Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07F5597A092F11F0955B745D762E951A.roa
File: 07F5597A092F11F0955B745D762E951A.roa (raw, json)
Hash identifier: Inc/lTePYUZCaphlnOiUOFPJOhIaX4Avq9fl3H0xlps=
Subject key identifier: FE:7C:79:52:BE:85:A7:B7:11:E4:28:B1:8D:8C:84:18:FC:C0:D2:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07F5597A092F11F0955B745D762E951A.roa
Signing time: Tue 25 Mar 2025 04:10:05 +0000
ROA not before: Tue 25 Mar 2025 04:10:01 +0000
ROA not after: Mon 14 Apr 2025 04:10:01 +0000
asID: 133180
IP address blocks: 154.215.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95713 (0x175e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 04:10:01 2025 GMT
Not After : Apr 14 04:10:01 2025 GMT
Subject: CN=67e22c9d-07a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:94:77:b9:89:c4:28:96:0e:39:96:50:96:c3:
c6:f0:6f:a3:46:49:32:d6:7d:1f:35:0a:40:8c:be:
96:e0:64:1e:eb:1d:c9:ab:d9:c8:e4:68:f6:aa:24:
af:c7:a1:71:9a:cf:41:18:e6:cd:f0:be:0b:da:15:
50:d8:4c:d6:07:38:99:5c:02:0f:c0:20:ec:da:ce:
86:c5:28:c6:89:7d:e1:ba:04:88:b3:3a:b9:3b:cb:
07:84:a7:8b:4e:4f:0c:9c:4a:3d:fe:d4:54:b6:41:
65:50:f0:24:cf:92:bf:4c:04:81:b9:f9:ea:8a:16:
97:43:1e:4d:d9:13:13:b4:b5:e5:91:44:f7:bc:b2:
0e:f3:56:66:3e:f0:fb:99:12:6c:10:09:14:f4:51:
4a:05:97:85:35:da:7a:2d:82:8a:b6:19:c0:31:b4:
05:e3:27:01:cf:69:12:b4:13:06:8e:03:cf:58:be:
4c:a2:fc:be:b6:84:51:09:3e:b7:f1:d8:2b:e0:3d:
33:9e:c8:43:14:29:f6:b8:42:95:27:c8:dc:32:1f:
34:38:b2:90:d8:ff:06:4a:52:8e:b5:aa:c1:b9:c4:
26:f7:fb:5c:eb:5c:3c:1e:6a:2b:67:63:96:8d:68:
65:c4:9b:1c:8a:c4:c2:18:6a:12:04:e0:3a:e0:6a:
1d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7C:79:52:BE:85:A7:B7:11:E4:28:B1:8D:8C:84:18:FC:C0:D2:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07F5597A092F11F0955B745D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.64.0/18
Signature Algorithm: sha256WithRSAEncryption
12:22:b3:6f:c1:90:d1:28:2f:59:39:a3:79:6c:a6:f7:96:6a:
cc:d9:29:32:02:9d:d3:80:82:ce:9c:ea:26:fd:f9:86:2f:b6:
10:10:8a:4f:3e:e6:10:59:72:03:4d:aa:bd:33:93:33:2f:0e:
40:bd:f2:77:2e:55:11:f3:4e:63:e5:d6:14:e9:7d:e5:8e:c8:
81:4c:12:9e:1d:0f:3b:ad:b7:90:e4:bc:9e:cd:09:09:3c:df:
fc:02:52:a4:e2:eb:7c:eb:6a:91:bd:90:6e:ff:33:0f:d3:be:
33:59:64:fb:fb:29:d4:5b:c8:4d:71:bb:86:ac:44:42:21:98:
3b:0f:ac:16:c4:f3:84:c9:29:15:9c:cd:fd:d7:fb:dd:fe:77:
9b:2a:1f:9f:d2:85:aa:ca:66:c7:b5:5f:6f:ab:84:7b:2f:f1:
d9:88:71:15:81:ff:4a:37:f8:2a:9d:e8:16:d8:90:11:97:d1:
54:f1:fd:96:62:75:f8:38:59:fd:c2:cc:c1:ed:a3:e4:18:5e:
46:2c:7a:47:46:fe:73:43:d1:bb:0f:03:65:44:c2:fd:27:b5:
7e:d9:48:0d:67:f8:0f:97:e9:1c:d5:1f:4f:fe:65:a6:8b:a1:
a3:8d:a1:61:22:ce:a0:83:b0:fd:7b:bb:fe:ba:55:e4:62:b6:
cc:85:a4:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXXhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzI1MDQxMDAxWhcNMjUwNDE0MDQxMDAxWjAYMRYw
FAYDVQQDEw02N2UyMmM5ZC0wN2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA25R3uYnEKJYOOZZQlsPG8G+jRkky1n0fNQpAjL6W4GQe6x3Jq9nI5Gj2
qiSvx6Fxms9BGObN8L4L2hVQ2EzWBziZXAIPwCDs2s6GxSjGiX3hugSIszq5O8sH
hKeLTk8MnEo9/tRUtkFlUPAkz5K/TASBufnqihaXQx5N2RMTtLXlkUT3vLIO81Zm
PvD7mRJsEAkU9FFKBZeFNdp6LYKKthnAMbQF4ycBz2kStBMGjgPPWL5Movy+toRR
CT638dgr4D0znshDFCn2uEKVJ8jcMh80OLKQ2P8GSlKOtarBucQm9/tc61w8Hmor
Z2OWjWhlxJscisTCGGoSBOA64GodGwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP58
eVK+hae3EeQosY2MhBj8wNKbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wN0Y1NTk3QTA5MkYxMUYwOTU1Qjc0NUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmtdAMA0GCSqGSIb3DQEB
CwUAA4IBAQASIrNvwZDRKC9ZOaN5bKb3lmrM2SkyAp3TgILOnOom/fmGL7YQEIpP
PuYQWXIDTaq9M5MzLw5AvfJ3LlUR805j5dYU6X3ljsiBTBKeHQ87rbeQ5LyezQkJ
PN/8AlKk4ut862qRvZBu/zMP074zWWT7+ynUW8hNcbuGrERCIZg7D6wWxPOEySkV
nM391/vd/nebKh+f0oWqymbHtV9vq4R7L/HZiHEVgf9KN/gqnegW2JARl9FU8f2W
YnX4OFn9wszB7aPkGF5GLHpHRv5zQ9G7DwNlRML9J7V+2UgNZ/gPl+kc1R9P/mWm
i6GjjaFhIs6gg7D9e7v+ulXkYrbMhaQ5
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:45 2025 by rpki-client