Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5ADE628D95C11EF8899CB6B762E951A.roa
File: D5ADE628D95C11EF8899CB6B762E951A.roa (raw, json)
Hash identifier: u4ncpF4adC9q8iogEmdL7QdCUYN7o4HFIYMoXuWnuXM=
Subject key identifier: D1:31:EA:9F:C4:65:09:81:CE:30:3B:F1:EC:EF:58:01:0F:B7:A4:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014049
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5ADE628D95C11EF8899CB6B762E951A.roa
Signing time: Thu 23 Jan 2025 07:37:02 +0000
ROA not before: Thu 23 Jan 2025 07:36:58 +0000
ROA not after: Sat 08 Feb 2025 07:36:58 +0000
asID: 18229
IP address blocks: 154.210.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81993 (0x14049)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 07:36:58 2025 GMT
Not After : Feb 8 07:36:58 2025 GMT
Subject: CN=6791f19e-79e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:ce:cb:df:2a:64:2f:10:22:60:03:6f:8b:
ea:68:d5:ea:60:49:5c:1f:30:f4:4c:f2:29:53:38:
ad:dc:94:d7:07:bf:4b:52:c7:61:a8:43:e0:d2:f4:
8d:4d:f3:15:ec:22:8e:41:c3:98:6d:22:03:5c:07:
8a:27:b8:8f:4a:2f:ae:ea:31:89:58:a5:6a:5b:48:
c1:d6:5f:a1:07:f2:f1:e2:cc:47:71:6d:2b:ba:ec:
d6:36:1e:2d:d2:d8:cf:b9:53:51:12:8f:c6:23:98:
b3:bb:dc:52:0d:92:d1:d4:af:40:b2:b0:c3:8e:6c:
b1:5b:ad:f7:84:3c:83:c2:62:dd:60:d0:58:7b:6c:
b7:40:4c:14:96:c8:98:bd:14:70:fb:be:ec:66:d0:
04:68:82:50:9f:64:11:14:ec:77:20:17:64:d8:82:
9b:89:7f:bb:8b:ba:ec:6c:aa:e1:94:08:57:a7:24:
54:b3:6e:6f:e3:fd:a4:2c:0a:c0:40:5e:2c:ca:c5:
bc:66:3f:56:0b:28:b4:67:67:97:91:8a:83:9a:f5:
17:34:41:cb:b1:41:e1:9e:84:27:18:9e:d4:fb:01:
d6:f4:2b:f0:00:d2:e7:bb:50:ad:78:0a:d3:cc:7e:
56:7c:db:79:d5:18:e2:19:d2:f2:15:2b:cb:a9:90:
56:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:EA:9F:C4:65:09:81:CE:30:3B:F1:EC:EF:58:01:0F:B7:A4:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5ADE628D95C11EF8899CB6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.165.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:d0:46:74:73:4b:16:2c:5f:91:5f:6e:5e:46:80:56:fd:6c:
85:c0:c1:fc:c0:d2:68:93:76:d9:78:a6:28:03:c4:ec:74:20:
d1:0a:9b:c7:95:e6:5f:8a:e6:68:ba:ad:64:17:b3:f4:5d:63:
f1:b5:08:de:1b:ae:8a:61:0a:0b:e6:6d:2d:a8:44:28:69:9a:
b0:81:07:b8:cb:b9:36:43:5d:dc:78:ca:a9:47:cd:03:5c:05:
7e:27:fa:31:ea:4d:57:3c:fe:81:bd:c4:6d:63:10:2f:23:ae:
c1:1e:4d:e0:d0:2b:60:aa:3e:ec:a4:a1:f7:e0:f6:ad:9a:89:
0a:f3:46:d1:db:30:dd:e9:6a:28:64:80:3d:55:bc:56:31:15:
7d:8b:7d:31:c7:e5:e1:31:66:8b:4d:ec:09:c1:7c:8f:2d:99:
7f:50:77:6f:b7:27:52:62:3d:e6:a3:b8:d5:52:51:23:55:32:
0e:bc:6a:92:80:4a:4e:5e:46:74:1a:2e:0f:0e:75:76:f0:e9:
17:48:8e:73:12:c6:ea:43:6b:04:df:3f:ff:88:7e:be:97:95:
3d:a6:65:ef:4e:af:25:9b:21:23:fd:52:cf:aa:21:35:92:68:
05:9e:af:12:df:bc:c4:b1:2a:49:96:62:4a:cc:8a:b2:ed:45:
de:71:4a:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUBJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMDczNjU4WhcNMjUwMjA4MDczNjU4WjAYMRYw
FAYDVQQDEw02NzkxZjE5ZS03OWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoWTOy98qZC8QImADb4vqaNXqYElcHzD0TPIpUzit3JTXB79LUsdhqEPg
0vSNTfMV7CKOQcOYbSIDXAeKJ7iPSi+u6jGJWKVqW0jB1l+hB/Lx4sxHcW0ruuzW
Nh4t0tjPuVNREo/GI5izu9xSDZLR1K9AsrDDjmyxW633hDyDwmLdYNBYe2y3QEwU
lsiYvRRw+77sZtAEaIJQn2QRFOx3IBdk2IKbiX+7i7rsbKrhlAhXpyRUs25v4/2k
LArAQF4sysW8Zj9WCyi0Z2eXkYqDmvUXNEHLsUHhnoQnGJ7U+wHW9CvwANLnu1Ct
eArTzH5WfNt51RjiGdLyFSvLqZBWwQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNEx
6p/EZQmBzjA78ezvWAEPt6SBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENUFERTYyOEQ5NUMxMUVGODg5OUNCNkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtKlMA0GCSqGSIb3DQEB
CwUAA4IBAQC00EZ0c0sWLF+RX25eRoBW/WyFwMH8wNJok3bZeKYoA8TsdCDRCpvH
leZfiuZouq1kF7P0XWPxtQjeG66KYQoL5m0tqEQoaZqwgQe4y7k2Q13ceMqpR80D
XAV+J/ox6k1XPP6BvcRtYxAvI67BHk3g0Ctgqj7spKH34PatmokK80bR2zDd6Woo
ZIA9VbxWMRV9i30xx+XhMWaLTewJwXyPLZl/UHdvtydSYj3mo7jVUlEjVTIOvGqS
gEpOXkZ0Gi4PDnV28OkXSI5zEsbqQ2sE3z//iH6+l5U9pmXvTq8lmyEj/VLPqiE1
kmgFnq8S37zEsSpJlmJKzIqy7UXecUod
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:43:04 2025 by rpki-client