Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64122BA4DEDA11EFAF3A5A86762E951A.roa
File: 64122BA4DEDA11EFAF3A5A86762E951A.roa (raw, json)
Hash identifier: IQOoBqQ5xXFKVmzZ2wZdinKZLH7ECcjAkGzyoRxnh1o=
Subject key identifier: 1C:17:85:4B:D6:09:69:45:92:9B:DE:BB:07:3D:B6:83:E3:B4:36:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64122BA4DEDA11EFAF3A5A86762E951A.roa
Signing time: Thu 30 Jan 2025 07:18:24 +0000
ROA not before: Thu 30 Jan 2025 07:18:19 +0000
ROA not after: Wed 05 Mar 2025 07:18:19 +0000
asID: 147176
IP address blocks: 154.197.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85408 (0x14da0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 30 07:18:19 2025 GMT
Not After : Mar 5 07:18:19 2025 GMT
Subject: CN=679b27bf-6f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:89:38:70:82:dc:16:07:b5:42:82:56:20:48:
2f:78:70:f0:35:fe:67:49:5b:c5:dc:03:94:51:10:
48:bc:4a:63:52:a4:a2:a5:9d:a3:5f:4b:03:c0:15:
4f:1d:4a:4e:19:8b:15:ba:56:81:95:c6:0a:e3:ed:
44:fa:63:5f:a2:91:62:df:b0:98:6a:de:18:65:2d:
99:b6:1d:23:e8:74:7e:58:67:cb:a2:9b:0a:b3:13:
82:b7:c0:ab:b4:91:0d:1f:02:b1:46:11:6a:d2:5e:
b0:34:57:5a:76:9b:05:06:a4:27:2a:26:0c:38:6e:
6f:73:5d:16:f9:60:d4:35:a7:22:69:77:8d:f5:d2:
bd:3e:ec:61:7b:4d:54:52:0e:61:bb:71:69:55:92:
06:c2:72:ec:11:16:a4:5b:9a:b5:aa:f5:35:52:14:
6c:37:ab:a1:3e:68:e7:71:82:c5:c0:bf:9a:64:93:
3c:ab:d2:40:25:52:42:08:fa:70:7c:b4:32:81:57:
6e:e1:bc:78:77:ea:f4:24:9e:06:a3:c6:77:59:14:
ad:e9:f0:04:48:be:39:a6:df:95:59:8e:53:f7:52:
61:98:06:48:3f:ae:d4:d6:c7:c4:e1:f4:81:7f:fa:
86:95:2b:82:9c:70:68:69:f5:f4:9f:87:fd:6b:b7:
20:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:17:85:4B:D6:09:69:45:92:9B:DE:BB:07:3D:B6:83:E3:B4:36:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64122BA4DEDA11EFAF3A5A86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.102.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:f4:0d:9a:0b:70:0c:2d:64:3f:9e:bf:0d:bc:11:51:e2:04:
a6:72:c4:ce:06:44:ae:da:df:d2:96:51:10:7c:c3:da:50:58:
ca:2e:9b:9f:62:1a:a3:72:57:66:27:09:76:60:f4:8a:65:3b:
50:b0:e8:ba:78:f2:62:51:9d:9d:f8:42:1d:5d:06:90:9a:8a:
73:6b:86:bd:df:02:3f:37:2a:37:f1:93:a2:b8:4d:9f:21:10:
79:77:84:3d:49:b5:6e:b7:f8:19:e8:13:3d:0b:28:12:50:66:
bb:24:95:40:49:67:00:91:15:a6:6f:74:65:c3:ac:63:fb:a4:
2f:ff:d3:5d:bd:f6:9c:6e:36:58:e9:4c:d5:a4:1a:c2:7f:70:
fe:f7:e7:f8:1c:6a:bc:92:36:17:10:78:52:ba:bc:fd:91:d6:
18:cf:a3:78:85:3f:e7:ac:1f:9e:93:38:19:13:d9:55:cd:d5:
a4:cb:c2:64:e7:28:d4:61:3f:bb:ca:92:79:d1:fe:f3:6a:5f:
b6:3a:b9:0d:f5:3b:d6:0c:8b:fc:25:a1:b3:47:8f:10:c7:2b:
17:36:58:d8:d6:d1:16:aa:4f:a2:54:e5:ef:b2:4c:53:af:c2:
48:80:b8:ff:36:e1:10:c3:e3:04:f9:92:72:45:94:62:81:8f:
1d:68:73:94
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU2gMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTMwMDcxODE5WhcNMjUwMzA1MDcxODE5WjAYMRYw
FAYDVQQDEw02NzliMjdiZi02ZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA34k4cILcFge1QoJWIEgveHDwNf5nSVvF3AOUURBIvEpjUqSipZ2jX0sD
wBVPHUpOGYsVulaBlcYK4+1E+mNfopFi37CYat4YZS2Zth0j6HR+WGfLopsKsxOC
t8CrtJENHwKxRhFq0l6wNFdadpsFBqQnKiYMOG5vc10W+WDUNaciaXeN9dK9Puxh
e01UUg5hu3FpVZIGwnLsERakW5q1qvU1UhRsN6uhPmjncYLFwL+aZJM8q9JAJVJC
CPpwfLQygVdu4bx4d+r0JJ4Go8Z3WRSt6fAESL45pt+VWY5T91JhmAZIP67U1sfE
4fSBf/qGlSuCnHBoafX0n4f9a7cgDwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBwX
hUvWCWlFkpveuwc9toPjtDajMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NDEyMkJBNERFREExMUVGQUYzQTVBODY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVmMA0GCSqGSIb3DQEB
CwUAA4IBAQDI9A2aC3AMLWQ/nr8NvBFR4gSmcsTOBkSu2t/SllEQfMPaUFjKLpuf
YhqjcldmJwl2YPSKZTtQsOi6ePJiUZ2d+EIdXQaQmopza4a93wI/Nyo38ZOiuE2f
IRB5d4Q9SbVut/gZ6BM9CygSUGa7JJVASWcAkRWmb3Rlw6xj+6Qv/9NdvfacbjZY
6UzVpBrCf3D+9+f4HGq8kjYXEHhSurz9kdYYz6N4hT/nrB+ekzgZE9lVzdWky8Jk
5yjUYT+7ypJ50f7zal+2OrkN9TvWDIv8JaGzR48QxysXNljY1tEWqk+iVOXvskxT
r8JIgLj/NuEQw+ME+ZJyRZRigY8daHOU
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:10:03 2025 by rpki-client