Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA3B5D70C8A711EF89F7EF83762E951A.roa
File: EA3B5D70C8A711EF89F7EF83762E951A.roa (raw, json)
Hash identifier: 08uWyIV3Mclle0YDqrkLwvQYEchexAERPoAVaQRelFU=
Subject key identifier: A5:AB:33:1A:55:9A:D0:AA:DE:BE:E2:33:4E:BE:9D:36:6B:30:91:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01315A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA3B5D70C8A711EF89F7EF83762E951A.roa
Signing time: Thu 02 Jan 2025 01:21:39 +0000
ROA not before: Thu 02 Jan 2025 01:21:35 +0000
ROA not after: Sun 12 Dec 2027 01:21:35 +0000
asID: 17561
IP address blocks: 154.220.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78170 (0x1315a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 01:21:35 2025 GMT
Not After : Dec 12 01:21:35 2027 GMT
Subject: CN=6775ea23-fc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:da:90:f9:98:4d:88:ca:d4:c5:95:8e:6a:10:
e7:fa:7d:5b:8c:83:8f:8c:35:e8:fe:7a:44:81:f7:
5b:1b:11:40:64:5f:78:f9:c9:a3:52:c0:48:37:25:
fa:6e:7e:0a:92:5e:73:f6:57:fe:5e:e2:a8:85:06:
f6:94:fa:13:7a:b5:de:29:03:a2:e3:97:1d:10:52:
90:96:dd:ab:73:ce:ea:74:9e:76:3a:59:57:64:44:
09:a0:f0:fd:b2:98:c5:05:68:3f:2b:2e:cd:49:cf:
bd:44:f4:86:03:7b:1e:c1:29:35:3c:c8:7d:f5:32:
ce:ab:55:61:0e:ae:90:1b:10:7a:41:ec:67:c1:90:
43:28:a6:a0:4c:b4:57:2e:84:52:63:b5:ec:d7:3f:
5e:01:17:67:e1:1e:35:94:8d:b9:84:10:3c:04:ae:
85:3f:49:59:57:2c:ee:a3:b9:c0:e5:65:bf:0a:ce:
1f:ac:81:4e:8b:fa:19:30:11:5e:43:34:40:58:30:
34:cc:96:66:c9:db:51:4a:4d:72:0e:b4:3d:e4:90:
18:82:ae:47:4a:63:65:bd:04:ba:37:9c:98:35:c5:
f9:02:37:a1:b5:0f:2e:ea:f1:d0:73:c3:1a:6f:87:
82:f3:ad:22:41:01:c6:a4:b1:e0:9e:d6:d6:1f:f3:
c1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AB:33:1A:55:9A:D0:AA:DE:BE:E2:33:4E:BE:9D:36:6B:30:91:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA3B5D70C8A711EF89F7EF83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.136.0/24
Signature Algorithm: sha256WithRSAEncryption
10:c5:3f:42:65:a1:00:ea:8b:6a:ed:f5:3d:76:f4:8b:89:af:
5c:91:59:49:fd:12:aa:d2:af:05:73:fa:f7:e5:53:69:3a:94:
a8:9d:0b:6d:fd:c4:3d:ca:b1:2a:c3:db:b6:56:b7:de:52:83:
22:b1:d1:a6:1d:6c:c5:ea:fb:89:ae:e4:30:f9:25:2c:65:75:
4c:47:53:3c:e2:b6:45:e4:29:90:e8:12:87:77:87:61:b8:aa:
ee:89:87:7c:19:6f:cc:1a:58:b5:3a:49:7b:85:77:ff:f7:2a:
52:a6:0e:da:d5:73:cd:33:0a:ee:7b:13:62:34:98:26:f9:ce:
c6:87:26:e2:66:07:48:79:4e:c3:3a:ae:ac:5f:50:2c:f9:28:
09:58:be:06:35:ae:d7:5c:56:35:d9:70:cd:b8:66:67:7b:b4:
f8:fa:f2:d7:a4:03:68:c1:6e:58:2f:70:37:ae:31:b9:3e:5c:
fa:44:9e:7a:ad:10:30:15:33:c1:a8:47:a7:09:b8:05:4c:a7:
60:6e:86:8a:4e:5a:69:1d:b7:a2:9f:cc:11:72:d6:d9:7a:0f:
0f:82:83:dc:d0:df:6a:e6:fd:01:a8:c0:25:fd:db:72:f7:22:
d9:d7:14:de:70:4b:e8:a1:0f:77:7e:22:e6:34:75:86:a5:f5:
f2:da:28:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATFaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMDEyMTM1WhcNMjcxMjEyMDEyMTM1WjAYMRYw
FAYDVQQDEw02Nzc1ZWEyMy1mYzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5tqQ+ZhNiMrUxZWOahDn+n1bjIOPjDXo/npEgfdbGxFAZF94+cmjUsBI
NyX6bn4Kkl5z9lf+XuKohQb2lPoTerXeKQOi45cdEFKQlt2rc87qdJ52OllXZEQJ
oPD9spjFBWg/Ky7NSc+9RPSGA3sewSk1PMh99TLOq1VhDq6QGxB6QexnwZBDKKag
TLRXLoRSY7Xs1z9eARdn4R41lI25hBA8BK6FP0lZVyzuo7nA5WW/Cs4frIFOi/oZ
MBFeQzRAWDA0zJZmydtRSk1yDrQ95JAYgq5HSmNlvQS6N5yYNcX5AjehtQ8u6vHQ
c8Mab4eC860iQQHGpLHgntbWH/PBkwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKWr
MxpVmtCq3r7iM06+nTZrMJFuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQTNCNUQ3MEM4QTcxMUVGODlGN0VGODM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtyIMA0GCSqGSIb3DQEB
CwUAA4IBAQAQxT9CZaEA6otq7fU9dvSLia9ckVlJ/RKq0q8Fc/r35VNpOpSonQtt
/cQ9yrEqw9u2VrfeUoMisdGmHWzF6vuJruQw+SUsZXVMR1M84rZF5CmQ6BKHd4dh
uKruiYd8GW/MGli1Okl7hXf/9ypSpg7a1XPNMwruexNiNJgm+c7GhybiZgdIeU7D
Oq6sX1As+SgJWL4GNa7XXFY12XDNuGZne7T4+vLXpANowW5YL3A3rjG5Plz6RJ56
rRAwFTPBqEenCbgFTKdgboaKTlppHbein8wRctbZeg8PgoPc0N9q5v0BqMAl/dty
9yLZ1xTecEvooQ93fiLmNHWGpfXy2igF
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:52:59 2025 by rpki-client