Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77F372D4DBDF11EF85D94760762E951A.roa
File: 77F372D4DBDF11EF85D94760762E951A.roa (raw, json)
Hash identifier: 7IvI2NYcHAHAyX8nR9ulpCLB7ZF74t5bgg84CK20QuQ=
Subject key identifier: D2:61:33:E4:6E:E2:58:78:D0:83:45:8F:9E:C3:C0:11:1A:97:AB:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77F372D4DBDF11EF85D94760762E951A.roa
Signing time: Sun 26 Jan 2025 12:17:11 +0000
ROA not before: Sun 26 Jan 2025 12:17:07 +0000
ROA not after: Tue 04 Mar 2025 12:17:07 +0000
asID: 203020
IP address blocks: 154.200.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84626 (0x14a92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 12:17:07 2025 GMT
Not After : Mar 4 12:17:07 2025 GMT
Subject: CN=679627c7-708c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:a9:c6:a3:7e:28:ee:b6:42:74:6c:5e:1d:
29:30:d3:e6:ab:0f:f5:ee:3c:d4:e7:e8:42:82:85:
77:0a:5c:2d:19:5a:af:e2:c3:28:89:7a:83:56:71:
c5:07:3f:e0:1b:8d:d9:ca:55:4b:c7:03:f5:94:68:
d8:95:95:2b:c8:a4:ba:80:34:27:b4:22:af:21:03:
79:c6:d8:b8:a4:50:59:37:63:94:79:6f:6e:bf:4e:
d1:02:49:69:c5:96:6f:40:f5:32:f5:9b:49:37:13:
9d:bb:26:d2:26:6b:bb:1b:b2:46:5f:52:08:19:a3:
ee:02:13:84:71:4a:01:07:04:ec:e6:0d:43:ab:8f:
28:8a:1f:50:a6:68:9f:1f:39:82:1e:09:61:c7:34:
6b:15:23:47:9e:d9:31:d0:ec:e7:c0:58:e7:ef:4a:
e5:0b:94:6d:8b:94:ab:76:e4:f9:83:08:0d:2d:9e:
5e:47:31:19:1e:b1:77:30:be:31:b2:9e:4e:5f:29:
c6:b6:de:59:21:7b:f6:7f:a0:81:ea:39:a3:b2:b8:
38:7e:64:83:ae:b9:1c:c6:75:eb:25:d9:44:ac:c8:
f9:d4:2a:f5:af:73:e9:12:ba:d3:97:84:5d:1e:08:
07:c7:f7:71:49:c1:b9:6c:79:90:f1:39:67:15:3b:
e6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:61:33:E4:6E:E2:58:78:D0:83:45:8F:9E:C3:C0:11:1A:97:AB:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77F372D4DBDF11EF85D94760762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.110.0/24
Signature Algorithm: sha256WithRSAEncryption
49:81:bd:b7:e6:7c:ae:9f:89:0e:05:1c:e0:0f:7f:43:56:bf:
d8:8c:7b:e4:26:d3:9f:a3:fb:f7:f7:c8:66:0e:da:f3:57:fc:
da:85:fa:d1:c3:eb:ec:f7:5f:c3:b7:58:9c:c7:49:9f:d5:c1:
36:d3:31:d9:08:57:3c:42:17:55:f6:b9:4b:7d:46:36:90:12:
3b:b0:d4:d6:5d:07:05:1b:bf:fb:d9:b2:0e:bf:16:ba:bc:ab:
c3:42:f8:22:a2:c0:46:29:3f:f4:71:3d:97:25:d3:51:cd:ba:
06:87:a1:98:79:34:a5:96:88:04:7f:3c:42:60:ef:ad:0a:88:
10:a3:f7:96:6f:6c:e9:10:8e:37:6c:f1:8e:0d:6f:0f:32:fd:
d6:49:a2:af:79:25:99:7d:58:9d:16:1f:23:61:ab:92:ea:7c:
d5:3d:f3:0a:eb:b1:7e:f4:f8:5b:b0:b7:8a:57:9d:75:bd:f1:
f8:1a:40:85:77:f6:8e:51:22:7f:01:9f:3f:18:41:28:62:52:
de:67:6a:73:ff:f4:bd:f9:5a:66:41:ac:09:b8:41:02:9b:cb:
09:d0:f3:5c:a7:35:e9:72:a6:5f:19:3d:2f:f9:ac:21:18:c0:
b7:f2:09:4c:5c:b9:a5:81:e4:c1:b6:8a:33:1e:18:c0:da:e3:
96:5b:2b:72
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUqSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI2MTIxNzA3WhcNMjUwMzA0MTIxNzA3WjAYMRYw
FAYDVQQDEw02Nzk2MjdjNy03MDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnpKpxqN+KO62QnRsXh0pMNPmqw/17jzU5+hCgoV3ClwtGVqv4sMoiXqD
VnHFBz/gG43ZylVLxwP1lGjYlZUryKS6gDQntCKvIQN5xti4pFBZN2OUeW9uv07R
AklpxZZvQPUy9ZtJNxOduybSJmu7G7JGX1IIGaPuAhOEcUoBBwTs5g1Dq48oih9Q
pmifHzmCHglhxzRrFSNHntkx0OznwFjn70rlC5Rti5SrduT5gwgNLZ5eRzEZHrF3
ML4xsp5OXynGtt5ZIXv2f6CB6jmjsrg4fmSDrrkcxnXrJdlErMj51Cr1r3PpErrT
l4RdHggHx/dxScG5bHmQ8TlnFTvm1wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNJh
M+Ru4lh40INFj57DwBEal6vVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83N0YzNzJENERCREYxMUVGODVEOTQ3NjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmshuMA0GCSqGSIb3DQEB
CwUAA4IBAQBJgb235nyun4kOBRzgD39DVr/YjHvkJtOfo/v398hmDtrzV/zahfrR
w+vs91/Dt1icx0mf1cE20zHZCFc8QhdV9rlLfUY2kBI7sNTWXQcFG7/72bIOvxa6
vKvDQvgiosBGKT/0cT2XJdNRzboGh6GYeTSllogEfzxCYO+tCogQo/eWb2zpEI43
bPGODW8PMv3WSaKveSWZfVidFh8jYauS6nzVPfMK67F+9PhbsLeKV511vfH4GkCF
d/aOUSJ/AZ8/GEEoYlLeZ2pz//S9+VpmQawJuEECm8sJ0PNcpzXpcqZfGT0v+awh
GMC38glMXLmlgeTBtoozHhjA2uOWWyty
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:18:39 2025 by rpki-client