Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/946C125EF62E11EF806D838D762E951A.roa
File: 946C125EF62E11EF806D838D762E951A.roa (raw, json)
Hash identifier: SaTcfZlEzxP0DP170S62ZKJMGuNxFP8s8PyxL6BjebY=
Subject key identifier: 56:A9:6E:F3:85:0C:82:6C:83:DB:EA:02:7E:54:2F:F7:71:24:17:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CE7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/946C125EF62E11EF806D838D762E951A.roa
Signing time: Fri 28 Feb 2025 23:48:59 +0000
ROA not before: Fri 28 Feb 2025 23:48:55 +0000
ROA not after: Sat 19 Apr 2025 23:48:55 +0000
asID: 138915
IP address blocks: 154.93.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93415 (0x16ce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 23:48:55 2025 GMT
Not After : Apr 19 23:48:55 2025 GMT
Subject: CN=67c24b6b-3622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0b:71:cf:1a:d5:d9:9b:74:e1:59:70:f7:a4:
82:23:14:de:1d:ff:8d:3f:90:3f:f4:db:c6:78:3d:
1b:e7:8b:8f:d7:40:7e:79:83:19:fa:22:fd:6c:1d:
d2:4e:be:b6:72:6a:35:f0:5f:8b:7c:39:0d:4f:43:
fe:78:81:03:fe:e8:47:ea:c8:81:0e:dc:ef:2f:c7:
e9:fa:01:60:95:de:2f:40:b5:7a:e4:c5:89:30:2a:
a6:e2:18:be:45:3d:53:f7:59:9e:56:21:eb:31:0d:
a8:04:76:6f:06:e2:16:52:78:dc:5b:51:05:61:1f:
44:67:13:72:cd:1c:fb:e8:cc:bf:90:94:cd:e1:c9:
c2:2a:76:e2:45:e4:11:85:61:ae:a4:b0:e8:a7:3e:
bb:a3:f2:d6:fc:7c:6a:04:08:7b:f4:e4:91:a2:51:
2a:9e:11:ac:09:fb:be:9e:70:33:9b:22:ad:2a:f9:
d8:3a:79:ad:e1:93:44:af:1e:21:9f:f2:c2:9d:2b:
a3:52:58:89:42:b0:40:85:60:10:12:fe:b4:e5:16:
da:01:84:03:86:f9:f3:ed:59:f6:f5:aa:a3:86:12:
a7:34:14:41:d7:c6:46:f9:d0:6e:ea:36:be:a3:b0:
12:14:52:88:b0:b3:e1:7f:50:54:1a:0a:07:ef:5b:
25:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A9:6E:F3:85:0C:82:6C:83:DB:EA:02:7E:54:2F:F7:71:24:17:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/946C125EF62E11EF806D838D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.52.0/23
Signature Algorithm: sha256WithRSAEncryption
18:f3:32:56:aa:eb:36:fc:82:90:cd:e2:0a:f4:46:0e:3f:21:
37:db:fe:cb:73:01:f9:58:5c:c4:9e:d8:c9:8a:e6:9c:53:d7:
c1:96:0f:6c:41:a3:a1:78:71:96:7c:07:23:8a:96:67:3c:84:
49:90:95:b1:53:80:2d:8d:93:92:b5:03:dd:49:74:e8:53:f9:
c8:93:7b:f5:ea:a9:42:79:96:bf:53:93:a0:09:96:a2:ca:38:
17:3d:25:ea:3a:6d:42:96:de:5d:6f:98:e0:d3:ad:71:4f:bf:
b5:a9:94:de:93:d7:11:f1:6a:a2:e0:fa:bb:b9:c6:78:48:ce:
cd:ac:0f:09:10:91:67:4e:e0:18:01:7e:43:86:9c:54:1f:c1:
29:7c:d5:44:f7:66:7b:b5:23:b5:79:02:48:97:27:b4:d5:de:
51:b8:99:a5:d3:d7:ae:ae:ed:86:d2:75:51:fc:6d:53:97:43:
25:39:7d:7f:4a:36:c1:75:aa:3b:af:da:33:a6:2b:9d:c4:1c:
42:a4:ac:91:25:70:7c:d2:fb:8e:71:0f:f0:36:7a:6b:fd:fb:
f8:f6:4f:86:eb:50:5e:dc:a4:4d:06:99:ee:61:b1:af:e3:4a:
f2:75:ce:f3:c0:b1:c6:79:7d:8e:ef:42:6d:29:ca:42:6f:b8:
09:39:66:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWznMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MjM0ODU1WhcNMjUwNDE5MjM0ODU1WjAYMRYw
FAYDVQQDEw02N2MyNGI2Yi0zNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmAtxzxrV2Zt04Vlw96SCIxTeHf+NP5A/9NvGeD0b54uP10B+eYMZ+iL9
bB3STr62cmo18F+LfDkNT0P+eIED/uhH6siBDtzvL8fp+gFgld4vQLV65MWJMCqm
4hi+RT1T91meViHrMQ2oBHZvBuIWUnjcW1EFYR9EZxNyzRz76My/kJTN4cnCKnbi
ReQRhWGupLDopz67o/LW/HxqBAh79OSRolEqnhGsCfu+nnAzmyKtKvnYOnmt4ZNE
rx4hn/LCnSujUliJQrBAhWAQEv605RbaAYQDhvnz7Vn29aqjhhKnNBRB18ZG+dBu
6ja+o7ASFFKIsLPhf1BUGgoH71slgwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFap
bvOFDIJsg9vqAn5UL/dxJBfxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NDZDMTI1RUY2MkUxMUVGODA2RDgzOEQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBml00MA0GCSqGSIb3DQEB
CwUAA4IBAQAY8zJWqus2/IKQzeIK9EYOPyE32/7LcwH5WFzEntjJiuacU9fBlg9s
QaOheHGWfAcjipZnPIRJkJWxU4AtjZOStQPdSXToU/nIk3v16qlCeZa/U5OgCZai
yjgXPSXqOm1Clt5db5jg061xT7+1qZTek9cR8Wqi4Pq7ucZ4SM7NrA8JEJFnTuAY
AX5DhpxUH8EpfNVE92Z7tSO1eQJIlye01d5RuJml09euru2G0nVR/G1Tl0MlOX1/
SjbBdao7r9ozpiudxBxCpKyRJXB80vuOcQ/wNnpr/fv49k+G61Be3KRNBpnuYbGv
40rydc7zwLHGeX2O70JtKcpCb7gJOWZp
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:42 2025 by rpki-client