Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7902EF2BEA611EF868B6E98762E951A.roa
File: F7902EF2BEA611EF868B6E98762E951A.roa (raw, json)
Hash identifier: kEdL4ZIHyVtNQz5ys1pikHaNc/P/KAJozTnuNdqoQ9g=
Subject key identifier: 9B:60:22:99:E5:81:A7:BB:9E:FD:EC:74:15:4A:A8:66:CB:24:14:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7902EF2BEA611EF868B6E98762E951A.roa
Signing time: Fri 20 Dec 2024 07:49:40 +0000
ROA not before: Fri 20 Dec 2024 07:49:36 +0000
ROA not after: Thu 20 Mar 2025 07:49:36 +0000
asID: 2914
IP address blocks: 154.214.194.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72796 (0x11c5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 07:49:36 2024 GMT
Not After : Mar 20 07:49:36 2025 GMT
Subject: CN=67652194-ceee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:65:2a:df:a2:d9:9f:57:94:5a:96:ad:0d:29:
b9:a7:79:73:d3:95:0e:e9:4a:84:06:e7:41:8d:5b:
58:c4:26:2f:6c:67:07:e9:1d:c1:81:95:ad:52:44:
34:5f:8a:bb:cf:f1:03:60:88:08:e2:1e:a7:b4:39:
ef:7f:78:e6:88:97:2e:3b:32:51:be:97:cf:f2:5c:
29:3b:be:b1:b1:e8:95:f4:13:8d:83:f4:88:cd:63:
9b:3a:5b:d0:21:20:72:61:99:b7:70:57:f9:b4:9c:
d7:39:b7:0b:e2:f1:b6:b2:09:88:d8:b3:0d:9d:ee:
bc:03:59:21:79:30:89:20:9b:c1:18:b4:ad:a7:12:
fa:81:a7:82:a1:6c:a0:73:24:7d:97:f9:ea:87:4c:
e5:2f:d8:ad:5c:7d:8a:14:af:eb:e9:1d:71:28:c3:
a7:6d:35:2d:96:44:ff:d4:ff:37:23:fc:bb:55:da:
b6:e9:61:b1:4f:17:60:ad:82:82:52:f1:88:d8:d9:
02:9a:ce:06:f6:bc:71:8e:83:12:9b:99:94:ad:fe:
dd:4b:4d:72:98:14:37:63:f1:13:99:2c:cd:6a:86:
67:06:99:ec:4f:69:0c:43:83:7c:c5:ba:36:7c:09:
94:63:bc:45:44:c2:ed:30:1a:48:4e:eb:a0:da:9a:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:60:22:99:E5:81:A7:BB:9E:FD:EC:74:15:4A:A8:66:CB:24:14:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7902EF2BEA611EF868B6E98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.194.0/23
Signature Algorithm: sha256WithRSAEncryption
66:ad:63:79:6e:f2:6d:f7:ca:53:8c:c8:c1:cf:80:5e:00:9b:
b6:01:4d:97:2a:a2:15:aa:d2:57:d9:1b:13:75:9c:d1:06:09:
26:37:d8:9f:7a:71:a6:58:4c:3d:36:ec:3a:04:5e:79:21:bb:
ff:23:f5:79:ab:10:fd:e7:e2:a5:23:1a:66:94:c1:25:a2:5a:
40:5b:bc:47:ce:de:55:f5:e2:f0:f0:51:0b:f1:7e:9c:06:0b:
84:dd:6f:72:91:bc:6b:5d:80:2c:2a:a7:ec:f4:46:25:7a:ce:
f2:41:f1:0b:8b:19:35:5b:f8:1c:5e:bd:af:fc:e4:02:a6:25:
89:8f:1a:30:b5:79:58:45:e8:d9:4a:3f:dc:7f:f0:63:43:e9:
aa:9a:6e:16:c9:d1:43:d2:ad:8b:7b:3a:6b:df:8f:7e:5f:c1:
e9:4a:f9:24:24:70:7b:24:c4:aa:62:2b:7f:cc:c7:c8:1f:70:
af:c3:ce:a0:29:a9:64:0e:5e:70:a2:a0:56:3b:1f:e1:c1:b2:
df:fc:15:c3:d5:52:f0:4b:4c:19:28:53:59:5c:2c:26:ce:dc:
43:a4:23:0b:ad:94:20:75:9d:82:fe:e3:8c:b7:e7:54:4e:3b:
47:54:35:7f:a4:6c:19:8b:02:c0:98:5c:53:9c:5b:28:80:12:
fe:ec:ec:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARxcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIwMDc0OTM2WhcNMjUwMzIwMDc0OTM2WjAYMRYw
FAYDVQQDEw02NzY1MjE5NC1jZWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1mUq36LZn1eUWpatDSm5p3lz05UO6UqEBudBjVtYxCYvbGcH6R3BgZWt
UkQ0X4q7z/EDYIgI4h6ntDnvf3jmiJcuOzJRvpfP8lwpO76xseiV9BONg/SIzWOb
OlvQISByYZm3cFf5tJzXObcL4vG2sgmI2LMNne68A1kheTCJIJvBGLStpxL6gaeC
oWygcyR9l/nqh0zlL9itXH2KFK/r6R1xKMOnbTUtlkT/1P83I/y7Vdq26WGxTxdg
rYKCUvGI2NkCms4G9rxxjoMSm5mUrf7dS01ymBQ3Y/ETmSzNaoZnBpnsT2kMQ4N8
xbo2fAmUY7xFRMLtMBpITuug2ppb2wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJtg
Ipnlgae7nv3sdBVKqGbLJBSzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNzkwMkVGMkJFQTYxMUVGODY4QjZFOTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmtbCMA0GCSqGSIb3DQEB
CwUAA4IBAQBmrWN5bvJt98pTjMjBz4BeAJu2AU2XKqIVqtJX2RsTdZzRBgkmN9if
enGmWEw9Nuw6BF55Ibv/I/V5qxD95+KlIxpmlMElolpAW7xHzt5V9eLw8FEL8X6c
BguE3W9ykbxrXYAsKqfs9EYles7yQfELixk1W/gcXr2v/OQCpiWJjxowtXlYRejZ
Sj/cf/BjQ+mqmm4WydFD0q2Lezpr349+X8HpSvkkJHB7JMSqYit/zMfIH3Cvw86g
KalkDl5woqBWOx/hwbLf/BXD1VLwS0wZKFNZXCwmztxDpCMLrZQgdZ2C/uOMt+dU
TjtHVDV/pGwZiwLAmFxTnFsogBL+7Oxx
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:25:48 2025 by rpki-client