Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB924AD2DA4C11EF9BFD9CBC762E951A.roa
File: FB924AD2DA4C11EF9BFD9CBC762E951A.roa (raw, json)
Hash identifier: lnl04xjGYkrZkIt25PxjpJM1np0tmjXHiG1jonurExI=
Subject key identifier: BA:64:51:93:D1:CB:05:34:2E:B1:47:C9:38:37:70:EC:01:E2:DB:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB924AD2DA4C11EF9BFD9CBC762E951A.roa
Signing time: Fri 24 Jan 2025 12:16:05 +0000
ROA not before: Fri 24 Jan 2025 12:16:01 +0000
ROA not after: Wed 05 Mar 2025 12:16:01 +0000
asID: 44559
IP address blocks: 154.209.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83616 (0x146a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:16:01 2025 GMT
Not After : Mar 5 12:16:01 2025 GMT
Subject: CN=67938484-652c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ab:80:b6:7b:99:94:6f:97:d9:9c:10:4c:32:
d7:1c:44:78:4c:61:d3:83:74:45:cf:f1:9c:74:19:
d0:fd:6d:91:59:76:63:93:3a:41:0c:75:36:64:db:
56:a9:29:49:6a:8c:9d:a1:85:db:6d:63:77:b8:e3:
80:52:d3:d7:57:03:e8:b9:24:75:e8:08:e3:58:f2:
bf:fa:f9:51:8d:f2:2e:c9:df:b2:0a:3d:33:cc:0f:
bb:3c:df:a3:ed:e8:18:9e:f6:f7:46:3a:c8:ee:aa:
bd:fa:ec:42:5a:8e:1f:06:36:8a:84:fb:df:46:27:
13:c0:b7:4d:33:46:4a:07:2c:3f:83:34:96:36:4d:
dd:78:07:b2:8c:40:96:85:11:75:4c:32:cf:ca:a3:
66:78:ae:68:ea:62:ce:eb:95:cd:4a:ab:76:c8:a6:
04:65:4e:a3:5c:26:80:0a:7e:34:92:fd:1d:78:d1:
cc:91:5f:7c:71:7b:77:f8:60:01:fc:ed:bb:56:4f:
82:b0:9a:8f:6c:cd:d6:87:7a:95:b1:49:d8:3b:94:
89:18:a1:be:78:a0:fe:df:2f:87:a8:aa:ea:98:1e:
e7:dd:06:b3:a6:1b:8d:79:6b:84:65:2b:2e:6a:2e:
5e:04:e0:b1:7d:16:ca:89:cd:6a:87:68:e4:f9:4d:
c6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:64:51:93:D1:CB:05:34:2E:B1:47:C9:38:37:70:EC:01:E2:DB:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB924AD2DA4C11EF9BFD9CBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.194.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:e0:9c:6e:2d:46:48:70:70:30:08:f4:b7:ec:5c:24:d4:0c:
8a:b0:58:25:d8:fd:ed:4a:ef:34:ac:f2:59:fa:8f:de:9e:3f:
c7:bb:7f:e6:1e:21:cf:bf:fd:13:15:9c:31:62:6b:ab:76:e0:
de:41:fb:c7:2e:ce:a6:47:52:fa:c3:68:1a:00:fc:ba:07:3b:
99:ea:ed:28:47:fa:c5:1a:01:b2:3d:67:ae:83:93:c2:20:97:
6b:05:64:ec:52:0d:2e:25:e6:2f:6a:3f:57:04:7b:8b:ec:53:
90:1f:b8:87:6a:72:9e:f2:52:6b:31:2c:80:56:49:8b:49:2d:
ee:78:71:9f:98:42:0e:7a:c2:f7:e9:78:7e:5f:4b:03:b7:b9:
a2:6d:ec:c0:91:b3:6b:05:af:54:d1:dc:54:fe:2d:38:de:d0:
e0:98:f3:eb:b7:b3:5a:46:7f:ce:f8:bc:08:4e:82:ef:e4:26:
1e:d0:49:21:44:5b:21:97:15:28:e2:96:5e:6c:95:57:3f:6c:
2c:2a:cc:37:a3:96:be:c1:37:8f:45:68:69:5e:b5:ad:be:55:
ba:21:e3:8b:69:3b:b1:c1:a7:71:91:d0:e4:66:2c:4f:cd:da:
87:22:90:f4:6f:43:ba:81:12:aa:9b:45:5b:5e:bb:73:38:6e:
8b:9c:d4:6e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUagMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTIxNjAxWhcNMjUwMzA1MTIxNjAxWjAYMRYw
FAYDVQQDEw02NzkzODQ4NC02NTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1KuAtnuZlG+X2ZwQTDLXHER4TGHTg3RFz/GcdBnQ/W2RWXZjkzpBDHU2
ZNtWqSlJaoydoYXbbWN3uOOAUtPXVwPouSR16AjjWPK/+vlRjfIuyd+yCj0zzA+7
PN+j7egYnvb3RjrI7qq9+uxCWo4fBjaKhPvfRicTwLdNM0ZKByw/gzSWNk3deAey
jECWhRF1TDLPyqNmeK5o6mLO65XNSqt2yKYEZU6jXCaACn40kv0deNHMkV98cXt3
+GAB/O27Vk+CsJqPbM3Wh3qVsUnYO5SJGKG+eKD+3y+HqKrqmB7n3QazphuNeWuE
ZSsuai5eBOCxfRbKic1qh2jk+U3GnQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLpk
UZPRywU0LrFHyTg3cOwB4tsNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQjkyNEFEMkRBNEMxMUVGOUJGRDlDQkM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtHCMA0GCSqGSIb3DQEB
CwUAA4IBAQAr4JxuLUZIcHAwCPS37Fwk1AyKsFgl2P3tSu80rPJZ+o/enj/Hu3/m
HiHPv/0TFZwxYmurduDeQfvHLs6mR1L6w2gaAPy6BzuZ6u0oR/rFGgGyPWeug5PC
IJdrBWTsUg0uJeYvaj9XBHuL7FOQH7iHanKe8lJrMSyAVkmLSS3ueHGfmEIOesL3
6Xh+X0sDt7mibezAkbNrBa9U0dxU/i043tDgmPPrt7NaRn/O+LwIToLv5CYe0Ekh
RFshlxUo4pZebJVXP2wsKsw3o5a+wTePRWhpXrWtvlW6IeOLaTuxwadxkdDkZixP
zdqHIpD0b0O6gRKqm0VbXrtzOG6LnNRu
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:06:41 2025 by rpki-client