Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/603C7172E30F11EFA210024F762E951A.roa
File: 603C7172E30F11EFA210024F762E951A.roa (raw, json)
Hash identifier: zxkC0Lu1XDKM+VdS5vMwpLCyEayBHE+W22tNJlK7hIY=
Subject key identifier: 37:03:7F:7A:4C:8C:46:AF:83:1F:12:C5:9F:E8:62:46:7E:5C:17:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/603C7172E30F11EFA210024F762E951A.roa
Signing time: Tue 04 Feb 2025 15:47:45 +0000
ROA not before: Tue 04 Feb 2025 15:47:41 +0000
ROA not after: Wed 30 Apr 2025 15:47:41 +0000
asID: 18229
IP address blocks: 154.210.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86259 (0x150f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 15:47:41 2025 GMT
Not After : Apr 30 15:47:41 2025 GMT
Subject: CN=67a236a1-662e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:c8:98:b0:58:f3:6a:d6:f8:37:4f:2f:49:
83:06:55:d2:2d:a9:40:b5:85:49:59:98:ed:91:32:
b5:21:03:ba:00:db:71:f2:72:d0:34:e0:01:28:8a:
e9:6c:9a:79:86:65:a8:19:0f:e7:d9:d3:21:87:3b:
c5:9a:0b:aa:58:5f:c7:49:34:08:1a:ca:3d:3d:8f:
5c:e0:a5:5d:06:ab:f6:1e:c7:40:75:41:a5:b7:2a:
f6:45:7b:81:95:d6:fa:d7:a6:69:0f:87:ef:22:f3:
93:1a:82:b9:c5:81:6b:bf:d8:94:50:b0:64:47:d1:
a7:3f:5f:93:8d:0f:b9:00:6f:e3:1b:c9:76:74:9b:
83:8e:a7:cf:7f:7f:70:df:14:60:21:52:1e:ce:5d:
31:1e:97:d7:d3:72:5e:38:37:2b:4e:c2:d7:dc:c9:
03:1e:af:0f:45:22:51:6f:d9:e4:78:12:5a:4f:68:
bf:7f:e3:39:07:a6:d4:82:cb:00:f2:a4:d9:52:7a:
b1:5e:a9:dd:0f:94:22:2a:f6:38:7c:fa:81:79:4a:
c4:90:6c:b3:bc:ec:2b:08:c1:a5:62:5b:8f:ed:57:
fa:04:c6:28:18:3f:22:18:39:63:c2:8f:e5:f1:c2:
8c:50:dc:39:4f:e3:ee:68:e3:9f:32:9e:cc:5a:b9:
1f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:03:7F:7A:4C:8C:46:AF:83:1F:12:C5:9F:E8:62:46:7E:5C:17:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/603C7172E30F11EFA210024F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.223.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c7:d2:08:8b:5c:f0:f2:0e:5b:7b:6e:cd:db:f3:52:a3:9f:
5e:cb:fb:b0:72:52:37:0b:1d:0c:84:17:f6:6c:4a:01:63:81:
f9:2e:0f:c5:a4:9e:2c:88:c6:4a:4c:15:85:c6:01:62:9b:34:
4b:bb:b1:f3:60:ff:3d:51:48:45:86:17:49:70:4d:17:36:ce:
56:a9:5e:8c:c8:a8:33:21:0c:b4:9f:55:c1:f5:40:a5:5b:67:
6d:61:84:03:21:f3:72:58:50:d8:88:a4:52:19:72:10:41:6f:
52:32:1a:58:f3:74:61:95:c8:b5:bd:08:aa:56:76:52:28:e6:
66:0a:d1:d5:6c:ac:43:a7:1f:e2:70:cc:49:ad:e9:eb:1e:e8:
fa:cb:58:34:39:20:b4:c0:a5:f9:b8:56:a0:76:8c:b6:5a:7e:
6a:3d:a0:30:1d:35:1e:92:1a:54:bd:33:d6:cf:b6:4e:20:39:
e1:4d:68:ec:42:c6:1e:2e:29:75:64:a8:7d:98:00:ac:2a:a4:
9d:bc:56:d4:2d:a9:cf:bd:72:bd:a2:01:32:c5:b3:91:ff:42:
44:11:57:d2:f8:de:2a:b1:ab:5d:ab:a8:68:9e:2c:34:dd:30:
81:49:05:9a:0a:4f:07:1f:8d:fd:d6:1d:5c:b1:f3:34:c1:79:
b8:e4:a0:53
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVDzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjA0MTU0NzQxWhcNMjUwNDMwMTU0NzQxWjAYMRYw
FAYDVQQDEw02N2EyMzZhMS02NjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnPzImLBY82rW+DdPL0mDBlXSLalAtYVJWZjtkTK1IQO6ANtx8nLQNOAB
KIrpbJp5hmWoGQ/n2dMhhzvFmguqWF/HSTQIGso9PY9c4KVdBqv2HsdAdUGltyr2
RXuBldb616ZpD4fvIvOTGoK5xYFrv9iUULBkR9GnP1+TjQ+5AG/jG8l2dJuDjqfP
f39w3xRgIVIezl0xHpfX03JeODcrTsLX3MkDHq8PRSJRb9nkeBJaT2i/f+M5B6bU
gssA8qTZUnqxXqndD5QiKvY4fPqBeUrEkGyzvOwrCMGlYluP7Vf6BMYoGD8iGDlj
wo/l8cKMUNw5T+PuaOOfMp7MWrkffQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDcD
f3pMjEavgx8SxZ/oYkZ+XBfZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MDNDNzE3MkUzMEYxMUVGQTIxMDAyNEY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtLfMA0GCSqGSIb3DQEB
CwUAA4IBAQAyx9IIi1zw8g5be27N2/NSo59ey/uwclI3Cx0MhBf2bEoBY4H5Lg/F
pJ4siMZKTBWFxgFimzRLu7HzYP89UUhFhhdJcE0XNs5WqV6MyKgzIQy0n1XB9UCl
W2dtYYQDIfNyWFDYiKRSGXIQQW9SMhpY83Rhlci1vQiqVnZSKOZmCtHVbKxDpx/i
cMxJrenrHuj6y1g0OSC0wKX5uFagdoy2Wn5qPaAwHTUekhpUvTPWz7ZOIDnhTWjs
QsYeLil1ZKh9mACsKqSdvFbULanPvXK9ogEyxbOR/0JEEVfS+N4qsatdq6honiw0
3TCBSQWaCk8HH4391h1csfM0wXm45KBT
-----END CERTIFICATE-----
Generated at Fri Apr 11 01:50:30 2025 by rpki-client