Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7C09518DA1511EFB24A4A4D762E951A.roa
File: E7C09518DA1511EFB24A4A4D762E951A.roa (raw, json)
Hash identifier: dulPep5WmaeSFF3ZAegoXCLMEt+DAFvdPm3Sbs0u9/s=
Subject key identifier: E3:C5:61:72:69:37:52:E5:64:74:EE:28:CD:61:B7:A8:C6:18:5B:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7C09518DA1511EFB24A4A4D762E951A.roa
Signing time: Fri 24 Jan 2025 05:41:49 +0000
ROA not before: Fri 24 Jan 2025 05:41:45 +0000
ROA not after: Sat 01 Mar 2025 05:41:45 +0000
asID: 44559
IP address blocks: 154.203.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82914 (0x143e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 05:41:45 2025 GMT
Not After : Mar 1 05:41:45 2025 GMT
Subject: CN=6793281d-b214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:1f:21:0d:8b:25:c6:59:ed:f0:4f:f6:5e:
8f:0f:81:fd:49:29:ee:43:a5:d1:eb:75:4f:b7:1c:
a0:1a:8d:b8:be:78:90:b8:76:99:a6:6c:51:9b:8b:
59:83:99:d6:0f:b8:95:f0:9f:e9:45:11:66:a2:48:
51:58:87:11:0a:c1:cf:ae:94:c8:94:0d:c2:a4:88:
8f:c6:0f:8a:8e:03:7b:9b:b8:07:fa:7d:09:99:de:
36:45:d1:df:c0:3f:2e:95:54:f5:53:db:c4:03:76:
0c:41:07:ee:86:6d:23:4b:fc:e9:c9:09:56:24:a7:
99:d2:31:ff:2b:aa:5a:ef:01:e3:fe:84:1d:46:b3:
23:4c:29:20:2e:6e:62:6b:f7:5b:5f:69:22:6f:c1:
da:bc:87:d6:8f:14:30:a4:90:b1:cf:d5:7d:ae:84:
10:c9:1f:36:ed:55:42:52:d2:34:c4:e6:3e:14:3b:
64:0d:93:81:0e:f5:e8:05:e2:a7:c9:cb:bc:66:b3:
ca:87:a1:51:dc:e6:f4:cf:ae:58:d2:9a:66:d0:d6:
99:e1:92:6d:83:b1:0a:66:cd:22:b0:e0:3e:1a:95:
31:83:5c:a9:b0:14:5a:a0:0d:de:db:e2:3d:9b:ee:
f4:d1:d8:f2:4b:39:4a:3a:f5:91:73:7b:8c:57:53:
64:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C5:61:72:69:37:52:E5:64:74:EE:28:CD:61:B7:A8:C6:18:5B:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7C09518DA1511EFB24A4A4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.230.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:d4:38:c8:6a:49:ea:b7:e7:f2:9c:c4:e8:a5:75:de:8a:4a:
0b:d9:bc:33:16:8a:80:b4:d3:00:d3:70:3a:f9:06:8c:14:53:
f9:f4:99:2b:2b:85:8e:f8:3a:3f:5d:71:bb:1b:1d:26:a8:04:
42:7f:c0:b3:84:6c:ea:d1:b3:c0:71:0f:57:cd:a7:34:83:cb:
02:ed:c8:0f:31:04:0c:7a:44:3a:29:bc:d7:8d:9c:1e:4a:39:
4d:2c:8f:39:22:42:c5:e7:e6:70:eb:e4:cb:02:db:30:bf:be:
99:39:61:1b:90:c3:66:d6:ca:cb:49:4f:a8:c1:43:be:e6:ff:
77:6e:5c:4f:df:39:69:71:87:5f:15:bc:65:9a:52:64:58:3f:
9f:94:83:24:a6:6e:51:1e:d1:21:82:a6:a8:b2:86:40:e6:f8:
34:01:30:96:b4:47:c7:e7:f1:9c:4a:08:9e:b6:33:e9:31:9d:
2c:04:8b:ef:77:7f:fe:24:ad:41:4b:50:e3:f2:59:fe:0b:31:
cc:ed:38:91:cf:2f:b5:a0:e4:48:53:81:35:39:43:60:18:bf:
2c:32:11:29:00:d5:44:06:55:6d:fb:cd:29:d9:7f:fe:28:0c:
f6:fd:25:30:27:5b:01:94:67:d4:13:d0:d8:f0:fe:b1:fb:d6:
3b:d8:ef:b8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUPiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MDU0MTQ1WhcNMjUwMzAxMDU0MTQ1WjAYMRYw
FAYDVQQDEw02NzkzMjgxZC1iMjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwLkfIQ2LJcZZ7fBP9l6PD4H9SSnuQ6XR63VPtxygGo24vniQuHaZpmxR
m4tZg5nWD7iV8J/pRRFmokhRWIcRCsHPrpTIlA3CpIiPxg+KjgN7m7gH+n0Jmd42
RdHfwD8ulVT1U9vEA3YMQQfuhm0jS/zpyQlWJKeZ0jH/K6pa7wHj/oQdRrMjTCkg
Lm5ia/dbX2kib8HavIfWjxQwpJCxz9V9roQQyR827VVCUtI0xOY+FDtkDZOBDvXo
BeKnycu8ZrPKh6FR3Ob0z65Y0ppm0NaZ4ZJtg7EKZs0isOA+GpUxg1ypsBRaoA3e
2+I9m+700djySzlKOvWRc3uMV1NkTQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOPF
YXJpN1LlZHTuKM1ht6jGGFvRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FN0MwOTUxOERBMTUxMUVGQjI0QTRBNEQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsvmMA0GCSqGSIb3DQEB
CwUAA4IBAQDW1DjIaknqt+fynMTopXXeikoL2bwzFoqAtNMA03A6+QaMFFP59Jkr
K4WO+Do/XXG7Gx0mqARCf8CzhGzq0bPAcQ9Xzac0g8sC7cgPMQQMekQ6KbzXjZwe
SjlNLI85IkLF5+Zw6+TLAtswv76ZOWEbkMNm1srLSU+owUO+5v93blxP3zlpcYdf
FbxlmlJkWD+flIMkpm5RHtEhgqaosoZA5vg0ATCWtEfH5/GcSgietjPpMZ0sBIvv
d3/+JK1BS1Dj8ln+CzHM7TiRzy+1oORIU4E1OUNgGL8sMhEpANVEBlVt+80p2X/+
KAz2/SUwJ1sBlGfUE9DY8P6x+9Y72O+4
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:52 2025 by rpki-client