Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBD02316DB0311EFA6671097762E951A.roa
File: CBD02316DB0311EFA6671097762E951A.roa (raw, json)
Hash identifier: RbZzU7gfOcqbh5wu83FLq+p78zs2E1v9xXnvFwE7Cw4=
Subject key identifier: 4F:DE:68:A1:A8:AA:51:FB:25:C9:2E:BF:2B:0C:72:3D:30:98:02:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014923
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBD02316DB0311EFA6671097762E951A.roa
Signing time: Sat 25 Jan 2025 10:04:42 +0000
ROA not before: Sat 25 Jan 2025 10:04:38 +0000
ROA not after: Sun 23 Feb 2025 10:04:38 +0000
asID: 48031
IP address blocks: 154.92.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84259 (0x14923)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 10:04:38 2025 GMT
Not After : Feb 23 10:04:38 2025 GMT
Subject: CN=6794b73a-b46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:dc:36:53:13:a9:86:b8:e6:a5:5b:07:65:
91:8e:3f:f0:ba:4c:3c:bb:35:f3:bb:d6:7d:c7:7b:
f9:29:97:ca:c4:72:11:ad:45:24:bf:ed:f9:17:ac:
31:f9:82:eb:54:da:29:46:2f:3a:dd:60:a6:57:d7:
bc:16:d6:00:a1:e4:4a:16:cd:d1:80:57:ad:21:95:
f4:16:3c:07:96:be:d4:cd:c4:13:b5:de:24:88:13:
94:8b:4e:0b:5d:f1:0b:0f:95:ca:92:86:98:92:9f:
8a:17:f7:60:ee:bb:4d:a2:bd:f1:38:ca:06:e9:10:
c9:f9:f3:e6:73:39:fe:ff:c0:e9:b6:26:dc:3d:9b:
04:94:7c:aa:e9:11:5c:47:b8:eb:04:69:8e:f7:3a:
07:d6:ec:58:b4:dc:c0:a2:c4:90:ee:58:81:d0:a2:
e0:3b:c1:b9:5f:70:e9:f7:c3:48:2a:91:84:43:43:
f9:ef:24:bc:78:7e:14:ec:6f:6c:ab:88:ad:8f:4e:
5e:6e:e2:0a:41:a4:33:3f:22:da:30:84:05:fc:d1:
8e:35:f2:af:6e:f6:3d:de:05:72:55:83:ec:e5:89:
a1:69:43:be:00:eb:cf:d8:e8:86:8f:cc:e6:a7:71:
97:8f:39:98:ea:be:9b:4d:cd:be:84:f4:2a:c7:77:
b2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DE:68:A1:A8:AA:51:FB:25:C9:2E:BF:2B:0C:72:3D:30:98:02:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBD02316DB0311EFA6671097762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.12.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f9:2d:54:b8:09:d3:8f:2a:0c:68:14:c0:93:48:f9:62:e2:
36:7a:be:cd:2c:39:de:5b:49:7f:10:a2:6f:8c:72:95:48:ac:
0e:95:bf:27:b9:10:5e:90:b8:e6:13:c2:a9:f6:f7:e7:34:33:
dc:6f:5b:df:ef:31:41:da:00:af:8a:54:5a:02:41:3f:14:16:
de:8b:82:e6:08:0c:98:c1:cc:88:5b:fc:18:f0:73:1e:50:8e:
aa:fc:a9:16:2d:1a:17:63:ea:6b:94:69:89:fa:98:2e:27:bb:
ec:3d:a8:cd:dc:8a:99:8a:44:14:42:e1:3a:d3:a3:72:7c:1d:
87:b4:1f:73:ed:a9:4e:22:c9:aa:f2:b4:dd:46:26:e0:83:33:
81:aa:ae:c6:9f:84:0f:9d:58:ef:e4:63:46:18:5d:02:af:93:
dd:c4:7c:86:4c:6a:05:ae:6a:bc:80:fc:55:69:c3:57:e3:67:
57:29:9d:b4:6d:6b:b8:bc:8f:dc:4f:39:2a:b2:d2:76:a4:b1:
bd:4c:1e:bf:6c:72:09:69:02:8e:f0:5d:a7:57:f3:91:d0:f4:
d8:ed:47:87:e4:05:97:b8:18:5c:e2:76:be:f2:4e:ec:73:b1:
e9:7a:cd:19:be:da:e2:5f:3b:a5:02:ab:26:54:68:31:c2:ba:
0f:b5:ac:dc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUkjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI1MTAwNDM4WhcNMjUwMjIzMTAwNDM4WjAYMRYw
FAYDVQQDEw02Nzk0YjczYS1iNDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsxTcNlMTqYa45qVbB2WRjj/wukw8uzXzu9Z9x3v5KZfKxHIRrUUkv+35
F6wx+YLrVNopRi863WCmV9e8FtYAoeRKFs3RgFetIZX0FjwHlr7UzcQTtd4kiBOU
i04LXfELD5XKkoaYkp+KF/dg7rtNor3xOMoG6RDJ+fPmczn+/8DptibcPZsElHyq
6RFcR7jrBGmO9zoH1uxYtNzAosSQ7liB0KLgO8G5X3Dp98NIKpGEQ0P57yS8eH4U
7G9sq4itj05ebuIKQaQzPyLaMIQF/NGONfKvbvY93gVyVYPs5YmhaUO+AOvP2OiG
j8zmp3GXjzmY6r6bTc2+hPQqx3eynwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE/e
aKGoqlH7JckuvysMcj0wmAJ6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQkQwMjMxNkRCMDMxMUVGQTY2NzEwOTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlwMMA0GCSqGSIb3DQEB
CwUAA4IBAQBU+S1UuAnTjyoMaBTAk0j5YuI2er7NLDneW0l/EKJvjHKVSKwOlb8n
uRBekLjmE8Kp9vfnNDPcb1vf7zFB2gCvilRaAkE/FBbei4LmCAyYwcyIW/wY8HMe
UI6q/KkWLRoXY+prlGmJ+pguJ7vsPajN3IqZikQUQuE606NyfB2HtB9z7alOIsmq
8rTdRibggzOBqq7Gn4QPnVjv5GNGGF0Cr5PdxHyGTGoFrmq8gPxVacNX42dXKZ20
bWu4vI/cTzkqstJ2pLG9TB6/bHIJaQKO8F2nV/OR0PTY7UeH5AWXuBhc4na+8k7s
c7Hpes0ZvtriXzulAqsmVGgxwroPtazc
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:34:04 2025 by rpki-client