Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85BBDA26CCD711EFA16D1FA9762E951A.roa
File: 85BBDA26CCD711EFA16D1FA9762E951A.roa (raw, json)
Hash identifier: zcVqEz5dHZKxzb0QvkeYmtwbR+KS47XwQZFWZYw8nd8=
Subject key identifier: BF:F7:5A:09:7B:1B:A8:33:A9:93:E2:30:8B:DB:E8:D1:25:84:C6:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013681
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85BBDA26CCD711EFA16D1FA9762E951A.roa
Signing time: Tue 07 Jan 2025 09:12:31 +0000
ROA not before: Tue 07 Jan 2025 09:12:26 +0000
ROA not after: Tue 11 Feb 2025 09:12:26 +0000
asID: 395793
IP address blocks: 154.202.116.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79489 (0x13681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 09:12:26 2025 GMT
Not After : Feb 11 09:12:26 2025 GMT
Subject: CN=677ceffe-5c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d5:a4:e5:28:0b:50:46:09:d4:e3:68:1d:48:
93:fa:2d:bd:d7:a7:1d:1d:cb:67:ee:37:fc:f4:8f:
b5:09:67:9c:5a:9a:16:63:e7:53:47:57:e3:6e:06:
a6:7a:e0:13:bb:f7:3b:b2:2e:4f:c6:5b:c0:e3:b2:
cb:cb:b0:c5:1d:2a:dd:2a:6b:cf:bb:5c:1b:bc:de:
95:10:7f:49:1c:15:70:b8:c1:f1:91:36:bb:e8:27:
de:52:d9:e4:fa:fa:a3:9f:1f:88:09:1a:d6:af:6b:
0c:08:50:8b:99:3c:06:89:83:a1:b4:94:6c:96:28:
a2:f2:ea:69:be:b0:07:0a:4e:2b:c4:57:ad:f7:05:
d4:2d:96:94:4d:ab:ed:0b:c3:81:06:87:4e:ad:75:
5c:6d:15:f1:32:49:35:e4:8c:c6:79:21:75:18:cc:
28:aa:2e:ec:db:f4:5a:c1:b7:29:bb:b5:92:c6:6f:
06:5d:42:b1:0a:a3:79:06:e9:fc:4c:70:e0:d9:54:
0d:0e:4f:6d:fe:09:16:d7:37:5a:08:4e:ca:0a:76:
1f:df:41:f1:c1:37:41:d7:ee:86:93:c7:ac:b9:3f:
33:a2:99:00:b8:fa:1f:4e:4e:ea:6c:e3:c3:36:3c:
01:40:76:18:18:6e:75:73:62:f1:19:f8:c0:88:2c:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F7:5A:09:7B:1B:A8:33:A9:93:E2:30:8B:DB:E8:D1:25:84:C6:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85BBDA26CCD711EFA16D1FA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.116.0/23
Signature Algorithm: sha256WithRSAEncryption
76:19:05:4d:58:bf:41:dd:f6:fc:99:6c:ef:db:84:2c:5f:1c:
84:f3:38:7a:15:79:36:05:dc:9e:5a:18:3a:a5:63:6e:a5:e4:
f2:bc:55:1f:49:8c:ac:01:7e:0e:ca:1b:37:63:e2:97:fe:57:
7a:5d:91:6a:e2:cc:96:72:85:76:89:9a:05:83:8d:b1:b9:e2:
82:38:b6:d9:53:11:32:4e:68:a3:c6:e9:cc:f3:13:95:26:e5:
85:ea:e1:57:b1:48:61:b1:2a:00:df:7c:d2:fe:1e:bb:9c:89:
01:0c:7a:af:9f:e5:8e:df:ce:31:b5:98:a3:c1:e9:6d:6b:16:
4e:53:30:36:f1:7b:40:9f:6f:75:bd:39:c6:42:31:9c:7a:f9:
56:52:7c:13:e9:d7:ca:fb:12:06:24:47:29:54:83:61:75:ad:
62:54:67:c2:5c:3f:f8:7a:86:09:4f:c9:06:63:47:d3:f3:50:
62:af:a3:17:1e:00:d7:01:3d:61:a5:62:9a:1a:47:15:72:fc:
6a:03:79:89:45:ad:16:38:84:57:27:2b:79:4a:39:17:f9:41:
7a:56:e9:2d:1c:6b:59:e9:98:d2:dc:24:9d:72:f4:ff:05:40:
37:3f:de:41:48:34:a8:3f:40:1e:93:af:ae:eb:6f:c1:dd:87:
b0:44:8d:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATaBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA3MDkxMjI2WhcNMjUwMjExMDkxMjI2WjAYMRYw
FAYDVQQDEw02NzdjZWZmZS01YzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2dWk5SgLUEYJ1ONoHUiT+i2916cdHctn7jf89I+1CWecWpoWY+dTR1fj
bgameuATu/c7si5PxlvA47LLy7DFHSrdKmvPu1wbvN6VEH9JHBVwuMHxkTa76Cfe
Utnk+vqjnx+ICRrWr2sMCFCLmTwGiYOhtJRsliii8uppvrAHCk4rxFet9wXULZaU
TavtC8OBBodOrXVcbRXxMkk15IzGeSF1GMwoqi7s2/Rawbcpu7WSxm8GXUKxCqN5
Bun8THDg2VQNDk9t/gkW1zdaCE7KCnYf30HxwTdB1+6Gk8esuT8zopkAuPofTk7q
bOPDNjwBQHYYGG51c2LxGfjAiCycYwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL/3
Wgl7G6gzqZPiMIvb6NElhMbaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NUJCREEyNkNDRDcxMUVGQTE2RDFGQTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsp0MA0GCSqGSIb3DQEB
CwUAA4IBAQB2GQVNWL9B3fb8mWzv24QsXxyE8zh6FXk2BdyeWhg6pWNupeTyvFUf
SYysAX4Oyhs3Y+KX/ld6XZFq4syWcoV2iZoFg42xueKCOLbZUxEyTmijxunM8xOV
JuWF6uFXsUhhsSoA33zS/h67nIkBDHqvn+WO384xtZijweltaxZOUzA28XtAn291
vTnGQjGcevlWUnwT6dfK+xIGJEcpVINhda1iVGfCXD/4eoYJT8kGY0fT81Bir6MX
HgDXAT1hpWKaGkcVcvxqA3mJRa0WOIRXJyt5SjkX+UF6VuktHGtZ6ZjS3CSdcvT/
BUA3P95BSDSoP0Aek6+u62/B3YewRI0h
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:46:00 2025 by rpki-client