Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9C49160D57711EF9B3B044A762E951A.roa
File: C9C49160D57711EF9B3B044A762E951A.roa (raw, json)
Hash identifier: klEauhFdOh6rQfVFxOKDu1F8dzALw7OtyckuVQ8IeF0=
Subject key identifier: 11:67:45:97:85:F6:CC:BB:34:71:FE:C3:C3:EC:D4:16:50:8B:9F:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9C49160D57711EF9B3B044A762E951A.roa
Signing time: Sat 18 Jan 2025 08:39:53 +0000
ROA not before: Sat 18 Jan 2025 08:39:50 +0000
ROA not after: Sat 22 Feb 2025 08:39:50 +0000
asID: 55020
IP address blocks: 154.89.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81366 (0x13dd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 08:39:50 2025 GMT
Not After : Feb 22 08:39:50 2025 GMT
Subject: CN=678b68d9-18df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ec:24:ce:0d:c7:5f:92:dd:d5:c4:e0:da:bd:
29:71:90:00:e7:53:6a:c6:ac:4c:a1:61:20:93:b0:
6b:db:c8:cf:48:3a:33:e3:ae:dd:ec:d3:95:2e:56:
e5:bf:0d:0f:f2:e7:68:84:32:a4:76:0e:3c:e3:66:
5c:74:56:e6:46:e1:80:b1:f1:73:b4:32:77:36:fc:
7b:08:42:a9:a1:55:06:d9:83:d5:1b:13:db:7e:0c:
c3:e1:00:7b:7d:cc:a1:61:21:08:ad:aa:66:62:2d:
fb:58:3b:8e:ff:ec:b4:85:b4:1f:e3:af:18:ff:87:
66:95:4f:8c:1d:fa:0f:5c:01:cb:e7:03:13:27:ec:
d2:fc:b4:12:65:5b:ec:33:7a:5d:52:75:ea:9b:40:
99:cc:6a:f5:a9:dd:ab:8c:e7:c7:cb:22:73:de:fe:
35:c7:db:aa:70:61:e8:60:11:50:fe:28:f6:e2:15:
41:3a:49:eb:5c:9b:a3:7e:d2:86:2a:96:a5:db:24:
34:93:65:18:9c:61:25:83:d2:13:0f:0a:8c:80:34:
76:37:26:95:c6:ec:5b:1c:93:d9:3d:72:04:9d:6a:
9f:82:f0:66:03:bf:fb:b5:2b:7e:af:39:c8:2e:a3:
92:b7:63:46:b5:f1:78:47:0b:7b:04:bd:be:70:94:
a1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:67:45:97:85:F6:CC:BB:34:71:FE:C3:C3:EC:D4:16:50:8B:9F:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9C49160D57711EF9B3B044A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.160.0/19
Signature Algorithm: sha256WithRSAEncryption
73:b4:ec:5f:fa:c9:42:d9:a2:73:cd:71:86:ca:5f:88:18:06:
5b:29:8c:94:e0:49:82:f7:e2:2d:b1:11:e7:d9:5b:52:49:ae:
0e:1d:d9:2b:f9:e1:fe:48:e2:af:a2:e9:1a:6a:65:02:19:80:
7e:42:2a:eb:de:f0:06:ed:6a:fe:05:42:4d:c9:88:d9:db:35:
21:cc:c3:5d:8d:f2:4f:84:f2:93:79:ca:c6:3c:f6:09:b6:2d:
35:06:c2:ce:d6:b0:59:a2:5a:41:16:8c:cf:3f:c6:71:cf:9a:
6c:f4:d4:42:16:a7:a7:94:d7:fe:9b:1f:bf:f8:0b:0f:4e:eb:
b3:32:ca:72:36:ba:b2:f7:83:f7:99:04:5d:cb:de:e4:77:6d:
95:06:25:3d:9f:d8:4a:38:34:57:31:cd:a6:cb:e8:1b:94:16:
b9:0a:ab:af:aa:a0:32:82:ff:47:7a:c8:6f:1a:4d:8f:79:a4:
6a:4c:da:46:54:fd:00:58:68:83:41:c6:57:62:16:28:17:f3:
03:94:9a:17:5c:71:d0:89:a2:25:08:77:dd:aa:8b:bb:d3:6b:
cd:a3:69:83:c9:92:26:ee:2d:24:d9:87:47:d8:3f:5a:0d:c0:
53:1a:08:3c:9b:20:c2:44:b1:a5:2f:d1:c8:b1:60:48:24:96:
85:36:2b:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT3WMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE4MDgzOTUwWhcNMjUwMjIyMDgzOTUwWjAYMRYw
FAYDVQQDEw02NzhiNjhkOS0xOGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0ewkzg3HX5Ld1cTg2r0pcZAA51NqxqxMoWEgk7Br28jPSDoz467d7NOV
Llblvw0P8udohDKkdg4842ZcdFbmRuGAsfFztDJ3Nvx7CEKpoVUG2YPVGxPbfgzD
4QB7fcyhYSEIrapmYi37WDuO/+y0hbQf468Y/4dmlU+MHfoPXAHL5wMTJ+zS/LQS
ZVvsM3pdUnXqm0CZzGr1qd2rjOfHyyJz3v41x9uqcGHoYBFQ/ij24hVBOknrXJuj
ftKGKpal2yQ0k2UYnGElg9ITDwqMgDR2NyaVxuxbHJPZPXIEnWqfgvBmA7/7tSt+
rznILqOSt2NGtfF4Rwt7BL2+cJShFwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBFn
RZeF9sy7NHH+w8Ps1BZQi5+AMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DOUM0OTE2MEQ1NzcxMUVGOUIzQjA0NEE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlmgMA0GCSqGSIb3DQEB
CwUAA4IBAQBztOxf+slC2aJzzXGGyl+IGAZbKYyU4EmC9+ItsRHn2VtSSa4OHdkr
+eH+SOKvoukaamUCGYB+Qirr3vAG7Wr+BUJNyYjZ2zUhzMNdjfJPhPKTecrGPPYJ
ti01BsLO1rBZolpBFozPP8Zxz5ps9NRCFqenlNf+mx+/+AsPTuuzMspyNrqy94P3
mQRdy97kd22VBiU9n9hKODRXMc2my+gblBa5CquvqqAygv9HeshvGk2PeaRqTNpG
VP0AWGiDQcZXYhYoF/MDlJoXXHHQiaIlCHfdqou702vNo2mDyZIm7i0k2YdH2D9a
DcBTGgg8myDCRLGlL9HIsWBIJJaFNiuq
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:39 2025 by rpki-client