Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7E6DA82C8F011EF809FFA60762E951A.roa
File: F7E6DA82C8F011EF809FFA60762E951A.roa (raw, json)
Hash identifier: ZvsrbZHMB14n0DmGGpEE3C+mXmG5LLp109tOVmSwRvM=
Subject key identifier: B4:D9:48:A4:3F:32:72:44:0C:F1:09:43:DB:1E:57:8C:10:D4:8C:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01326F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7E6DA82C8F011EF809FFA60762E951A.roa
Signing time: Thu 02 Jan 2025 10:04:35 +0000
ROA not before: Thu 02 Jan 2025 10:04:31 +0000
ROA not after: Fri 07 Feb 2025 10:04:31 +0000
asID: 395793
IP address blocks: 154.93.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78447 (0x1326f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 2 10:04:31 2025 GMT
Not After : Feb 7 10:04:31 2025 GMT
Subject: CN=677664b3-9e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:93:f0:b9:1e:0b:e4:3b:8b:29:c8:9e:33:
43:f0:85:a7:e0:7d:a4:ac:68:d2:5c:03:ed:8d:cd:
c9:25:78:20:b8:cc:da:f6:a1:5e:1a:6d:83:8c:e6:
a1:a0:8b:5b:f1:d5:c1:c0:d7:b0:b8:49:5c:2d:50:
83:34:01:03:d6:1c:26:d3:80:75:b2:c0:c1:e8:15:
47:b7:13:cc:8c:40:d3:82:3d:fb:01:f7:e3:d6:b2:
1c:99:0d:bd:bf:ef:42:87:2f:3b:b9:b9:e8:0f:77:
1a:7c:de:bc:37:76:70:c8:bf:b2:ba:d9:bd:52:d1:
40:98:6b:e6:e5:08:c4:33:c6:50:bf:e8:1a:8d:35:
79:91:0e:85:2a:ac:e7:de:04:f4:a1:a8:9e:21:d8:
52:f9:ba:be:f8:74:b6:17:7a:b9:71:e9:d4:a5:52:
92:12:b1:16:33:68:12:c2:2b:62:0b:23:6e:8f:b3:
5d:4a:7e:6a:5c:da:ab:f4:93:74:87:dd:a4:f4:c2:
2b:71:de:e6:9a:8b:d7:b0:b5:88:d7:01:e6:32:80:
9f:50:96:98:f6:3e:08:47:be:06:ef:9f:6d:33:c3:
9b:0d:34:1d:0a:2a:2c:b5:d7:2f:d9:84:95:e1:71:
52:83:66:19:8c:91:47:83:c6:88:62:d3:b3:dd:ef:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D9:48:A4:3F:32:72:44:0C:F1:09:43:DB:1E:57:8C:10:D4:8C:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7E6DA82C8F011EF809FFA60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:f0:7a:e6:fa:60:6c:69:1d:cc:52:73:77:cc:93:f9:ea:0d:
d5:78:ca:46:fa:85:90:25:3e:e1:9a:34:62:e3:ba:c7:00:73:
bf:fc:56:2b:ba:fd:24:10:33:a9:cd:d4:2a:7a:56:f3:29:47:
78:d8:9e:ee:f7:bb:50:d2:51:c6:70:a1:5c:b8:91:c3:22:3a:
a9:70:8d:37:94:16:66:5f:3a:3a:22:dc:8d:07:54:01:b7:1a:
75:31:d7:7d:17:f4:f4:8b:84:d5:6a:1b:f5:af:b2:2c:a2:e6:
54:f9:0e:f1:c3:42:7f:4a:9b:29:f9:fe:62:7f:79:5e:81:89:
9e:82:87:5c:bd:75:03:ee:08:b7:1c:f5:1a:14:45:65:08:5a:
64:1b:3d:5e:43:1a:bc:3f:a4:e5:6d:fc:cf:78:01:d7:44:b8:
be:00:16:1c:21:e5:42:87:d7:65:6d:d8:4c:48:c3:6c:5b:25:
75:04:25:f7:1b:4e:8f:56:97:89:b1:5f:10:bc:19:42:68:36:
08:3e:b1:14:e4:21:2d:7a:ed:6b:af:97:66:70:c4:d2:e5:fb:
8d:cf:e6:f0:31:ac:0e:0a:ee:93:50:84:7a:c6:c9:6c:89:57:
7e:76:3f:e8:c2:2f:6b:30:39:10:58:14:4c:c1:6d:ce:10:4e:
13:1a:33:f7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATJvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTAwNDMxWhcNMjUwMjA3MTAwNDMxWjAYMRYw
FAYDVQQDEw02Nzc2NjRiMy05ZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwc6T8LkeC+Q7iynInjND8IWn4H2krGjSXAPtjc3JJXgguMza9qFeGm2D
jOahoItb8dXBwNewuElcLVCDNAED1hwm04B1ssDB6BVHtxPMjEDTgj37Affj1rIc
mQ29v+9Chy87ubnoD3cafN68N3ZwyL+yutm9UtFAmGvm5QjEM8ZQv+gajTV5kQ6F
Kqzn3gT0oaieIdhS+bq++HS2F3q5cenUpVKSErEWM2gSwitiCyNuj7NdSn5qXNqr
9JN0h92k9MIrcd7mmovXsLWI1wHmMoCfUJaY9j4IR74G759tM8ObDTQdCiostdcv
2YSV4XFSg2YZjJFHg8aIYtOz3e+bTwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLTZ
SKQ/MnJEDPEJQ9seV4wQ1IzHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GN0U2REE4MkM4RjAxMUVGODA5RkZBNjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml0AMA0GCSqGSIb3DQEB
CwUAA4IBAQCn8Hrm+mBsaR3MUnN3zJP56g3VeMpG+oWQJT7hmjRi47rHAHO//FYr
uv0kEDOpzdQqelbzKUd42J7u97tQ0lHGcKFcuJHDIjqpcI03lBZmXzo6ItyNB1QB
txp1Mdd9F/T0i4TVahv1r7IsouZU+Q7xw0J/Spsp+f5if3legYmegodcvXUD7gi3
HPUaFEVlCFpkGz1eQxq8P6TlbfzPeAHXRLi+ABYcIeVCh9dlbdhMSMNsWyV1BCX3
G06PVpeJsV8QvBlCaDYIPrEU5CEteu1rr5dmcMTS5fuNz+bwMawOCu6TUIR6xsls
iVd+dj/owi9rMDkQWBRMwW3OEE4TGjP3
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:23 2025 by rpki-client