Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/621518F6F62811EF92F32864762E951A.roa
File: 621518F6F62811EF92F32864762E951A.roa (raw, json)
Hash identifier: 2f2CF2+9Q2dASdEKWCoTJdXpuXXP2XKiSNQrQaPmrI4=
Subject key identifier: 00:C8:13:CE:17:C8:29:D0:61:6E:42:77:29:88:C7:19:8B:FB:80:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CAF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/621518F6F62811EF92F32864762E951A.roa
Signing time: Fri 28 Feb 2025 23:04:38 +0000
ROA not before: Fri 28 Feb 2025 23:04:34 +0000
ROA not after: Sat 19 Apr 2025 23:04:34 +0000
asID: 138915
IP address blocks: 154.90.50.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93359 (0x16caf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 23:04:34 2025 GMT
Not After : Apr 19 23:04:34 2025 GMT
Subject: CN=67c24106-ef2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:41:49:df:bc:f0:a4:16:b4:24:53:ef:d3:
53:56:5f:a2:0b:49:35:e4:bd:ac:3a:ba:91:4c:52:
75:fa:a4:0f:02:d1:7f:b3:ce:ba:0c:3d:85:3d:46:
0d:9f:91:48:3a:3a:bb:b6:4c:b2:bf:04:1f:bc:f9:
9e:6a:ab:d6:89:70:3e:dc:b4:44:63:94:e3:44:68:
60:c1:dd:db:e4:40:6e:4a:7f:8d:a1:45:e7:86:7a:
ef:91:bf:c9:f2:4e:d0:b1:c6:e8:0f:34:f8:95:06:
10:78:ef:a7:58:dc:5a:31:17:92:57:55:b8:8b:52:
14:47:b4:e8:dc:40:2c:56:d4:4a:2e:97:f5:39:6f:
8b:04:1c:30:07:90:93:6b:01:3d:11:56:59:1a:78:
fc:72:76:19:38:c5:70:68:0b:fa:b8:c6:ae:ec:ab:
3d:55:3f:8c:17:79:0d:37:b3:1e:ae:5b:10:0c:cd:
29:f1:a3:16:c3:52:33:9f:ab:ed:a0:bd:bf:b4:80:
b0:15:01:9c:a8:f3:45:0f:28:aa:55:8b:65:63:18:
55:90:15:99:5e:5e:62:0e:c5:69:b7:e7:e0:b6:e0:
4e:0c:1a:db:12:55:c9:a7:e8:bc:17:07:83:ad:4f:
f6:95:56:5b:48:2b:b0:27:3b:24:23:7c:68:f8:34:
39:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C8:13:CE:17:C8:29:D0:61:6E:42:77:29:88:C7:19:8B:FB:80:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/621518F6F62811EF92F32864762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.50.0/23
Signature Algorithm: sha256WithRSAEncryption
38:84:95:3b:a3:a1:b6:d6:b7:23:d7:7a:7f:43:34:b9:0b:f9:
c9:f0:a1:b9:10:c1:87:3c:99:c7:e5:f0:3f:2e:df:ba:57:cf:
f4:2e:84:93:5e:22:69:a5:d3:ac:89:4c:ee:2d:40:d3:75:e4:
8d:7e:53:48:2f:ab:31:af:95:fe:26:c4:cb:1c:f5:96:f2:34:
62:e9:f8:a3:5e:65:eb:16:a6:08:50:f9:1b:05:03:61:88:85:
fc:e0:b9:7e:53:c4:50:25:94:38:f8:7c:3d:9c:78:a0:af:a8:
95:82:36:55:c5:49:ab:80:d3:5d:9e:11:54:0e:4f:fb:c5:66:
ae:69:af:ee:e2:0b:90:42:78:72:89:2f:be:34:52:a8:39:99:
df:dc:cf:61:73:20:ff:2e:23:88:8d:17:5d:76:aa:20:9d:e3:
4d:99:88:56:13:16:57:db:d0:b0:58:ac:b1:c1:a1:8c:8f:52:
c0:9e:0b:51:bc:66:03:7b:58:80:4e:77:10:9d:e7:56:12:4b:
6a:e4:65:8e:73:28:10:2b:5e:17:72:a1:a9:00:1c:c1:bf:2d:
a5:31:65:3c:d0:6d:7d:b1:ab:db:58:a7:2f:55:9c:a7:c6:c4:
0d:7e:22:10:04:c5:99:f2:ef:56:b9:8c:3e:6c:64:1e:5c:0e:
22:2d:d7:38
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWyvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MjMwNDM0WhcNMjUwNDE5MjMwNDM0WjAYMRYw
FAYDVQQDEw02N2MyNDEwNi1lZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxXdBSd+88KQWtCRT79NTVl+iC0k15L2sOrqRTFJ1+qQPAtF/s866DD2F
PUYNn5FIOjq7tkyyvwQfvPmeaqvWiXA+3LREY5TjRGhgwd3b5EBuSn+NoUXnhnrv
kb/J8k7QscboDzT4lQYQeO+nWNxaMReSV1W4i1IUR7To3EAsVtRKLpf1OW+LBBww
B5CTawE9EVZZGnj8cnYZOMVwaAv6uMau7Ks9VT+MF3kNN7MerlsQDM0p8aMWw1Iz
n6vtoL2/tICwFQGcqPNFDyiqVYtlYxhVkBWZXl5iDsVpt+fgtuBODBrbElXJp+i8
FweDrU/2lVZbSCuwJzskI3xo+DQ5rQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFADI
E84XyCnQYW5CdymIxxmL+4DfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MjE1MThGNkY2MjgxMUVGOTJGMzI4NjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmloyMA0GCSqGSIb3DQEB
CwUAA4IBAQA4hJU7o6G21rcj13p/QzS5C/nJ8KG5EMGHPJnH5fA/Lt+6V8/0LoST
XiJppdOsiUzuLUDTdeSNflNIL6sxr5X+JsTLHPWW8jRi6fijXmXrFqYIUPkbBQNh
iIX84Ll+U8RQJZQ4+Hw9nHigr6iVgjZVxUmrgNNdnhFUDk/7xWauaa/u4guQQnhy
iS++NFKoOZnf3M9hcyD/LiOIjRdddqogneNNmYhWExZX29CwWKyxwaGMj1LAngtR
vGYDe1iATncQnedWEktq5GWOcygQK14XcqGpABzBvy2lMWU80G19savbWKcvVZyn
xsQNfiIQBMWZ8u9WuYw+bGQeXA4iLdc4
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:44 2025 by rpki-client