Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B177826CBEA611EF9F678896762E951A.roa
File: B177826CBEA611EF9F678896762E951A.roa (raw, json)
Hash identifier: 13LD6NEapTmhpeQXjxw8n7HF8v4W4/NdJn4Rb2ltHX8=
Subject key identifier: 6E:83:2D:4A:88:78:79:93:9E:AC:09:A9:30:79:19:0B:22:1D:45:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B177826CBEA611EF9F678896762E951A.roa
Signing time: Fri 20 Dec 2024 07:47:42 +0000
ROA not before: Fri 20 Dec 2024 07:47:39 +0000
ROA not after: Thu 20 Mar 2025 07:47:39 +0000
asID: 47890
IP address blocks: 154.214.244.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72792 (0x11c58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 07:47:39 2024 GMT
Not After : Mar 20 07:47:39 2025 GMT
Subject: CN=6765211e-7e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:ba:4e:a4:0d:e9:21:1e:12:6c:9d:85:bf:
ed:ec:c3:f6:c7:c0:48:bd:ad:d7:1f:50:c5:67:1b:
7a:45:90:eb:96:f4:48:17:fe:03:39:3a:04:2f:9c:
6b:ba:0f:6c:30:ed:b9:73:84:43:5c:55:5b:dd:d9:
bc:cf:63:f5:6d:f6:39:99:fa:67:96:17:b6:7d:8c:
c9:81:43:57:12:39:7b:73:b6:60:17:8a:de:d4:2a:
8e:36:44:aa:10:fd:64:43:25:d9:e5:c0:ef:f5:5b:
14:f4:6b:e0:0f:dd:ca:b4:5a:51:e3:c0:8c:2e:bf:
f3:17:81:20:99:1b:39:e7:44:11:86:34:73:cc:da:
32:ae:dd:a3:de:fa:8c:3b:35:eb:b1:69:f4:89:65:
40:9e:9e:c9:28:7f:0d:23:3d:bc:d7:36:bf:8b:5f:
58:51:ac:7f:f9:48:d9:1b:3a:ed:80:41:c7:19:4e:
58:0a:02:aa:b3:7b:fb:03:cc:5a:b3:c8:19:8b:10:
a5:d3:0b:58:54:53:90:73:2a:c8:8b:23:09:3d:99:
42:4a:a8:4b:51:86:51:13:09:dd:28:fd:39:2c:17:
4d:c5:1e:20:9e:7c:7e:88:1b:24:ad:b3:44:0b:a7:
70:98:2c:1a:b9:c4:87:b7:8c:da:b3:74:57:24:ba:
d0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:83:2D:4A:88:78:79:93:9E:AC:09:A9:30:79:19:0B:22:1D:45:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B177826CBEA611EF9F678896762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.244.0/23
Signature Algorithm: sha256WithRSAEncryption
32:22:f8:29:46:ac:f8:92:05:2d:e0:5c:69:d5:da:ee:2f:4f:
b0:2a:b9:05:b5:37:83:97:02:36:21:dd:d8:48:42:c8:e5:23:
88:19:74:3f:af:ce:13:fe:3d:0d:f2:1f:fe:73:d8:f2:66:4d:
72:9f:db:ed:94:ae:a2:22:53:b9:3c:4b:3d:4b:c6:70:b0:1c:
06:30:24:c3:69:27:df:08:b2:99:cb:67:2c:29:b1:b3:8b:f8:
91:69:46:46:2d:59:5d:92:80:13:8a:80:61:25:34:11:86:43:
34:38:a5:12:89:a0:ed:19:f5:ad:14:a7:3e:09:72:66:cf:a7:
4b:c8:93:e9:7b:24:a7:1a:3a:3e:20:a7:51:84:ee:75:42:61:
c0:b6:8b:a9:91:ef:1c:8b:a2:74:9d:7f:c4:fb:dd:c7:37:11:
97:b0:b1:68:40:e6:1e:2a:18:0c:3d:8a:2a:1a:54:77:1b:a8:
c3:2d:d1:f4:0f:cc:c7:fe:f0:7d:33:c8:45:e9:f1:04:55:bf:
9e:0b:71:3d:b1:8e:38:5d:cb:d9:41:08:dd:60:fd:f8:91:c7:
0b:cb:82:39:8a:4a:dc:8c:d0:ff:4f:74:d9:ff:fe:b4:d3:12:
b1:36:42:2a:be:94:b0:1c:f3:05:2e:b5:a7:75:d1:01:30:41:
f5:cb:4c:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARxYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIwMDc0NzM5WhcNMjUwMzIwMDc0NzM5WjAYMRYw
FAYDVQQDEw02NzY1MjExZS03ZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuL66TqQN6SEeEmydhb/t7MP2x8BIva3XH1DFZxt6RZDrlvRIF/4DOToE
L5xrug9sMO25c4RDXFVb3dm8z2P1bfY5mfpnlhe2fYzJgUNXEjl7c7ZgF4re1CqO
NkSqEP1kQyXZ5cDv9VsU9GvgD93KtFpR48CMLr/zF4EgmRs550QRhjRzzNoyrt2j
3vqMOzXrsWn0iWVAnp7JKH8NIz281za/i19YUax/+UjZGzrtgEHHGU5YCgKqs3v7
A8xas8gZixCl0wtYVFOQcyrIiyMJPZlCSqhLUYZREwndKP05LBdNxR4gnnx+iBsk
rbNEC6dwmCwaucSHt4zas3RXJLrQ9QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFG6D
LUqIeHmTnqwJqTB5GQsiHUUGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMTc3ODI2Q0JFQTYxMUVGOUY2Nzg4OTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmtb0MA0GCSqGSIb3DQEB
CwUAA4IBAQAyIvgpRqz4kgUt4Fxp1druL0+wKrkFtTeDlwI2Id3YSELI5SOIGXQ/
r84T/j0N8h/+c9jyZk1yn9vtlK6iIlO5PEs9S8ZwsBwGMCTDaSffCLKZy2csKbGz
i/iRaUZGLVldkoATioBhJTQRhkM0OKUSiaDtGfWtFKc+CXJmz6dLyJPpeySnGjo+
IKdRhO51QmHAtoupke8ci6J0nX/E+93HNxGXsLFoQOYeKhgMPYoqGlR3G6jDLdH0
D8zH/vB9M8hF6fEEVb+eC3E9sY44XcvZQQjdYP34kccLy4I5ikrcjND/T3TZ//60
0xKxNkIqvpSwHPMFLrWnddEBMEH1y0yv
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:59:04 2025 by rpki-client