Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5CB8AF4DA4B11EF8DAB0EB7762E951A.roa
File: C5CB8AF4DA4B11EF8DAB0EB7762E951A.roa (raw, json)
Hash identifier: XicM193tT9ypOfzPHXILonnnuloijkjmffvfED5CQZc=
Subject key identifier: DB:C6:39:CB:5B:46:EE:EB:5D:51:04:75:E0:A5:BE:3C:EC:5A:D4:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01467E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5CB8AF4DA4B11EF8DAB0EB7762E951A.roa
Signing time: Fri 24 Jan 2025 12:07:25 +0000
ROA not before: Fri 24 Jan 2025 12:07:21 +0000
ROA not after: Fri 28 Feb 2025 12:07:21 +0000
asID: 62240
IP address blocks: 154.194.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83582 (0x1467e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:07:21 2025 GMT
Not After : Feb 28 12:07:21 2025 GMT
Subject: CN=6793827d-d33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:bf:d3:73:46:97:97:38:a5:93:1e:9b:c4:
25:61:95:be:35:e3:05:8f:16:c6:5e:00:dd:0b:e9:
60:00:76:5e:92:2b:06:5f:3f:96:31:ec:3a:5b:ab:
7b:ba:53:80:68:8b:0a:89:7b:fe:7b:1c:1f:2f:b2:
e9:f8:6e:e0:45:24:65:18:ea:71:8a:46:cd:51:f7:
1d:d4:f8:4e:f9:6d:59:77:5e:c8:79:07:1f:41:70:
cc:89:c2:1d:1b:3f:1c:2d:75:50:0c:ae:43:96:2a:
ad:15:fd:ca:1c:72:6c:c3:27:4c:4c:a9:55:20:24:
61:0d:9b:8e:53:5e:a2:fa:03:97:37:d4:44:6d:42:
36:41:c5:98:0f:d4:80:e6:cc:4a:06:99:be:5c:02:
d0:b6:85:29:ce:3c:e9:8f:ae:f9:0d:a9:34:73:8b:
61:75:96:7b:b7:a6:4d:1d:57:94:c1:1b:f4:54:e8:
c2:23:f7:73:ca:c8:69:75:b1:6e:a3:a4:80:c0:a9:
fb:b1:8c:53:b7:9e:52:2a:0e:7e:c2:c1:a0:7d:f0:
54:48:6e:74:69:6e:9c:75:63:e6:d9:06:aa:20:5b:
d1:95:0f:af:74:fe:d6:37:5a:bf:d8:78:a3:69:ec:
9d:09:c9:93:d1:2e:9e:dd:9a:c5:b6:14:9f:d7:61:
4d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C6:39:CB:5B:46:EE:EB:5D:51:04:75:E0:A5:BE:3C:EC:5A:D4:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5CB8AF4DA4B11EF8DAB0EB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.85.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:97:8f:9d:06:62:b2:c0:9e:07:d7:3a:87:7c:70:38:51:e3:
fb:fb:c0:27:41:a7:a9:75:6b:fa:86:91:ed:42:b1:ae:7d:e8:
70:f7:39:92:29:5c:a4:d4:d2:1f:2e:4b:01:3c:19:65:7f:c4:
19:0b:86:c2:2f:7a:71:3c:08:5e:4a:e0:2f:48:39:2d:cb:fe:
1d:10:1f:48:8f:b4:5c:19:7a:ac:12:c0:cc:bf:d2:26:ea:7c:
57:9a:dc:34:89:17:15:fb:73:61:da:a0:34:39:9a:f4:5c:fc:
30:ac:32:cf:fc:bc:f0:1d:57:07:db:e8:56:45:9f:60:37:ab:
3d:88:d9:bf:1d:26:ae:60:26:d7:2b:3b:75:4e:37:25:a9:35:
12:92:62:16:a4:e1:63:01:09:e6:09:93:c9:78:d1:d7:5f:16:
36:bb:bb:ca:c1:1f:1c:43:61:30:58:e0:26:3f:89:b7:2e:b5:
30:a4:bf:2a:ab:ef:15:64:c1:53:28:f2:66:9d:43:c9:8c:e4:
f8:61:37:58:5c:8f:c5:63:19:d4:90:ae:d6:53:14:ac:17:a3:
6e:2e:ab:99:cc:68:c9:05:4b:b2:36:68:67:9f:b1:eb:02:cb:
e4:4d:4d:62:fd:bd:49:98:3b:77:55:6b:a1:6b:20:71:ec:24:
ef:ff:89:04
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUZ+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTIwNzIxWhcNMjUwMjI4MTIwNzIxWjAYMRYw
FAYDVQQDEw02NzkzODI3ZC1kMzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwvK/03NGl5c4pZMem8QlYZW+NeMFjxbGXgDdC+lgAHZekisGXz+WMew6
W6t7ulOAaIsKiXv+exwfL7Lp+G7gRSRlGOpxikbNUfcd1PhO+W1Zd17IeQcfQXDM
icIdGz8cLXVQDK5DliqtFf3KHHJswydMTKlVICRhDZuOU16i+gOXN9REbUI2QcWY
D9SA5sxKBpm+XALQtoUpzjzpj675Dak0c4thdZZ7t6ZNHVeUwRv0VOjCI/dzyshp
dbFuo6SAwKn7sYxTt55SKg5+wsGgffBUSG50aW6cdWPm2QaqIFvRlQ+vdP7WN1q/
2HijaeydCcmT0S6e3ZrFthSf12FNSwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNvG
OctbRu7rXVEEdeClvjzsWtSsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNUNCOEFGNERBNEIxMUVGOERBQjBFQjc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJVMA0GCSqGSIb3DQEB
CwUAA4IBAQBul4+dBmKywJ4H1zqHfHA4UeP7+8AnQaepdWv6hpHtQrGufehw9zmS
KVyk1NIfLksBPBllf8QZC4bCL3pxPAheSuAvSDkty/4dEB9Ij7RcGXqsEsDMv9Im
6nxXmtw0iRcV+3Nh2qA0OZr0XPwwrDLP/LzwHVcH2+hWRZ9gN6s9iNm/HSauYCbX
Kzt1TjclqTUSkmIWpOFjAQnmCZPJeNHXXxY2u7vKwR8cQ2EwWOAmP4m3LrUwpL8q
q+8VZMFTKPJmnUPJjOT4YTdYXI/FYxnUkK7WUxSsF6NuLquZzGjJBUuyNmhnn7Hr
AsvkTU1i/b1JmDt3VWuhayBx7CTv/4kE
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:05:43 2025 by rpki-client