 4EF07ECCD96E11EF969D3D60762E951A.roa (raw, json)
Hash identifier: aap5sdVeAw39lt8BRe10NxzQyANE+OlAdfOu/X0vZf0=
Subject key identifier: 4E:89:B1:EF:D1:5B:1D:43:40:81:3C:4E:D5:73:3D:C2:29:2A:78:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EF07ECCD96E11EF969D3D60762E951A.roa
Signing time: Thu 23 Jan 2025 09:42:07 +0000
ROA not before: Thu 23 Jan 2025 09:42:03 +0000
ROA not after: Fri 28 Feb 2025 09:42:03 +0000
asID: 62240
IP address blocks: 154.194.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82168 (0x140f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:42:03 2025 GMT
Not After : Feb 28 09:42:03 2025 GMT
Subject: CN=67920eee-1408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3b:58:cf:4b:48:ca:31:13:76:96:ee:61:e5:
fe:fb:12:0d:68:05:42:52:13:61:c2:0f:66:a8:75:
c4:a6:cf:0a:00:04:eb:2d:95:9d:f7:39:40:62:1c:
a7:f2:94:e8:0c:f3:fb:95:fc:16:13:bc:86:e8:dc:
31:b3:31:8a:17:d3:df:f8:6c:4b:a9:c9:62:4f:a0:
57:85:2f:95:fb:25:cb:e2:c4:04:10:d7:b1:88:57:
3e:81:f6:39:45:86:7b:a1:b7:16:f9:f3:37:ba:c9:
26:00:4c:8d:91:93:6d:fe:b6:8e:ca:0d:81:78:ed:
6b:5c:16:bf:de:23:3a:d4:05:47:fa:bf:0b:3c:e8:
ad:03:9b:24:31:dd:0d:12:18:b7:2d:4d:7d:36:c2:
1e:f1:5c:7d:c0:25:1c:3f:dc:f1:d4:bf:bd:63:d6:
4c:76:fc:b4:4e:c6:86:8f:b9:e1:3e:cd:69:ee:bc:
ee:e2:73:9f:ac:c4:30:b9:8f:45:38:89:54:f8:5c:
ad:f4:fe:0c:67:da:88:37:b1:e4:03:04:53:c7:ce:
cc:7e:b1:fe:69:b6:20:bd:48:65:5f:25:22:c4:30:
9e:0c:3e:0a:93:79:76:a3:d5:42:d6:53:f6:45:71:
fd:e5:1f:cc:d0:98:94:00:fd:0e:22:15:19:5c:22:
89:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:89:B1:EF:D1:5B:1D:43:40:81:3C:4E:D5:73:3D:C2:29:2A:78:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EF07ECCD96E11EF969D3D60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.118.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:05:60:50:f0:04:8a:a4:f0:84:a9:98:1d:0e:72:5b:3b:c9:
42:04:d0:ab:e4:b8:8a:d2:a9:44:c0:60:0d:b5:cb:ec:6a:63:
6d:79:95:4d:17:c6:ac:fc:81:c5:c6:95:ec:0f:e1:0b:ec:1f:
52:79:37:a7:fd:3a:25:01:75:69:dc:9a:85:85:a4:93:ae:13:
11:06:60:9c:35:de:b6:9e:85:ad:e6:36:3a:16:42:96:a9:9b:
d2:00:3b:10:fc:7b:22:d6:68:a8:bd:18:02:92:e5:1e:a0:b8:
c8:7b:26:5b:54:0d:b9:df:27:f6:1e:b0:25:60:45:d9:8f:ad:
72:bc:15:45:9c:44:1f:2b:9a:b6:48:6f:ca:fb:9d:96:5b:25:
fb:e4:0f:86:38:69:a9:40:c6:bd:62:3f:db:71:53:61:9f:55:
73:92:d2:55:95:47:55:92:cf:19:9f:f9:5d:ed:b2:d3:c4:1b:
5a:8f:5d:80:d0:27:2e:99:b5:c1:07:dc:95:68:7f:23:b8:a0:
95:80:64:7f:ca:78:a7:4d:47:d7:7d:6d:5a:39:a2:f1:d9:fe:
e4:a4:54:e8:4e:0e:93:29:64:54:ba:27:08:bf:80:99:e6:2c:
46:88:74:5c:4f:0f:5b:9e:4d:53:34:fb:59:30:48:93:57:cd:
dd:ff:a4:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUD4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMDk0MjAzWhcNMjUwMjI4MDk0MjAzWjAYMRYw
FAYDVQQDEw02NzkyMGVlZS0xNDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8TtYz0tIyjETdpbuYeX++xINaAVCUhNhwg9mqHXEps8KAATrLZWd9zlA
Yhyn8pToDPP7lfwWE7yG6NwxszGKF9Pf+GxLqcliT6BXhS+V+yXL4sQEENexiFc+
gfY5RYZ7obcW+fM3uskmAEyNkZNt/raOyg2BeO1rXBa/3iM61AVH+r8LPOitA5sk
Md0NEhi3LU19NsIe8Vx9wCUcP9zx1L+9Y9ZMdvy0TsaGj7nhPs1p7rzu4nOfrMQw
uY9FOIlU+Fyt9P4MZ9qIN7HkAwRTx87MfrH+abYgvUhlXyUixDCeDD4Kk3l2o9VC
1lP2RXH95R/M0JiUAP0OIhUZXCKJ9QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE6J
se/RWx1DQIE8TtVzPcIpKniRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RUYwN0VDQ0Q5NkUxMUVGOTY5RDNENjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJ2MA0GCSqGSIb3DQEB
CwUAA4IBAQDVBWBQ8ASKpPCEqZgdDnJbO8lCBNCr5LiK0qlEwGANtcvsamNteZVN
F8as/IHFxpXsD+EL7B9SeTen/TolAXVp3JqFhaSTrhMRBmCcNd62noWt5jY6FkKW
qZvSADsQ/Hsi1miovRgCkuUeoLjIeyZbVA253yf2HrAlYEXZj61yvBVFnEQfK5q2
SG/K+52WWyX75A+GOGmpQMa9Yj/bcVNhn1VzktJVlUdVks8Zn/ld7bLTxBtaj12A
0CcumbXBB9yVaH8juKCVgGR/yninTUfXfW1aOaLx2f7kpFToTg6TKWRUuicIv4CZ
5ixGiHRcTw9bnk1TNPtZMEiTV83d/6QS
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:17 2025 by rpki-client