Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/075985C0C93011EFAE1F216B762E951A.roa
File: 075985C0C93011EFAE1F216B762E951A.roa (raw, json)
Hash identifier: ycLYvss5vws3R99GVcMkCVeBs2g8Gyx4kYnmlGqpkFg=
Subject key identifier: AD:E7:58:A2:39:5E:21:27:0E:91:A4:42:9A:36:07:50:54:50:A5:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/075985C0C93011EFAE1F216B762E951A.roa
Signing time: Thu 02 Jan 2025 17:35:59 +0000
ROA not before: Thu 02 Jan 2025 17:35:55 +0000
ROA not after: Sat 13 Dec 2025 17:35:55 +0000
asID: 984
IP address blocks: 154.222.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78755 (0x133a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 17:35:55 2025 GMT
Not After : Dec 13 17:35:55 2025 GMT
Subject: CN=6776ce7f-3c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:86:ae:07:45:0b:89:a4:e7:40:3a:6f:63:
7f:d3:cf:39:f1:85:49:19:21:c1:e9:44:e4:e5:0c:
83:ea:f3:16:c2:cc:31:16:cc:58:d1:c4:1f:12:1d:
a2:23:31:38:c4:14:0e:21:51:0f:e3:40:b2:07:91:
b8:2a:9c:24:94:9a:1c:be:57:fd:b7:4d:52:da:fc:
16:1d:41:04:e9:9b:b6:b7:b3:38:0b:40:e8:75:91:
c1:bd:f5:f8:97:8f:ff:07:81:4d:fc:28:15:5f:08:
41:df:0a:0c:b8:9f:d2:ec:c7:11:29:b6:8c:19:fa:
06:d3:f4:16:37:c0:ef:2a:e6:c0:13:c1:3a:11:c9:
a6:86:62:1a:a4:bf:07:83:89:8d:de:58:88:82:fe:
d1:5f:9c:0c:49:e2:10:a7:b3:7f:89:ab:cd:60:ee:
3f:7b:fb:5b:74:11:2d:ba:bc:e4:99:cf:fa:e5:0c:
93:74:34:28:01:b1:71:12:ee:e1:3f:db:9f:37:bd:
91:45:c5:e9:b3:22:ec:61:e1:fe:6b:8e:8b:64:3c:
cb:53:7b:b6:cf:7b:37:f8:c1:cc:e6:dc:eb:43:61:
96:80:a0:2d:b2:4a:7a:ab:86:3b:1f:0d:ab:10:4b:
0b:ae:2f:7d:47:f0:83:85:f1:16:ea:bf:b1:30:d8:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E7:58:A2:39:5E:21:27:0E:91:A4:42:9A:36:07:50:54:50:A5:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/075985C0C93011EFAE1F216B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.158.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:c6:89:e9:b1:0d:60:49:b1:a6:08:7e:ae:25:c3:0f:e7:ba:
4b:f6:0c:d7:1e:03:cd:6f:f0:0b:7c:dc:36:e0:5e:f6:41:11:
f3:4b:7a:96:87:60:6f:c0:48:d7:05:67:d7:22:5d:b1:f9:4d:
12:8d:54:c1:4d:e9:99:c5:07:43:2d:88:16:93:d4:a5:29:55:
47:ee:13:c1:a5:81:c5:61:c3:04:61:d6:cf:a0:98:ee:0f:39:
62:74:51:6c:fc:30:61:03:2b:b8:e5:83:ba:dc:f5:36:41:68:
3f:ca:07:b3:56:4b:d5:0e:84:5c:e2:6f:fa:42:b1:18:e2:23:
d9:16:5e:4f:7b:53:3d:67:58:c5:53:7d:28:55:3f:0e:04:36:
20:39:15:9b:1e:ea:e2:63:f0:f7:89:c5:5a:23:76:bc:ec:78:
af:d1:95:0f:33:33:d5:65:f9:66:7d:58:7f:af:c2:8d:6c:97:
2f:f2:fa:25:66:8f:da:a4:7b:5b:96:9e:4e:78:50:90:40:11:
3f:0e:f2:f3:ac:0f:2f:dd:dd:e9:65:5f:94:e3:5b:81:1b:89:
30:42:78:4f:e2:a8:1d:21:3d:bb:e0:f0:ec:b4:66:9d:79:38:
d4:3e:e6:52:5e:d3:cf:25:c7:c9:75:81:ca:f4:2d:94:77:87:
81:0c:1f:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATOjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTczNTU1WhcNMjUxMjEzMTczNTU1WjAYMRYw
FAYDVQQDEw02Nzc2Y2U3Zi0zYzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmMeGrgdFC4mk50A6b2N/08858YVJGSHB6UTk5QyD6vMWwswxFsxY0cQf
Eh2iIzE4xBQOIVEP40CyB5G4KpwklJocvlf9t01S2vwWHUEE6Zu2t7M4C0DodZHB
vfX4l4//B4FN/CgVXwhB3woMuJ/S7McRKbaMGfoG0/QWN8DvKubAE8E6EcmmhmIa
pL8Hg4mN3liIgv7RX5wMSeIQp7N/iavNYO4/e/tbdBEturzkmc/65QyTdDQoAbFx
Eu7hP9ufN72RRcXpsyLsYeH+a46LZDzLU3u2z3s3+MHM5tzrQ2GWgKAtskp6q4Y7
Hw2rEEsLri99R/CDhfEW6r+xMNgJgQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK3n
WKI5XiEnDpGkQpo2B1BUUKUvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNzU5ODVDMEM5MzAxMUVGQUUxRjIxNkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt6eMA0GCSqGSIb3DQEB
CwUAA4IBAQDIxonpsQ1gSbGmCH6uJcMP57pL9gzXHgPNb/ALfNw24F72QRHzS3qW
h2BvwEjXBWfXIl2x+U0SjVTBTemZxQdDLYgWk9SlKVVH7hPBpYHFYcMEYdbPoJju
DzlidFFs/DBhAyu45YO63PU2QWg/ygezVkvVDoRc4m/6QrEY4iPZFl5Pe1M9Z1jF
U30oVT8OBDYgORWbHuriY/D3icVaI3a87Hiv0ZUPMzPVZflmfVh/r8KNbJcv8vol
Zo/apHtblp5OeFCQQBE/DvLzrA8v3d3pZV+U41uBG4kwQnhP4qgdIT274PDstGad
eTjUPuZSXtPPJcfJdYHK9C2Ud4eBDB8/
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:47 2025 by rpki-client