Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3E44F0EB20C11EFB7CE084D762E951A.roa
File: B3E44F0EB20C11EFB7CE084D762E951A.roa (raw, json)
Hash identifier: OQmXmP+duyjxU0KocYy3G6/7Rtgk4iovYvQLgMGjIhc=
Subject key identifier: 53:98:D6:9C:0E:3C:B9:35:86:09:5E:6B:84:EF:A8:5B:88:1B:9D:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011794
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3E44F0EB20C11EFB7CE084D762E951A.roa
Signing time: Wed 04 Dec 2024 06:55:10 +0000
ROA not before: Wed 04 Dec 2024 06:55:06 +0000
ROA not after: Fri 14 Feb 2025 06:55:06 +0000
asID: 135097
IP address blocks: 154.197.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71572 (0x11794)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 06:55:06 2024 GMT
Not After : Feb 14 06:55:06 2025 GMT
Subject: CN=674ffcce-86f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:92:7f:fb:a9:a2:24:d4:40:ca:0e:ca:7f:b3:
48:1b:58:be:2b:67:8d:84:e7:e8:07:af:5e:f0:bc:
89:37:a2:56:d5:ed:e2:33:5c:b0:88:76:2e:41:25:
f2:8f:3b:68:5a:66:e9:02:4c:ab:06:7d:b6:fa:a1:
08:fd:f3:eb:4d:18:b8:47:42:9d:47:0f:81:28:60:
d9:38:14:e0:77:ce:f4:9b:8a:85:2d:6e:04:aa:dd:
05:44:fd:56:4d:86:ff:b1:dd:5c:eb:77:d2:62:b4:
b8:80:e5:14:15:1f:4b:85:5d:bc:93:31:e1:ac:f0:
dc:df:33:d0:d9:e1:d9:40:50:95:75:83:29:c5:cd:
c7:c2:b4:2a:ea:52:6a:77:81:b1:19:84:42:7f:24:
8d:28:c8:55:07:71:8d:20:19:4d:19:79:82:90:88:
4f:a0:a2:5d:8b:dc:28:cd:f1:92:c6:f6:82:de:09:
c6:37:50:b9:62:10:21:67:75:44:a5:0e:24:d4:9b:
0c:df:c0:5d:cf:c2:c5:ce:76:11:0c:c7:7a:61:01:
37:8a:12:42:14:e0:0f:5a:0f:28:59:c3:3d:0c:64:
97:37:99:81:3c:7b:f8:44:13:f7:63:c1:8a:4a:1d:
2e:b6:93:d0:09:c3:bd:38:25:d9:4a:4f:f5:5a:5c:
36:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:98:D6:9C:0E:3C:B9:35:86:09:5E:6B:84:EF:A8:5B:88:1B:9D:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3E44F0EB20C11EFB7CE084D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.192.0/20
Signature Algorithm: sha256WithRSAEncryption
ab:0b:71:56:80:2f:d3:f2:f5:bf:90:7f:f2:7a:03:c2:d3:21:
a1:91:b9:a1:71:31:90:44:7a:46:e1:8b:c6:05:d8:15:2c:1e:
df:72:95:66:37:d1:e0:1c:03:9f:f3:f0:8c:4d:f6:98:5e:8a:
34:4a:2e:b5:30:d3:f2:be:66:e2:33:85:ee:d2:42:42:fc:f9:
2f:b7:6c:40:b8:7a:2c:c3:1b:17:d8:0e:bb:da:c0:1e:ce:49:
16:e6:b2:df:78:db:77:38:5c:eb:6b:4c:03:11:17:1c:e1:f1:
b1:c1:38:3f:e5:b5:0e:59:b9:09:0a:8e:fe:da:b3:1e:7c:43:
20:14:dc:e6:40:1e:8f:be:ef:d2:10:73:48:36:e0:3c:ee:f4:
83:df:0f:bf:32:ff:0b:d1:2a:78:e3:a6:11:ee:8c:32:8d:c1:
c3:10:96:d1:23:86:49:38:ff:4b:92:ba:39:85:05:8d:cd:3b:
c4:a5:ae:70:74:33:27:3f:e5:aa:d1:22:dc:f9:71:12:7b:61:
7f:84:83:cb:05:ad:d9:c4:e9:a6:3d:2d:55:86:2c:53:ad:90:
e3:79:b7:8f:96:2f:9c:3f:3b:84:7e:96:0c:c8:ee:03:7b:80:
f9:b2:4e:c4:83:58:32:fa:cb:02:16:7c:ac:5d:5f:25:c4:c6:
ca:8e:b0:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAReUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjA0MDY1NTA2WhcNMjUwMjE0MDY1NTA2WjAYMRYw
FAYDVQQDEw02NzRmZmNjZS04NmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4pJ/+6miJNRAyg7Kf7NIG1i+K2eNhOfoB69e8LyJN6JW1e3iM1ywiHYu
QSXyjztoWmbpAkyrBn22+qEI/fPrTRi4R0KdRw+BKGDZOBTgd870m4qFLW4Eqt0F
RP1WTYb/sd1c63fSYrS4gOUUFR9LhV28kzHhrPDc3zPQ2eHZQFCVdYMpxc3HwrQq
6lJqd4GxGYRCfySNKMhVB3GNIBlNGXmCkIhPoKJdi9wozfGSxvaC3gnGN1C5YhAh
Z3VEpQ4k1JsM38Bdz8LFznYRDMd6YQE3ihJCFOAPWg8oWcM9DGSXN5mBPHv4RBP3
Y8GKSh0utpPQCcO9OCXZSk/1Wlw2SQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFOY
1pwOPLk1hglea4TvqFuIG50oMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CM0U0NEYwRUIyMEMxMUVGQjdDRTA4NEQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmsXAMA0GCSqGSIb3DQEB
CwUAA4IBAQCrC3FWgC/T8vW/kH/yegPC0yGhkbmhcTGQRHpG4YvGBdgVLB7fcpVm
N9HgHAOf8/CMTfaYXoo0Si61MNPyvmbiM4Xu0kJC/Pkvt2xAuHoswxsX2A672sAe
zkkW5rLfeNt3OFzra0wDERcc4fGxwTg/5bUOWbkJCo7+2rMefEMgFNzmQB6Pvu/S
EHNINuA87vSD3w+/Mv8L0Sp446YR7owyjcHDEJbRI4ZJOP9Lkro5hQWNzTvEpa5w
dDMnP+Wq0SLc+XESe2F/hIPLBa3ZxOmmPS1VhixTrZDjebePli+cPzuEfpYMyO4D
e4D5sk7Eg1gy+ssCFnysXV8lxMbKjrAm
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:35:18 2025 by rpki-client