Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2C4931CC2A211EFB13B864E762E951A.roa
File: B2C4931CC2A211EFB13B864E762E951A.roa (raw, json)
Hash identifier: msRgWipUUBna5X8Q3NDZI714NesmZt1AZu12bR0iK9c=
Subject key identifier: A7:8A:7F:FA:B5:0B:1E:7C:D3:A2:6A:AF:06:62:FA:B7:4E:2A:EA:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012544
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2C4931CC2A211EFB13B864E762E951A.roa
Signing time: Wed 25 Dec 2024 09:29:11 +0000
ROA not before: Wed 25 Dec 2024 09:29:08 +0000
ROA not after: Thu 13 Feb 2025 09:29:08 +0000
asID: 138915
IP address blocks: 154.203.152.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75076 (0x12544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:29:08 2024 GMT
Not After : Feb 13 09:29:08 2025 GMT
Subject: CN=676bd067-0190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6c:a3:1d:f5:f7:9f:9f:d6:1a:c6:12:cc:41:
57:00:01:09:8e:f7:65:83:6d:55:97:1f:6d:d7:1e:
49:f2:bf:86:44:3f:9b:c0:34:f9:d5:bc:38:c3:ce:
c5:e4:7a:b5:07:32:93:3e:be:24:86:84:16:fa:b0:
a4:15:77:f9:b6:1a:35:62:a7:e2:ef:da:8c:4d:6a:
54:01:fc:3c:3a:e8:41:de:7f:cc:7e:11:b7:0a:66:
8b:ed:8d:0a:e0:2d:16:0a:f4:9a:1b:7a:ba:86:35:
40:17:6c:2a:36:27:43:f8:dd:45:da:0b:6c:fc:e0:
e0:86:a7:90:5b:99:41:e9:3b:5e:8f:30:40:ab:1a:
88:6b:8a:4f:72:71:9a:24:c6:5f:18:a5:aa:82:c9:
ba:51:eb:ce:d4:ea:ee:36:4f:39:76:9c:67:1a:0c:
f8:c6:f9:81:7a:0d:ce:7c:6a:12:92:5c:01:c2:b5:
65:1a:f7:c3:40:4f:4c:fd:42:b9:b7:93:6c:c2:e0:
a2:78:f8:f1:4b:07:79:59:07:3e:15:eb:18:83:8a:
00:9c:7f:e1:5e:a0:5b:4c:fb:66:60:34:07:82:8d:
6c:50:50:d6:8e:d4:3d:3e:4d:32:eb:88:32:5f:0a:
9d:1b:2b:5b:91:7f:d7:86:d8:cd:03:75:d0:13:c3:
61:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8A:7F:FA:B5:0B:1E:7C:D3:A2:6A:AF:06:62:FA:B7:4E:2A:EA:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2C4931CC2A211EFB13B864E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.152.0/23
Signature Algorithm: sha256WithRSAEncryption
57:06:53:96:03:c8:7b:d2:b2:c2:a3:9d:ca:53:e2:4a:b3:da:
a5:67:d4:3c:52:be:8a:df:37:e7:d2:3d:57:b4:30:68:3b:19:
c5:46:bf:76:7a:c3:f8:37:65:8d:eb:6f:ad:cc:b3:96:6c:08:
f0:d8:98:b5:10:a5:d7:5c:ef:de:26:2d:e2:fb:f0:cc:92:c6:
cf:ae:14:0d:fd:d8:50:a2:d8:c8:cd:84:a5:dc:58:55:f5:08:
14:46:9d:b7:01:89:4f:5d:e8:9c:9e:fb:f5:2c:46:5b:f8:6b:
ce:b2:b1:43:c6:88:7a:00:d2:3a:2b:05:8f:bb:9a:a0:9c:6d:
54:a7:c5:26:a0:b4:0f:30:53:fb:78:60:35:89:18:c4:50:d7:
7b:c4:43:dc:6c:b1:6a:e3:b8:cc:ad:31:38:b0:4f:a1:f5:f2:
8e:fc:09:13:d8:92:29:cb:82:ab:88:d3:1b:40:52:0a:dd:f3:
bd:95:45:5b:15:65:13:bc:00:80:e8:69:45:31:2f:1f:6e:90:
0d:c4:39:e0:a0:1a:cc:69:fe:e3:82:32:cb:65:de:37:e2:8a:
01:83:da:b0:ca:fd:40:51:dc:51:2e:40:8f:83:cc:cb:9d:64:
a4:74:0a:a3:e7:9f:c0:55:41:0c:2c:64:62:e8:bb:54:95:9e:
a5:af:cd:a6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASVEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDkyOTA4WhcNMjUwMjEzMDkyOTA4WjAYMRYw
FAYDVQQDEw02NzZiZDA2Ny0wMTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0WyjHfX3n5/WGsYSzEFXAAEJjvdlg21Vlx9t1x5J8r+GRD+bwDT51bw4
w87F5Hq1BzKTPr4khoQW+rCkFXf5tho1Yqfi79qMTWpUAfw8OuhB3n/MfhG3CmaL
7Y0K4C0WCvSaG3q6hjVAF2wqNidD+N1F2gts/ODghqeQW5lB6TtejzBAqxqIa4pP
cnGaJMZfGKWqgsm6UevO1OruNk85dpxnGgz4xvmBeg3OfGoSklwBwrVlGvfDQE9M
/UK5t5NswuCiePjxSwd5WQc+FesYg4oAnH/hXqBbTPtmYDQHgo1sUFDWjtQ9Pk0y
64gyXwqdGytbkX/XhtjNA3XQE8Nh9wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKeK
f/q1Cx5806JqrwZi+rdOKuqlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMkM0OTMxQ0MyQTIxMUVGQjEzQjg2NEU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsuYMA0GCSqGSIb3DQEB
CwUAA4IBAQBXBlOWA8h70rLCo53KU+JKs9qlZ9Q8Ur6K3zfn0j1XtDBoOxnFRr92
esP4N2WN62+tzLOWbAjw2Ji1EKXXXO/eJi3i+/DMksbPrhQN/dhQotjIzYSl3FhV
9QgURp23AYlPXeicnvv1LEZb+GvOsrFDxoh6ANI6KwWPu5qgnG1Up8UmoLQPMFP7
eGA1iRjEUNd7xEPcbLFq47jMrTE4sE+h9fKO/AkT2JIpy4KriNMbQFIK3fO9lUVb
FWUTvACA6GlFMS8fbpANxDngoBrMaf7jgjLLZd434ooBg9qwyv1AUdxRLkCPg8zL
nWSkdAqj55/AVUEMLGRi6LtUlZ6lr82m
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:34:03 2025 by rpki-client