Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D263D9C0DBE911EF8C1B10A2762E951A.roa
File: D263D9C0DBE911EF8C1B10A2762E951A.roa (raw, json)
Hash identifier: qXV/l9kvaXwprnegqf2OMTnKSrTtUiFtE8/KfNrvE0k=
Subject key identifier: B8:17:F0:2F:0E:F5:58:BD:B6:91:24:62:00:5F:F9:A8:9B:51:F4:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D263D9C0DBE911EF8C1B10A2762E951A.roa
Signing time: Sun 26 Jan 2025 13:31:18 +0000
ROA not before: Sun 26 Jan 2025 13:31:14 +0000
ROA not after: Fri 28 Feb 2025 13:31:14 +0000
asID: 395886
IP address blocks: 154.201.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84642 (0x14aa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 13:31:14 2025 GMT
Not After : Feb 28 13:31:14 2025 GMT
Subject: CN=67963925-b00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:fc:27:03:95:47:2c:34:13:15:4d:73:46:
be:01:7b:5e:f6:8b:e7:3c:51:6a:46:ef:11:c4:53:
94:9a:53:54:89:30:54:9c:2a:33:b8:1b:42:e3:de:
b0:80:5a:f5:00:65:7c:f4:9d:f8:1f:ee:12:ef:17:
84:b2:8e:ef:5d:40:7f:7f:c7:0a:79:10:81:d1:c0:
0a:9b:24:17:1f:ba:93:97:54:62:24:fe:4f:58:f1:
3f:c7:bb:b1:ff:e0:6f:91:01:f1:03:ae:2c:d1:e6:
1e:c0:81:fd:81:48:a0:6d:a7:d7:0a:61:16:1e:de:
6a:44:16:ee:00:5f:fa:06:3f:f5:82:5c:94:8e:9e:
be:91:52:70:fe:fb:ea:d5:72:4e:ec:1d:0f:5a:87:
c2:1e:20:dd:52:a9:24:ad:bf:ae:5a:a9:cb:0e:99:
cc:09:1e:91:68:fb:1d:51:d1:71:69:7c:36:fe:02:
50:b6:16:9a:14:c6:d0:74:21:9b:98:76:a3:de:03:
af:11:b6:85:67:21:37:fc:5a:da:33:7d:fc:98:6c:
97:ee:10:77:6f:ec:af:ae:eb:78:71:2f:56:d4:98:
2d:6e:35:c2:9b:51:43:8d:76:0d:84:1a:80:42:d3:
86:da:f6:01:2f:33:8e:99:30:bd:31:1d:29:6c:90:
cf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:17:F0:2F:0E:F5:58:BD:B6:91:24:62:00:5F:F9:A8:9B:51:F4:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D263D9C0DBE911EF8C1B10A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.92.0/23
Signature Algorithm: sha256WithRSAEncryption
48:03:e2:e1:87:23:ba:dc:8a:1d:35:24:49:d3:a0:75:30:1f:
13:9a:a0:f7:b1:20:ce:6f:c6:e2:d7:eb:0b:f2:f3:c2:38:ef:
3f:c2:8f:2d:e1:84:bf:83:47:38:9b:72:82:0b:5d:42:aa:89:
f4:a0:58:6a:d0:95:0f:6c:cd:d5:2f:2d:91:43:16:ab:5d:e8:
f9:96:a1:80:fe:b3:5e:df:43:65:c3:10:e8:f1:9b:db:61:ea:
55:ba:5d:ac:48:43:93:3b:31:10:4b:4a:37:a4:a8:b0:07:f9:
bf:a8:a1:53:6a:15:97:70:dc:76:a7:7e:76:af:5d:90:08:85:
4d:4f:3c:3d:16:2a:55:ac:14:69:79:97:c8:db:36:47:78:94:
6f:bd:f4:c8:e3:f8:b3:00:d7:69:16:29:57:f8:3d:8d:95:61:
b7:67:a4:fb:4d:38:97:26:43:7f:0d:df:5d:31:0a:41:ad:b2:
9b:b4:b5:39:b0:0c:4b:bc:2c:06:19:65:cb:6e:a5:e1:86:f3:
6a:9f:fd:f8:8e:43:b2:f7:d6:5e:2c:f7:c1:b6:b9:38:1f:1f:
35:d5:ae:ab:ff:0e:b3:bb:4c:e9:1f:19:73:e2:5e:fc:44:cf:
dd:03:8d:c2:83:e9:18:24:a3:a2:81:1d:3c:ba:1c:72:c4:9c:
d8:a5:64:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUqiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI2MTMzMTE0WhcNMjUwMjI4MTMzMTE0WjAYMRYw
FAYDVQQDEw02Nzk2MzkyNS1iMDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuQL8JwOVRyw0ExVNc0a+AXte9ovnPFFqRu8RxFOUmlNUiTBUnCozuBtC
496wgFr1AGV89J34H+4S7xeEso7vXUB/f8cKeRCB0cAKmyQXH7qTl1RiJP5PWPE/
x7ux/+BvkQHxA64s0eYewIH9gUigbafXCmEWHt5qRBbuAF/6Bj/1glyUjp6+kVJw
/vvq1XJO7B0PWofCHiDdUqkkrb+uWqnLDpnMCR6RaPsdUdFxaXw2/gJQthaaFMbQ
dCGbmHaj3gOvEbaFZyE3/FraM338mGyX7hB3b+yvrut4cS9W1JgtbjXCm1FDjXYN
hBqAQtOG2vYBLzOOmTC9MR0pbJDPswIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLgX
8C8O9Vi9tpEkYgBf+aibUfTrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMjYzRDlDMERCRTkxMUVGOEMxQjEwQTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmslcMA0GCSqGSIb3DQEB
CwUAA4IBAQBIA+LhhyO63IodNSRJ06B1MB8TmqD3sSDOb8bi1+sL8vPCOO8/wo8t
4YS/g0c4m3KCC11Cqon0oFhq0JUPbM3VLy2RQxarXej5lqGA/rNe30NlwxDo8Zvb
YepVul2sSEOTOzEQS0o3pKiwB/m/qKFTahWXcNx2p352r12QCIVNTzw9FipVrBRp
eZfI2zZHeJRvvfTI4/izANdpFilX+D2NlWG3Z6T7TTiXJkN/Dd9dMQpBrbKbtLU5
sAxLvCwGGWXLbqXhhvNqn/34jkOy99ZeLPfBtrk4Hx811a6r/w6zu0zpHxlz4l78
RM/dA43Cg+kYJKOigR08uhxyxJzYpWTU
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:56:03 2025 by rpki-client