Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6C61460D50811EF8B3E8564762E951A.roa
File: E6C61460D50811EF8B3E8564762E951A.roa (raw, json)
Hash identifier: 2jvyoXF/rTU/UI8iAbmVcNvetkfCbYhotz9aR8v3hRc=
Subject key identifier: 80:81:32:6B:02:65:46:D5:98:8D:89:98:46:37:C3:5E:B9:F2:FF:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D2F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6C61460D50811EF8B3E8564762E951A.roa
Signing time: Fri 17 Jan 2025 19:26:08 +0000
ROA not before: Fri 17 Jan 2025 19:26:04 +0000
ROA not after: Sat 22 Feb 2025 19:26:04 +0000
asID: 54801
IP address blocks: 154.204.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81199 (0x13d2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 19:26:04 2025 GMT
Not After : Feb 22 19:26:04 2025 GMT
Subject: CN=678aaed0-55e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:d7:f6:8e:b2:2f:f3:b8:5c:81:e2:a0:df:
96:94:35:8e:cb:0a:02:75:2b:35:51:5a:16:1d:91:
9b:a0:61:bf:34:8f:7f:10:51:c5:61:36:6b:4d:7f:
c0:0c:9a:ae:15:75:76:ab:f9:88:65:65:d4:1c:b7:
aa:f6:d7:77:1f:f8:57:e4:4f:76:c0:94:8d:a6:39:
a4:c3:83:da:11:0d:02:fc:40:4b:94:5e:e8:17:f3:
56:99:31:88:a9:fd:ca:e9:cf:74:69:ad:94:77:f6:
1c:84:47:8f:29:dc:78:df:4d:66:3d:3a:5a:ad:74:
a2:9f:5c:c4:08:66:ea:ef:4c:64:8d:26:ce:05:01:
39:17:e7:9d:72:ea:df:4b:66:f3:8d:a8:e7:56:63:
ef:34:8e:18:c3:34:c2:3d:a9:65:a5:9e:5a:b5:2b:
fc:bc:a4:58:96:8c:4c:d9:c8:3a:24:fe:5d:a0:0a:
04:94:32:49:b4:39:1e:08:db:e6:36:3f:36:80:47:
28:79:5c:0f:ba:00:3b:69:b9:ba:dd:b5:e0:ed:7b:
5e:b3:ce:44:a8:36:dc:d4:66:2a:97:fb:ef:76:b4:
f5:af:a1:cc:4d:ee:fe:6d:fc:ad:8e:36:af:8b:73:
cf:36:53:95:4a:36:f5:fb:b1:52:10:cb:bb:2e:bd:
3e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:81:32:6B:02:65:46:D5:98:8D:89:98:46:37:C3:5E:B9:F2:FF:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6C61460D50811EF8B3E8564762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:97:01:ef:68:c7:1f:5c:73:96:56:ba:db:bb:52:0c:b0:c9:
62:80:04:2f:71:82:bf:61:eb:63:e4:f2:e0:c4:19:08:70:ab:
60:d8:92:e0:e5:74:82:89:d5:97:6e:de:ad:02:04:4b:16:41:
73:87:b9:8e:37:e3:fe:fa:a5:cf:08:17:5a:a8:00:54:38:3f:
68:3b:4a:d8:18:c5:23:a8:92:2b:4f:cf:e3:8e:5c:89:ce:83:
0a:03:95:b5:23:f4:34:f9:fd:e2:fc:45:33:ff:6f:a9:c7:6f:
43:ab:01:ca:35:17:25:b8:9a:2e:f6:78:4a:67:9a:d3:6a:85:
70:d1:a3:e1:1e:6a:22:6d:b7:3c:ce:9b:cc:43:6e:78:85:4b:
2e:2a:07:66:9a:56:37:be:d1:52:2b:c2:25:50:2c:e3:66:7f:
7b:d9:06:26:56:04:ca:8b:df:c2:13:53:c2:9d:f2:96:84:0f:
c6:ae:00:d1:8c:23:73:82:ee:79:96:96:7d:b0:4f:c5:fc:56:
5b:88:d2:5e:7d:e3:b4:b0:db:84:6e:87:35:5a:8f:59:0e:34:
a6:4f:4a:e9:c6:e6:7c:f0:2d:3a:67:6e:f4:d4:6f:87:6f:74:
57:57:06:36:6f:82:45:c3:46:ff:45:f3:6d:b7:3a:67:be:9b:
bb:e0:0a:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT0vMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE3MTkyNjA0WhcNMjUwMjIyMTkyNjA0WjAYMRYw
FAYDVQQDEw02NzhhYWVkMC01NWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzr/X9o6yL/O4XIHioN+WlDWOywoCdSs1UVoWHZGboGG/NI9/EFHFYTZr
TX/ADJquFXV2q/mIZWXUHLeq9td3H/hX5E92wJSNpjmkw4PaEQ0C/EBLlF7oF/NW
mTGIqf3K6c90aa2Ud/YchEePKdx4301mPTparXSin1zECGbq70xkjSbOBQE5F+ed
curfS2bzjajnVmPvNI4YwzTCPallpZ5atSv8vKRYloxM2cg6JP5doAoElDJJtDke
CNvmNj82gEcoeVwPugA7abm63bXg7Xtes85EqDbc1GYql/vvdrT1r6HMTe7+bfyt
jjavi3PPNlOVSjb1+7FSEMu7Lr0+QQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFICB
MmsCZUbVmI2JmEY3w1658v8yMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNkM2MTQ2MEQ1MDgxMUVGOEIzRTg1NjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmswAMA0GCSqGSIb3DQEB
CwUAA4IBAQCilwHvaMcfXHOWVrrbu1IMsMligAQvcYK/Yetj5PLgxBkIcKtg2JLg
5XSCidWXbt6tAgRLFkFzh7mON+P++qXPCBdaqABUOD9oO0rYGMUjqJIrT8/jjlyJ
zoMKA5W1I/Q0+f3i/EUz/2+px29DqwHKNRcluJou9nhKZ5rTaoVw0aPhHmoibbc8
zpvMQ254hUsuKgdmmlY3vtFSK8IlUCzjZn972QYmVgTKi9/CE1PCnfKWhA/GrgDR
jCNzgu55lpZ9sE/F/FZbiNJefeO0sNuEboc1Wo9ZDjSmT0rpxuZ88C06Z2701G+H
b3RXVwY2b4JFw0b/RfNttzpnvpu74Aq6
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:04:51 2025 by rpki-client