Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F63C948D52211EF9F32458A762E951A.roa
File: 6F63C948D52211EF9F32458A762E951A.roa (raw, json)
Hash identifier: YbvM0YfrEWTw9Weu/E+Z9tKv00Wnakd3exYC3v9qHFQ=
Subject key identifier: B6:27:0A:33:C3:F9:2C:77:14:12:39:D7:02:F0:28:7A:45:13:14:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D65
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F63C948D52211EF9F32458A762E951A.roa
Signing time: Fri 17 Jan 2025 22:28:55 +0000
ROA not before: Fri 17 Jan 2025 22:28:51 +0000
ROA not after: Sun 02 Feb 2025 22:28:51 +0000
asID: 25160
IP address blocks: 154.81.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81253 (0x13d65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 22:28:51 2025 GMT
Not After : Feb 2 22:28:51 2025 GMT
Subject: CN=678ad9a7-d033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:70:9c:49:f8:02:b9:d7:67:9f:a4:20:1d:
7c:30:a5:e4:61:78:7a:7f:ba:dc:c4:55:b6:ae:fb:
09:90:73:17:84:21:50:57:65:39:74:1f:71:4c:98:
ab:e2:07:74:12:52:06:2b:60:21:c4:15:a6:ce:cc:
d4:f3:ab:ff:58:69:48:a2:06:59:c2:63:71:7a:64:
51:d9:4b:cf:66:b1:7d:59:13:c5:c3:92:07:51:42:
f5:bf:0a:a1:e8:ca:ee:f8:10:39:16:2e:af:bb:4d:
5b:b1:4c:68:72:f6:46:7a:87:85:88:70:ff:44:cd:
e2:f9:bb:7e:1e:35:74:14:8f:5c:5c:18:26:12:be:
a9:84:ac:b1:51:0f:e7:a5:cd:e8:94:5e:6c:5d:f0:
76:e2:d5:9f:98:54:a7:53:1e:c8:90:17:5b:17:a2:
fd:15:77:c1:03:e9:f2:dc:e6:66:91:4e:0f:f7:da:
0a:c6:4d:ca:1e:f0:9c:2d:b8:86:42:98:e6:65:fc:
ef:f3:0c:08:40:67:09:ea:60:2b:6b:9b:c6:0d:2c:
5b:bd:97:75:e9:1b:4d:23:3e:5c:28:fc:7f:10:ed:
10:31:ad:e9:d7:63:3c:93:b6:6f:62:b4:7d:ae:7c:
d6:b4:ba:12:57:57:64:fa:d4:fe:33:15:5f:53:85:
8d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:27:0A:33:C3:F9:2C:77:14:12:39:D7:02:F0:28:7A:45:13:14:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F63C948D52211EF9F32458A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:20:3c:b7:39:42:75:1a:cc:a8:7a:ad:72:f3:6a:c8:46:58:
55:d9:15:a6:8b:bf:96:0f:aa:56:8e:ac:15:24:90:c1:37:4e:
14:60:0c:fa:6f:79:5e:84:80:c9:1d:18:15:05:ff:91:bc:0f:
26:2f:7a:03:82:3c:21:65:18:22:57:b7:f8:65:db:24:84:50:
ac:13:15:a2:7a:0b:d8:21:c8:33:49:79:90:5b:b2:f3:fa:b8:
56:86:5e:42:16:70:da:66:68:e1:7b:f3:f5:5b:54:1c:be:8b:
48:bd:85:8b:79:04:4e:a8:16:e9:b1:ca:29:4a:f2:c7:2a:05:
0e:6f:25:10:e3:2a:e4:1e:d6:68:27:5d:7a:92:0d:11:96:3b:
1d:9c:a4:da:d5:15:66:73:99:41:44:e1:45:7f:ef:76:24:58:
55:16:79:54:35:52:0c:b2:e0:57:ed:a7:3a:b9:5e:96:c6:92:
f5:bd:5e:37:ee:52:3c:a3:d8:29:82:03:c7:4f:18:f4:dc:a5:
89:40:eb:2d:9f:33:34:0d:e5:07:02:33:0f:f3:94:0d:85:0a:
0c:ca:60:9b:34:f4:4f:a8:59:09:53:54:00:b9:72:8c:d0:93:
a5:f8:bd:e7:91:92:52:ee:83:4f:6f:0d:65:c0:20:7d:f6:0d:
b4:da:9c:ae
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT1lMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE3MjIyODUxWhcNMjUwMjAyMjIyODUxWjAYMRYw
FAYDVQQDEw02NzhhZDlhNy1kMDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArRZwnEn4ArnXZ5+kIB18MKXkYXh6f7rcxFW2rvsJkHMXhCFQV2U5dB9x
TJir4gd0ElIGK2AhxBWmzszU86v/WGlIogZZwmNxemRR2UvPZrF9WRPFw5IHUUL1
vwqh6Mru+BA5Fi6vu01bsUxocvZGeoeFiHD/RM3i+bt+HjV0FI9cXBgmEr6phKyx
UQ/npc3olF5sXfB24tWfmFSnUx7IkBdbF6L9FXfBA+ny3OZmkU4P99oKxk3KHvCc
LbiGQpjmZfzv8wwIQGcJ6mAra5vGDSxbvZd16RtNIz5cKPx/EO0QMa3p12M8k7Zv
YrR9rnzWtLoSV1dk+tT+MxVfU4WNHwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLYn
CjPD+Sx3FBI51wLwKHpFExStMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RjYzQzk0OEQ1MjIxMUVGOUYzMjQ1OEE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlEyMA0GCSqGSIb3DQEB
CwUAA4IBAQAaIDy3OUJ1Gsyoeq1y82rIRlhV2RWmi7+WD6pWjqwVJJDBN04UYAz6
b3lehIDJHRgVBf+RvA8mL3oDgjwhZRgiV7f4ZdskhFCsExWiegvYIcgzSXmQW7Lz
+rhWhl5CFnDaZmjhe/P1W1QcvotIvYWLeQROqBbpscopSvLHKgUObyUQ4yrkHtZo
J116kg0RljsdnKTa1RVmc5lBROFFf+92JFhVFnlUNVIMsuBX7ac6uV6WxpL1vV43
7lI8o9gpggPHTxj03KWJQOstnzM0DeUHAjMP85QNhQoMymCbNPRPqFkJU1QAuXKM
0JOl+L3nkZJS7oNPbw1lwCB99g202pyu
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:00:45 2025 by rpki-client