Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/537296F6D9CD11EFA2A35057762E951A.roa
File: 537296F6D9CD11EFA2A35057762E951A.roa (raw, json)
Hash identifier: 8wmmrUgzLFh0zewmm75U8+vUMWdAPVv78i6ui2E9L5I=
Subject key identifier: BF:BE:39:A2:BB:96:5C:28:51:12:16:27:49:E4:68:71:88:DD:2C:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/537296F6D9CD11EFA2A35057762E951A.roa
Signing time: Thu 23 Jan 2025 21:02:16 +0000
ROA not before: Fri 24 Jan 2025 21:02:12 +0000
ROA not after: Fri 28 Feb 2025 21:02:12 +0000
asID: 62240
IP address blocks: 154.196.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82676 (0x142f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:02:12 2025 GMT
Not After : Feb 28 21:02:12 2025 GMT
Subject: CN=6792ae58-e13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:a1:fd:ac:51:ea:51:6b:f8:4d:9d:28:83:
05:80:19:86:97:48:77:38:99:68:a1:7c:b4:03:b0:
86:35:4c:94:ac:31:d6:2f:14:52:e6:25:62:b7:49:
d0:f7:c3:f0:57:f0:49:9e:c1:d4:c7:30:e5:f8:36:
c7:3c:de:0f:f8:61:5c:1b:c5:bb:f5:97:f5:1b:bb:
eb:4c:a2:c8:18:3f:88:b6:a7:65:cf:80:58:0c:8a:
1e:d7:b6:f4:1e:97:27:76:04:8c:ed:93:13:fa:78:
0a:5d:cc:e5:98:66:e4:d1:2d:7d:83:f9:38:2f:bd:
88:2d:21:9f:af:c2:06:be:21:ce:a5:f7:76:23:5b:
ef:76:71:e2:69:ad:1f:c4:72:06:a1:2c:7c:45:4f:
9b:e6:dd:7f:d8:bc:ba:86:61:94:4c:fa:71:56:cc:
9d:b5:48:7e:f8:31:d6:34:23:c4:a0:23:94:14:1d:
f1:6e:0c:6f:0e:cf:bd:85:5f:09:8e:12:fd:1b:68:
03:74:b4:b4:05:46:d3:55:db:36:aa:5c:81:eb:48:
49:73:5e:fb:fa:1c:a3:33:fa:cc:82:0c:37:b2:14:
4a:32:13:34:0e:f1:d8:ca:5e:b6:4d:de:6f:21:86:
f7:a9:bf:1c:67:56:4a:84:a5:22:9c:90:31:05:2c:
74:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BE:39:A2:BB:96:5C:28:51:12:16:27:49:E4:68:71:88:DD:2C:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/537296F6D9CD11EFA2A35057762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.70.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:0c:e1:6f:a0:18:4e:5d:60:2b:46:41:b7:a3:01:b9:47:36:
b6:4b:e3:5f:1d:46:07:1f:33:2c:95:2c:29:c8:bc:69:a1:c5:
54:a7:d9:5e:47:3f:3a:ad:1e:54:73:6b:13:04:c7:ad:09:74:
3e:78:35:35:5f:ce:2d:1a:ef:f0:87:e5:79:9f:13:2c:cb:57:
c1:ba:3e:65:af:1b:82:78:0a:d8:7f:3c:53:70:83:01:aa:17:
9f:bb:ce:1e:2b:d2:d8:ca:b6:a0:d0:e4:2d:9f:b4:92:97:e5:
38:0d:aa:8a:7b:16:1a:4e:fb:bf:a9:2f:d3:ff:2b:fb:94:ee:
4c:c4:5e:73:3d:bd:3d:8e:e1:5f:5a:4b:7d:df:ac:ee:69:36:
2f:9b:6f:64:e7:9b:e6:5b:6e:db:b1:90:54:18:5c:3a:ec:37:
51:e3:8e:c4:40:68:2f:65:25:0e:be:c1:55:54:b2:15:50:b4:
2e:10:69:c0:0b:6c:13:ea:43:59:0d:3c:89:0e:ce:d6:87:e9:
c3:9a:9a:a9:95:3f:b8:fe:10:f6:20:12:11:f5:2c:9a:93:cf:
fc:d0:45:21:06:62:30:1a:82:78:d9:46:a2:8d:b2:2a:ea:9e:
37:93:17:a8:63:3d:48:65:18:d9:d6:4f:00:b6:d8:68:96:da:
da:ff:80:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUL0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MjEwMjEyWhcNMjUwMjI4MjEwMjEyWjAYMRYw
FAYDVQQDEw02NzkyYWU1OC1lMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuRWh/axR6lFr+E2dKIMFgBmGl0h3OJlooXy0A7CGNUyUrDHWLxRS5iVi
t0nQ98PwV/BJnsHUxzDl+DbHPN4P+GFcG8W79Zf1G7vrTKLIGD+Itqdlz4BYDIoe
17b0HpcndgSM7ZMT+ngKXczlmGbk0S19g/k4L72ILSGfr8IGviHOpfd2I1vvdnHi
aa0fxHIGoSx8RU+b5t1/2Ly6hmGUTPpxVsydtUh++DHWNCPEoCOUFB3xbgxvDs+9
hV8JjhL9G2gDdLS0BUbTVds2qlyB60hJc177+hyjM/rMggw3shRKMhM0DvHYyl62
Td5vIYb3qb8cZ1ZKhKUinJAxBSx0iQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL++
OaK7llwoURIWJ0nkaHGI3SxBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MzcyOTZGNkQ5Q0QxMUVGQTJBMzUwNTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsRGMA0GCSqGSIb3DQEB
CwUAA4IBAQC9DOFvoBhOXWArRkG3owG5Rza2S+NfHUYHHzMslSwpyLxpocVUp9le
Rz86rR5Uc2sTBMetCXQ+eDU1X84tGu/wh+V5nxMsy1fBuj5lrxuCeArYfzxTcIMB
qhefu84eK9LYyrag0OQtn7SSl+U4DaqKexYaTvu/qS/T/yv7lO5MxF5zPb09juFf
Wkt936zuaTYvm29k55vmW27bsZBUGFw67DdR447EQGgvZSUOvsFVVLIVULQuEGnA
C2wT6kNZDTyJDs7Wh+nDmpqplT+4/hD2IBIR9Syak8/80EUhBmIwGoJ42UaijbIq
6p43kxeoYz1IZRjZ1k8Attholtra/4DR
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:43 2025 by rpki-client