Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDBBE006C8F111EFB0667567762E951A.roa
File: EDBBE006C8F111EFB0667567762E951A.roa (raw, json)
Hash identifier: odIY/r2pLFR+5ri9tEXCR8mChF+kk+vOD5LS88AotvA=
Subject key identifier: 92:CB:03:8B:B1:E0:DB:E8:AF:89:4F:AD:62:B9:79:DF:27:0D:67:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013273
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDBBE006C8F111EFB0667567762E951A.roa
Signing time: Thu 02 Jan 2025 10:11:27 +0000
ROA not before: Thu 02 Jan 2025 10:11:24 +0000
ROA not after: Tue 11 Feb 2025 10:11:24 +0000
asID: 211826
IP address blocks: 154.197.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78451 (0x13273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 2 10:11:24 2025 GMT
Not After : Feb 11 10:11:24 2025 GMT
Subject: CN=6776664f-7565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:0b:cf:5d:5e:6a:63:35:b0:0f:6c:a6:2e:
9d:4e:6e:88:7c:9a:9e:f0:b3:99:7c:c5:e5:ef:e0:
9d:35:9e:2e:8a:fd:60:4e:51:de:e9:cd:7f:63:84:
1a:4a:bb:7c:4c:23:5b:26:77:20:00:be:9f:30:a3:
66:33:7f:4c:94:28:e4:b1:fc:0c:46:92:31:0e:be:
85:86:f0:31:f7:a9:c1:ad:86:81:cc:6e:99:1e:7e:
81:91:63:62:78:f4:6f:14:37:6a:80:8f:9b:70:5c:
c3:10:a8:6e:58:b3:57:bc:be:32:21:bb:b3:1b:fa:
c2:63:e8:a6:28:d1:9e:db:e3:cd:d5:68:fe:98:a3:
61:d9:d5:57:32:9a:6a:90:47:66:77:8e:1a:ce:65:
51:14:be:91:89:72:38:6d:6a:cc:fa:4f:30:06:36:
01:f2:97:25:ca:28:24:d4:06:83:4b:2e:60:07:01:
d5:cd:39:df:2f:c0:9a:0e:f4:8e:d7:44:b0:96:e1:
08:b4:74:1d:56:49:b6:af:6b:4e:b9:26:fa:20:7d:
17:f2:0e:16:5f:a6:58:6c:27:53:53:e4:62:7b:b2:
e2:55:c0:65:33:0d:7b:35:02:18:cf:3b:82:c3:fa:
95:ac:fa:0e:8c:e6:37:2e:81:0d:43:55:f8:44:83:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CB:03:8B:B1:E0:DB:E8:AF:89:4F:AD:62:B9:79:DF:27:0D:67:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDBBE006C8F111EFB0667567762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.110.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ac:e6:aa:0c:18:80:98:dc:dc:b7:ff:db:e4:65:63:b7:5d:
f5:2f:55:f1:de:fb:40:b7:07:57:95:ac:71:0a:f1:9a:3b:d2:
30:f7:4b:87:df:44:31:10:69:0d:52:2a:b4:81:dd:fe:cc:8c:
c6:d6:2a:e2:d6:b1:2c:fd:c2:c5:65:32:76:b8:9e:4c:01:3b:
3a:c4:71:0d:40:51:a7:39:37:b5:ab:5e:1f:84:73:c9:d8:bd:
6b:ee:ba:e1:36:18:5f:b2:5a:6e:a3:ce:3c:99:e0:50:6c:40:
8c:df:ff:38:7f:46:c5:fc:80:6c:b7:8a:3d:96:1c:58:db:a6:
cd:df:e3:de:43:aa:d6:08:a8:09:ac:11:81:49:5a:ba:08:08:
ed:46:92:69:21:a0:38:ee:76:86:cf:69:96:51:c4:fd:e5:e9:
a1:07:da:6d:2f:61:c4:ab:da:52:69:24:a8:02:e7:1b:7d:b4:
37:81:29:db:45:c2:0e:ea:fa:00:53:6b:3a:a8:fa:d1:46:e0:
82:43:41:95:3b:53:a8:9a:f8:62:b0:dd:d8:c3:c3:ff:9d:3f:
83:95:ec:4a:5f:bf:18:66:40:c9:14:bf:87:25:c6:78:5a:c6:
9c:41:b6:ad:c9:84:cf:0f:c4:d6:7a:08:c0:25:69:66:83:7c:
e5:0b:5f:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATJzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTAxMTI0WhcNMjUwMjExMTAxMTI0WjAYMRYw
FAYDVQQDEw02Nzc2NjY0Zi03NTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtp0Lz11eamM1sA9spi6dTm6IfJqe8LOZfMXl7+CdNZ4uiv1gTlHe6c1/
Y4QaSrt8TCNbJncgAL6fMKNmM39MlCjksfwMRpIxDr6FhvAx96nBrYaBzG6ZHn6B
kWNiePRvFDdqgI+bcFzDEKhuWLNXvL4yIbuzG/rCY+imKNGe2+PN1Wj+mKNh2dVX
MppqkEdmd44azmVRFL6RiXI4bWrM+k8wBjYB8pclyigk1AaDSy5gBwHVzTnfL8Ca
DvSO10SwluEItHQdVkm2r2tOuSb6IH0X8g4WX6ZYbCdTU+Rie7LiVcBlMw17NQIY
zzuCw/qVrPoOjOY3LoENQ1X4RIPzaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJLL
A4ux4Nvor4lPrWK5ed8nDWcEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FREJCRTAwNkM4RjExMUVGQjA2Njc1Njc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVuMA0GCSqGSIb3DQEB
CwUAA4IBAQBNrOaqDBiAmNzct//b5GVjt131L1Xx3vtAtwdXlaxxCvGaO9Iw90uH
30QxEGkNUiq0gd3+zIzG1iri1rEs/cLFZTJ2uJ5MATs6xHENQFGnOTe1q14fhHPJ
2L1r7rrhNhhfslpuo848meBQbECM3/84f0bF/IBst4o9lhxY26bN3+PeQ6rWCKgJ
rBGBSVq6CAjtRpJpIaA47naGz2mWUcT95emhB9ptL2HEq9pSaSSoAucbfbQ3gSnb
RcIO6voAU2s6qPrRRuCCQ0GVO1OomvhisN3Yw8P/nT+DlexKX78YZkDJFL+HJcZ4
WsacQbatyYTPD8TWegjAJWlmg3zlC18W
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:06:22 2025 by rpki-client