Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C47EB5CEC29D11EF868095AE762E951A.roa
File: C47EB5CEC29D11EF868095AE762E951A.roa (raw, json)
Hash identifier: y+7/cGaTt6wORWGeXlyAo0U8aViXURxyzwaAyHJs4fc=
Subject key identifier: 87:3A:C1:3B:19:D8:AA:37:FC:3A:9C:22:93:74:83:9F:77:51:90:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012518
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C47EB5CEC29D11EF868095AE762E951A.roa
Signing time: Wed 25 Dec 2024 08:53:53 +0000
ROA not before: Wed 25 Dec 2024 08:53:50 +0000
ROA not after: Sun 09 Feb 2025 08:53:50 +0000
asID: 63139
IP address blocks: 154.223.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75032 (0x12518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 08:53:50 2024 GMT
Not After : Feb 9 08:53:50 2025 GMT
Subject: CN=676bc821-541d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:b1:70:57:8d:18:d5:47:38:57:7e:f4:86:
aa:a6:fa:53:ce:e2:7a:72:62:2a:dd:02:38:bc:61:
81:35:e5:59:18:98:85:82:06:be:5b:68:ca:86:02:
5a:4d:0d:1d:54:f8:89:db:9b:22:5e:7b:39:17:fa:
78:68:dc:b2:18:64:06:2a:8e:3c:6d:da:8c:b2:15:
98:fd:90:f0:b0:05:df:f8:ca:ff:d9:87:3b:59:e7:
44:d0:0d:83:1d:bc:71:e0:de:00:b7:73:cc:fa:60:
ef:bd:c5:2d:fc:b3:8e:5b:86:a5:bc:c4:84:93:ad:
a4:8d:4a:95:0d:65:33:f4:a9:64:70:68:9c:d8:ab:
be:b0:ed:4c:49:43:c3:54:69:e2:06:ce:41:7b:7c:
bc:01:a5:eb:be:45:d1:77:61:f4:48:24:c7:aa:1d:
8a:d0:52:75:20:0c:65:89:aa:4e:9c:57:8e:9c:c0:
6e:44:2e:90:4b:af:bd:49:c5:94:cf:88:5c:95:e1:
3e:f1:3b:c5:46:7e:c7:79:b4:e5:bd:b3:ae:10:e2:
63:16:17:eb:bc:93:b5:26:f6:24:8d:dd:a0:d6:b0:
1d:ef:48:0e:75:5d:3c:1c:5a:ff:1c:28:35:6b:c3:
1d:51:bb:e0:29:2c:d6:58:94:7a:86:8e:36:fc:5b:
dd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3A:C1:3B:19:D8:AA:37:FC:3A:9C:22:93:74:83:9F:77:51:90:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C47EB5CEC29D11EF868095AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.39.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d6:40:1b:67:db:c2:6b:a9:a4:81:30:aa:f7:64:9b:4a:25:
7e:97:80:40:d6:67:5d:f8:e7:18:81:79:68:c1:33:79:d2:b0:
09:d3:3d:c5:1e:73:79:a6:63:5b:e7:0f:93:7c:46:05:e4:7b:
21:67:47:05:24:11:9a:8b:65:5b:03:38:5e:1a:59:49:35:e3:
71:1b:28:5e:63:db:23:c8:9a:58:1a:73:34:25:fd:c9:ec:a3:
02:63:90:d6:7e:22:4f:fe:93:e4:1a:bf:ee:42:dc:b3:22:b5:
87:f0:e7:fa:0d:ff:64:27:c6:2c:ef:97:a2:f3:a9:ff:9d:ee:
f8:06:1b:cf:08:f9:6f:c9:ce:24:62:81:20:e6:9d:07:a8:cf:
7b:59:48:a0:88:4e:ba:e7:ac:c5:f8:89:bb:27:67:6c:b4:0b:
df:5e:94:69:3f:59:51:69:d8:5c:db:8d:8c:fc:ff:11:00:c0:
5d:af:4c:15:de:d6:f7:97:2f:63:22:db:d6:e3:4e:56:8a:17:
fe:2d:4e:13:a5:35:d6:72:e1:4a:fb:b4:56:d8:34:8f:e3:a7:
13:78:72:ee:05:f9:45:7c:36:c5:b1:d3:0f:69:d0:89:e1:24:
bf:54:02:ed:37:46:d3:80:4c:d6:e6:1a:58:0d:94:c6:a4:f5:
1d:78:e1:50
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASUYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDg1MzUwWhcNMjUwMjA5MDg1MzUwWjAYMRYw
FAYDVQQDEw02NzZiYzgyMS01NDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxCmxcFeNGNVHOFd+9IaqpvpTzuJ6cmIq3QI4vGGBNeVZGJiFgga+W2jK
hgJaTQ0dVPiJ25siXns5F/p4aNyyGGQGKo48bdqMshWY/ZDwsAXf+Mr/2Yc7WedE
0A2DHbxx4N4At3PM+mDvvcUt/LOOW4alvMSEk62kjUqVDWUz9KlkcGic2Ku+sO1M
SUPDVGniBs5Be3y8AaXrvkXRd2H0SCTHqh2K0FJ1IAxliapOnFeOnMBuRC6QS6+9
ScWUz4hcleE+8TvFRn7HebTlvbOuEOJjFhfrvJO1JvYkjd2g1rAd70gOdV08HFr/
HCg1a8MdUbvgKSzWWJR6ho42/Fvd8QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIc6
wTsZ2Ko3/DqcIpN0g593UZBRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNDdFQjVDRUMyOUQxMUVGODY4MDk1QUU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8nMA0GCSqGSIb3DQEB
CwUAA4IBAQB11kAbZ9vCa6mkgTCq92SbSiV+l4BA1mdd+OcYgXlowTN50rAJ0z3F
HnN5pmNb5w+TfEYF5HshZ0cFJBGai2VbAzheGllJNeNxGyheY9sjyJpYGnM0Jf3J
7KMCY5DWfiJP/pPkGr/uQtyzIrWH8Of6Df9kJ8Ys75ei86n/ne74BhvPCPlvyc4k
YoEg5p0HqM97WUigiE6656zF+Im7J2dstAvfXpRpP1lRadhc242M/P8RAMBdr0wV
3tb3ly9jItvW405Wihf+LU4TpTXWcuFK+7RW2DSP46cTeHLuBflFfDbFsdMPadCJ
4SS/VALtN0bTgEzW5hpYDZTGpPUdeOFQ
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:23:29 2025 by rpki-client