Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7FF5A8CC93A11EFBBC795AE762E951A.roa
File: E7FF5A8CC93A11EFBBC795AE762E951A.roa (raw, json)
Hash identifier: 30U4OOtpGedyb8YZhmnWPL9yYbHE0s8W8z+wrEZXHgo=
Subject key identifier: D9:B3:D0:07:B1:C5:70:02:47:CC:C6:D4:E8:CA:E6:76:9E:BA:FC:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7FF5A8CC93A11EFBBC795AE762E951A.roa
Signing time: Thu 02 Jan 2025 18:53:51 +0000
ROA not before: Thu 02 Jan 2025 18:53:47 +0000
ROA not after: Mon 13 Dec 2027 18:53:47 +0000
asID: 17561
IP address blocks: 154.223.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78841 (0x133f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:53:47 2025 GMT
Not After : Dec 13 18:53:47 2027 GMT
Subject: CN=6776e0bf-fb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:33:3e:f9:47:3b:e9:01:b5:8d:00:70:4c:
8b:73:b4:b8:98:bd:c3:c9:19:41:98:4b:42:86:75:
73:01:ad:06:51:dc:d1:01:28:45:9f:45:f7:b7:0e:
38:dc:41:bb:75:98:91:57:1b:61:23:a5:c6:ca:4a:
e0:ab:8a:8c:b0:97:9c:3e:3d:b8:04:f5:c4:56:52:
b4:13:4e:db:48:2d:41:bf:92:33:ac:2b:f9:c5:3b:
a1:ec:48:30:83:28:a4:a5:30:7e:e3:b0:5a:d7:5e:
7c:ba:6c:52:b3:4f:ab:1c:90:4b:a9:1a:39:15:af:
f3:3e:22:46:aa:cd:9d:8a:55:18:ad:c5:ca:00:64:
d2:dc:39:dd:33:2b:4e:12:c7:79:23:80:5a:59:0d:
63:62:c8:bd:96:4e:e5:6a:66:69:17:b3:67:32:1e:
fb:aa:aa:2c:e8:22:8d:c5:9b:29:95:44:8a:a0:84:
67:e4:a0:66:ba:39:a9:ab:d5:d5:82:c0:7e:4a:9f:
79:de:fb:a5:37:a4:89:f7:03:3a:ba:5d:5c:b5:cb:
8c:2e:e6:88:26:fb:38:b2:b5:6e:0a:73:93:f8:2b:
8e:34:bc:74:0a:de:26:03:32:49:42:58:a6:33:96:
17:36:6e:19:77:e1:2f:a2:c8:a1:20:1f:70:06:d0:
69:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B3:D0:07:B1:C5:70:02:47:CC:C6:D4:E8:CA:E6:76:9E:BA:FC:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7FF5A8CC93A11EFBBC795AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.224.0/24
Signature Algorithm: sha256WithRSAEncryption
95:fe:c8:e0:ad:6a:d7:cb:06:f9:38:44:3b:20:47:db:15:0a:
d9:a4:2b:23:2d:6c:4c:3e:9f:d7:21:27:00:12:aa:ae:d1:40:
12:bf:99:01:00:b5:d8:f5:29:f5:90:98:1a:bf:fc:79:44:24:
51:60:f1:a5:e1:50:b3:f0:b2:b3:a2:1c:ea:23:c4:d1:33:25:
14:a8:1d:f4:c0:90:b5:14:ff:78:e4:41:e1:a4:8c:fa:5a:07:
cc:33:0f:a5:0a:29:08:95:79:be:57:9a:c3:ff:50:bc:b0:f2:
fe:fd:58:47:91:2a:1f:b0:1f:43:de:c9:da:f1:22:73:26:fe:
ff:e5:36:b1:33:66:56:3f:16:0a:07:b5:9a:66:98:10:81:46:
12:8f:cd:9b:e1:13:86:e0:0e:19:07:e2:dc:07:d5:d9:ba:6d:
37:81:23:00:a2:48:c9:64:9c:ed:9a:61:7b:03:1a:cc:cb:b9:
c2:77:4c:02:cb:39:2e:e5:43:27:89:27:82:ea:99:f4:19:a3:
ed:9d:59:2a:21:d8:39:e9:9e:5f:3d:37:4d:c7:ed:ae:ca:51:
0c:f2:fa:29:07:78:f2:1d:0d:14:52:c9:04:6e:f1:8c:f6:d4:
ff:90:ab:32:72:7e:1c:2c:d9:15:f4:3f:2f:63:ee:95:e0:c0:
75:cc:a2:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATP5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTg1MzQ3WhcNMjcxMjEzMTg1MzQ3WjAYMRYw
FAYDVQQDEw02Nzc2ZTBiZi1mYjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAunozPvlHO+kBtY0AcEyLc7S4mL3DyRlBmEtChnVzAa0GUdzRAShFn0X3
tw443EG7dZiRVxthI6XGykrgq4qMsJecPj24BPXEVlK0E07bSC1Bv5IzrCv5xTuh
7EgwgyikpTB+47Ba1158umxSs0+rHJBLqRo5Fa/zPiJGqs2dilUYrcXKAGTS3Dnd
MytOEsd5I4BaWQ1jYsi9lk7lamZpF7NnMh77qqos6CKNxZsplUSKoIRn5KBmujmp
q9XVgsB+Sp953vulN6SJ9wM6ul1ctcuMLuaIJvs4srVuCnOT+CuONLx0Ct4mAzJJ
QlimM5YXNm4Zd+EvosihIB9wBtBp2QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNmz
0AexxXACR8zG1OjK5naeuvzvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FN0ZGNUE4Q0M5M0ExMUVGQkJDNzk1QUU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt/gMA0GCSqGSIb3DQEB
CwUAA4IBAQCV/sjgrWrXywb5OEQ7IEfbFQrZpCsjLWxMPp/XIScAEqqu0UASv5kB
ALXY9Sn1kJgav/x5RCRRYPGl4VCz8LKzohzqI8TRMyUUqB30wJC1FP945EHhpIz6
WgfMMw+lCikIlXm+V5rD/1C8sPL+/VhHkSofsB9D3sna8SJzJv7/5TaxM2ZWPxYK
B7WaZpgQgUYSj82b4ROG4A4ZB+LcB9XZum03gSMAokjJZJztmmF7AxrMy7nCd0wC
yzku5UMniSeC6pn0GaPtnVkqIdg56Z5fPTdNx+2uylEM8vopB3jyHQ0UUskEbvGM
9tT/kKsycn4cLNkV9D8vY+6V4MB1zKIr
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:13:28 2025 by rpki-client