Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/759561CAF2DF11EFBA6BCD56762E951A.roa
File: 759561CAF2DF11EFBA6BCD56762E951A.roa (raw, json)
Hash identifier: ettplAIKMR8+QuBANEM14GZZxFasRfF6LXammSQi+ZM=
Subject key identifier: F5:DE:03:72:7C:2A:FB:37:BB:C0:E7:77:68:42:AE:33:81:99:CD:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/759561CAF2DF11EFBA6BCD56762E951A.roa
Signing time: Mon 24 Feb 2025 18:45:04 +0000
ROA not before: Mon 24 Feb 2025 18:45:00 +0000
ROA not after: Mon 07 Apr 2025 18:45:00 +0000
asID: 138915
IP address blocks: 154.223.68.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89264 (0x15cb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 18:45:00 2025 GMT
Not After : Apr 7 18:45:00 2025 GMT
Subject: CN=67bcbe2f-eb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:89:f5:67:98:60:70:3f:55:a9:11:3c:d1:
d1:31:7c:69:90:ab:6e:de:2a:f3:82:c5:3c:27:e2:
12:3a:a8:fc:8f:fa:31:d4:50:6c:26:ea:96:c5:0d:
eb:6e:e1:bc:a0:fa:1a:89:2c:48:9a:82:6e:87:92:
93:0f:28:e6:27:a0:0c:75:df:72:93:ed:4a:fd:44:
30:f6:d6:05:1a:66:5b:1c:1e:d4:08:d5:3c:1f:4f:
df:25:6e:83:b7:14:a0:d5:25:86:61:2a:9f:27:a4:
d9:0a:40:33:07:84:55:32:d8:b1:20:0d:65:db:94:
7f:c4:83:89:4b:9a:9b:51:4e:d4:ec:22:3f:31:28:
5b:40:85:23:24:ac:29:97:5a:74:32:33:7c:63:b4:
db:af:25:3a:af:90:e0:95:cd:68:85:5d:e0:9a:e1:
7f:05:92:7b:1a:eb:e3:a7:58:5f:8f:20:bd:7d:91:
87:91:35:3e:d0:1a:74:e3:0d:ee:c2:99:a3:cb:dc:
67:f7:30:9b:4b:c4:86:07:bc:62:52:e3:3b:89:20:
49:81:5e:3e:3b:8e:b4:70:1d:9a:2e:f6:69:3f:b6:
28:dc:fb:c0:71:11:08:b9:e0:6a:df:8a:3e:73:89:
47:bb:fd:4f:0b:b3:cf:55:94:c3:aa:31:c0:cd:b0:
aa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DE:03:72:7C:2A:FB:37:BB:C0:E7:77:68:42:AE:33:81:99:CD:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/759561CAF2DF11EFBA6BCD56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.68.0/23
Signature Algorithm: sha256WithRSAEncryption
11:60:d9:d5:3d:b0:a7:52:ea:35:1a:f7:89:db:56:ec:06:fb:
9c:6e:ea:bb:f1:f4:75:4a:bc:1b:b9:ac:54:b1:e9:ee:c4:79:
ce:d7:d0:32:e3:a2:e7:fa:47:66:03:f1:40:d7:a8:1b:31:b2:
72:f0:bf:ae:40:d9:cc:d5:06:90:0f:55:24:2d:c2:1b:fe:93:
09:df:a9:92:5d:af:9a:00:a5:50:9c:51:e3:40:d1:3a:79:ea:
5e:a4:14:51:cf:3a:32:70:48:31:a2:29:f9:63:05:ad:cc:d9:
cd:0e:5e:ab:9c:21:77:8d:c2:f1:79:15:aa:b4:28:99:7a:f9:
71:9a:ae:fd:90:b9:5a:ba:f1:69:cf:43:74:af:b0:05:78:f3:
fb:50:68:2f:32:42:7f:72:ef:3d:63:ee:b0:5f:43:90:0d:60:
43:2e:44:ee:2f:84:03:bb:eb:e9:eb:09:6a:c1:0c:35:36:eb:
38:14:97:c8:8e:9f:eb:0d:35:07:c5:3e:c6:fb:d4:33:37:e3:
0d:c2:5c:d7:9d:9f:28:89:a7:58:38:8a:25:9b:6d:33:cb:b0:
57:9c:5a:70:3d:3a:54:b9:80:30:e6:65:03:74:72:fb:e6:3c:
48:e2:c5:ce:d2:fd:90:4b:a7:38:1f:3f:00:c3:b3:e9:a7:23:
0d:79:14:da
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVywMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI0MTg0NTAwWhcNMjUwNDA3MTg0NTAwWjAYMRYw
FAYDVQQDEw02N2JjYmUyZi1lYjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwOmJ9WeYYHA/VakRPNHRMXxpkKtu3irzgsU8J+ISOqj8j/ox1FBsJuqW
xQ3rbuG8oPoaiSxImoJuh5KTDyjmJ6AMdd9yk+1K/UQw9tYFGmZbHB7UCNU8H0/f
JW6DtxSg1SWGYSqfJ6TZCkAzB4RVMtixIA1l25R/xIOJS5qbUU7U7CI/MShbQIUj
JKwpl1p0MjN8Y7TbryU6r5Dglc1ohV3gmuF/BZJ7Guvjp1hfjyC9fZGHkTU+0Bp0
4w3uwpmjy9xn9zCbS8SGB7xiUuM7iSBJgV4+O460cB2aLvZpP7Yo3PvAcREIueBq
34o+c4lHu/1PC7PPVZTDqjHAzbCq7wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPXe
A3J8Kvs3u8Dnd2hCrjOBmc1GMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NTk1NjFDQUYyREYxMUVGQkE2QkNENTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt9EMA0GCSqGSIb3DQEB
CwUAA4IBAQARYNnVPbCnUuo1GveJ21bsBvucbuq78fR1SrwbuaxUsenuxHnO19Ay
46Ln+kdmA/FA16gbMbJy8L+uQNnM1QaQD1UkLcIb/pMJ36mSXa+aAKVQnFHjQNE6
eepepBRRzzoycEgxoin5YwWtzNnNDl6rnCF3jcLxeRWqtCiZevlxmq79kLlauvFp
z0N0r7AFePP7UGgvMkJ/cu89Y+6wX0OQDWBDLkTuL4QDu+vp6wlqwQw1Nus4FJfI
jp/rDTUHxT7G+9QzN+MNwlzXnZ8oiadYOIolm20zy7BXnFpwPTpUuYAw5mUDdHL7
5jxI4sXO0v2QS6c4Hz8Aw7PppyMNeRTa
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:15:01 2025 by rpki-client