Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DB5E8BEF35511EFAA66617F762E951A.roa
File: 6DB5E8BEF35511EFAA66617F762E951A.roa (raw, json)
Hash identifier: eHNyFO6rL0hoTpfGpB/4MpVWU9pTMg7oMoGFWl+KY+Y=
Subject key identifier: 48:24:F0:84:F1:FF:E7:C6:32:D2:6D:06:B1:06:36:62:B2:83:B5:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015DC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DB5E8BEF35511EFAA66617F762E951A.roa
Signing time: Tue 25 Feb 2025 08:49:31 +0000
ROA not before: Tue 25 Feb 2025 08:49:27 +0000
ROA not after: Mon 07 Apr 2025 08:49:27 +0000
asID: 138915
IP address blocks: 154.223.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89538 (0x15dc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 08:49:27 2025 GMT
Not After : Apr 7 08:49:27 2025 GMT
Subject: CN=67bd841b-fb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:db:14:0e:e0:05:20:b6:5c:6d:99:f3:5f:1a:
c9:64:9c:2c:77:c9:16:ba:7d:1d:71:d2:9f:3c:e5:
75:fd:6a:e4:ab:16:1a:21:63:19:5d:ef:61:29:07:
92:09:e9:9d:a5:20:19:c4:00:7e:7f:1a:90:ea:74:
9e:8a:70:bf:19:fd:20:7b:f4:25:f6:ee:09:aa:41:
6f:f2:75:6b:bb:31:7b:97:dd:4c:11:1d:d2:8f:fa:
9d:1f:be:02:62:35:2d:03:fe:82:c8:2f:69:0b:e7:
bc:f3:52:b3:0c:99:29:c2:80:4e:c2:ed:5f:ed:be:
eb:69:55:3b:b8:3f:27:de:e8:7d:d6:ab:b1:d3:03:
1a:30:86:43:59:f8:3a:c9:b6:59:f8:68:2c:0e:8c:
d4:49:4f:3b:01:b3:41:33:6d:ce:75:ac:6b:a3:65:
c6:3c:8f:52:14:cd:7c:a9:e7:89:60:e9:c0:b6:ae:
0e:70:f5:64:8e:26:8c:4c:9a:fc:75:8b:e4:fe:02:
67:c0:c7:f4:8d:22:f5:ff:7d:6b:f8:e2:a4:9e:0a:
73:5b:0b:fe:cd:89:79:b7:76:8c:49:5f:56:6b:43:
bd:58:a7:3f:54:70:84:ea:4f:63:e0:27:d3:53:60:
20:73:40:88:5e:89:fb:10:8e:0b:89:76:b6:e8:28:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:24:F0:84:F1:FF:E7:C6:32:D2:6D:06:B1:06:36:62:B2:83:B5:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DB5E8BEF35511EFAA66617F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.78.0/23
Signature Algorithm: sha256WithRSAEncryption
29:e9:a9:b9:26:f7:dc:db:53:e6:0a:26:bf:34:59:cf:b3:5b:
c7:1b:55:85:d3:05:0b:cd:c6:86:c1:75:64:fd:75:0b:2c:74:
0b:be:cb:89:b7:c0:cf:60:e5:e9:cd:6f:c6:ce:00:b0:f4:76:
5a:4f:16:63:eb:31:90:52:36:2f:b1:e8:64:a3:49:b1:94:16:
45:27:f2:89:0a:72:9c:62:07:e4:68:a5:e6:bc:c9:4c:ae:86:
d5:16:82:31:e5:c3:fe:d2:6c:c7:65:bb:cd:38:f0:13:4d:10:
29:95:0b:e0:b5:82:7d:b9:04:a7:54:a6:3c:9f:36:96:d5:80:
de:c6:48:5d:dd:96:8e:d2:0e:4e:77:ba:dd:c4:3d:6b:2d:fe:
e7:ba:72:8d:cd:1f:2e:5d:d7:e7:c9:ae:7b:4f:ab:3c:e7:e9:
ab:22:e5:4e:07:45:b2:e9:34:39:96:08:12:04:62:95:af:f6:
68:c3:de:3b:fe:35:02:5f:83:d1:88:63:75:d2:1a:e8:cc:c6:
0f:0f:ed:da:d8:34:f5:04:7a:52:ee:3f:7b:ee:f1:83:99:87:
d0:26:ee:8a:f3:dd:d1:09:25:d6:64:02:35:bb:80:34:d2:46:
28:41:b8:9f:4b:fb:e2:39:ce:17:8e:e3:7a:97:da:d4:b6:68:
6d:40:bf:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAV3CMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI1MDg0OTI3WhcNMjUwNDA3MDg0OTI3WjAYMRYw
FAYDVQQDEw02N2JkODQxYi1mYjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA49sUDuAFILZcbZnzXxrJZJwsd8kWun0dcdKfPOV1/WrkqxYaIWMZXe9h
KQeSCemdpSAZxAB+fxqQ6nSeinC/Gf0ge/Ql9u4JqkFv8nVruzF7l91MER3Sj/qd
H74CYjUtA/6CyC9pC+e881KzDJkpwoBOwu1f7b7raVU7uD8n3uh91qux0wMaMIZD
Wfg6ybZZ+GgsDozUSU87AbNBM23Odaxro2XGPI9SFM18qeeJYOnAtq4OcPVkjiaM
TJr8dYvk/gJnwMf0jSL1/31r+OKkngpzWwv+zYl5t3aMSV9Wa0O9WKc/VHCE6k9j
4CfTU2Agc0CIXon7EI4LiXa26CgEOwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEgk
8ITx/+fGMtJtBrEGNmKyg7XPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82REI1RThCRUYzNTUxMUVGQUE2NjYxN0Y3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt9OMA0GCSqGSIb3DQEB
CwUAA4IBAQAp6am5Jvfc21PmCia/NFnPs1vHG1WF0wULzcaGwXVk/XULLHQLvsuJ
t8DPYOXpzW/GzgCw9HZaTxZj6zGQUjYvsehko0mxlBZFJ/KJCnKcYgfkaKXmvMlM
robVFoIx5cP+0mzHZbvNOPATTRAplQvgtYJ9uQSnVKY8nzaW1YDexkhd3ZaO0g5O
d7rdxD1rLf7nunKNzR8uXdfnya57T6s85+mrIuVOB0Wy6TQ5lggSBGKVr/Zow947
/jUCX4PRiGN10hrozMYPD+3a2DT1BHpS7j977vGDmYfQJu6K893RCSXWZAI1u4A0
0kYoQbifS/viOc4XjuN6l9rUtmhtQL8t
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:30:00 2025 by rpki-client