Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9086676ADCA811EF9F9E62A9762E951A.roa
File: 9086676ADCA811EF9F9E62A9762E951A.roa (raw, json)
Hash identifier: Fz6LNwpSbGE9vLwzRLbxeQuDeNjAJIwufOxtH/8xLkg=
Subject key identifier: 6C:C0:69:BF:9A:5E:D8:DB:11:36:CA:D2:46:C0:B1:13:1B:3E:46:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9086676ADCA811EF9F9E62A9762E951A.roa
Signing time: Mon 27 Jan 2025 12:16:41 +0000
ROA not before: Mon 27 Jan 2025 12:16:37 +0000
ROA not after: Sat 08 Feb 2025 12:16:37 +0000
asID: 22773
IP address blocks: 154.212.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84989 (0x14bfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 12:16:37 2025 GMT
Not After : Feb 8 12:16:37 2025 GMT
Subject: CN=67977929-f6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:9d:b4:e0:ba:94:f0:1f:27:e7:91:3c:c7:
54:d8:62:30:64:fc:3e:f3:c2:db:18:3e:92:0d:2a:
4b:81:9b:a5:36:07:f5:f7:92:9a:15:03:73:d0:2c:
b6:ec:84:79:4f:69:08:9e:ee:e6:f1:da:b5:a3:a1:
b5:d1:0a:fb:5c:ef:90:84:83:b5:c6:91:c5:ec:b5:
de:62:4b:30:e8:be:d2:be:ac:58:5a:9a:c3:c7:dc:
7d:9b:21:42:7c:f3:97:2c:68:d0:0d:c8:2f:cb:d4:
0c:87:ff:62:15:b0:98:1b:0a:a5:e8:80:c1:40:21:
65:6b:76:c9:3d:c7:02:a1:91:69:38:ee:fc:0f:22:
8a:f0:bb:32:82:1b:e0:b5:aa:f2:86:56:b4:f7:7e:
38:09:4a:68:ec:29:89:31:21:07:43:18:c7:e4:b2:
06:a8:93:69:e2:b8:a8:84:10:e7:73:a7:65:aa:d7:
4d:4f:85:f3:79:80:f8:98:d6:0f:55:7e:44:f5:75:
de:15:15:0c:6a:1f:6d:34:ff:c5:df:88:e1:ea:da:
76:f0:a8:b2:1e:cb:85:53:d1:08:63:dd:7e:c7:4c:
fd:3d:c7:09:b3:ee:42:41:27:f1:2d:81:c1:72:37:
ca:57:b8:c2:d3:e8:de:95:1e:bc:ca:26:63:44:5b:
26:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C0:69:BF:9A:5E:D8:DB:11:36:CA:D2:46:C0:B1:13:1B:3E:46:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9086676ADCA811EF9F9E62A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.16.0/22
Signature Algorithm: sha256WithRSAEncryption
61:57:82:4e:54:0e:9a:5b:c6:3c:4f:5e:e3:c3:15:18:d7:27:
01:b6:03:55:2d:e8:11:5e:f3:0d:32:5d:1a:e8:89:f7:c0:b3:
1a:b1:cf:f4:4f:ce:8d:8d:79:14:db:7d:a4:0d:74:92:ec:46:
e1:25:5c:91:c8:64:01:d8:13:69:59:fb:d2:ba:52:d8:6e:43:
bc:3f:c4:68:7c:d3:d0:b4:e8:01:fb:0f:18:56:59:20:20:4b:
5b:5f:37:93:2e:ed:0c:c3:cc:e9:58:5b:21:d4:81:10:f3:17:
c3:eb:52:01:fc:eb:45:99:21:fe:d2:71:49:ae:46:8c:f7:fc:
95:f8:6f:50:ee:4e:41:a0:d3:38:36:93:8d:50:0f:1e:99:ce:
fc:45:9c:ab:19:fd:75:ad:9a:91:9a:d7:8b:b1:7d:22:f5:54:
72:9c:a9:6f:e1:c3:0e:99:d4:a7:86:e2:cd:be:04:cf:df:23:
12:7f:e7:4f:26:57:7a:b9:db:e0:53:66:a3:a1:7e:84:fb:df:
42:60:a9:45:d5:14:9b:bc:d8:c4:bc:62:40:42:a4:53:a4:1d:
27:8c:a3:63:2b:41:30:4b:93:a8:07:fe:44:dc:b8:41:03:62:
4c:05:7b:34:d8:5b:18:da:95:81:11:73:b1:04:81:3e:ae:c9:
db:57:da:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUv9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI3MTIxNjM3WhcNMjUwMjA4MTIxNjM3WjAYMRYw
FAYDVQQDEw02Nzk3NzkyOS1mNmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuD+dtOC6lPAfJ+eRPMdU2GIwZPw+88LbGD6SDSpLgZulNgf195KaFQNz
0Cy27IR5T2kInu7m8dq1o6G10Qr7XO+QhIO1xpHF7LXeYksw6L7SvqxYWprDx9x9
myFCfPOXLGjQDcgvy9QMh/9iFbCYGwql6IDBQCFla3bJPccCoZFpOO78DyKK8Lsy
ghvgtaryhla09344CUpo7CmJMSEHQxjH5LIGqJNp4riohBDnc6dlqtdNT4XzeYD4
mNYPVX5E9XXeFRUMah9tNP/F34jh6tp28KiyHsuFU9EIY91+x0z9PccJs+5CQSfx
LYHBcjfKV7jC0+jelR68yiZjRFsmnQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGzA
ab+aXtjbETbK0kbAsRMbPkZPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MDg2Njc2QURDQTgxMUVGOUY5RTYyQTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmtQQMA0GCSqGSIb3DQEB
CwUAA4IBAQBhV4JOVA6aW8Y8T17jwxUY1ycBtgNVLegRXvMNMl0a6In3wLMasc/0
T86NjXkU232kDXSS7EbhJVyRyGQB2BNpWfvSulLYbkO8P8RofNPQtOgB+w8YVlkg
IEtbXzeTLu0Mw8zpWFsh1IEQ8xfD61IB/OtFmSH+0nFJrkaM9/yV+G9Q7k5BoNM4
NpONUA8emc78RZyrGf11rZqRmteLsX0i9VRynKlv4cMOmdSnhuLNvgTP3yMSf+dP
Jld6udvgU2ajoX6E+99CYKlF1RSbvNjEvGJAQqRTpB0njKNjK0EwS5OoB/5E3LhB
A2JMBXs02FsY2pWBEXOxBIE+rsnbV9o9
-----END CERTIFICATE-----
Generated at Sun Apr 27 02:36:46 2025 by rpki-client