Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/049193ECCEA711EF93423BBA762E951A.roa
File: 049193ECCEA711EF93423BBA762E951A.roa (raw, json)
Hash identifier: E4zlUFOERKXNvta3iVedGHFJkYk3T8Q+1dc14j8cHVU=
Subject key identifier: 07:A1:55:AC:07:6E:77:E8:17:F9:C5:D7:38:ED:DB:3A:38:1E:99:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01395E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/049193ECCEA711EF93423BBA762E951A.roa
Signing time: Thu 09 Jan 2025 16:30:20 +0000
ROA not before: Thu 09 Jan 2025 16:30:17 +0000
ROA not after: Tue 11 Feb 2025 16:30:17 +0000
asID: 5065
IP address blocks: 154.90.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80222 (0x1395e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 9 16:30:17 2025 GMT
Not After : Feb 11 16:30:17 2025 GMT
Subject: CN=677ff99c-f997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:12:67:d5:65:ee:dc:c5:b6:79:39:41:4c:
de:f2:69:0c:ee:2a:96:15:24:67:ed:43:d4:b3:d4:
ff:31:4a:32:74:54:58:b7:82:cf:4d:a4:2a:21:5c:
fe:59:8e:d0:9d:e7:ec:32:19:d4:8b:55:3b:eb:b6:
25:61:77:eb:71:f0:91:70:61:b4:c2:04:6e:35:6f:
24:02:13:75:eb:e2:96:1a:c7:e5:97:fa:c7:40:41:
a6:1d:8e:06:61:06:15:30:d2:39:3a:ea:a2:46:9b:
c5:36:5c:3a:38:77:ec:09:b8:a5:01:7e:01:bb:32:
d4:5a:56:3d:0a:07:24:b3:d6:39:78:9f:42:9f:04:
db:6b:a5:76:d3:b3:ad:49:85:09:21:0d:83:a7:48:
9b:c7:70:1b:15:0a:12:89:63:d2:b8:e7:bd:00:14:
01:5a:03:7a:7a:a0:c2:e4:9c:66:27:46:69:88:ef:
93:8e:8b:0b:10:f1:f4:3f:cf:1a:cc:35:d4:cc:ea:
0f:e8:e4:e8:e9:f0:b8:07:4a:a7:6d:f7:7a:03:6a:
d0:07:bc:5f:aa:7b:a5:13:29:d0:20:70:84:3a:14:
2f:c2:26:8e:b9:d2:fb:c6:74:a1:54:a6:3a:11:cb:
c3:e5:a8:32:88:da:0c:35:26:0c:95:ae:c7:79:2d:
80:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A1:55:AC:07:6E:77:E8:17:F9:C5:D7:38:ED:DB:3A:38:1E:99:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/049193ECCEA711EF93423BBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.24.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:46:0b:77:e5:02:bd:74:08:88:82:a3:04:b7:c1:f6:a9:fe:
53:b7:44:b1:b3:87:7b:63:bd:99:93:3f:5f:f0:0d:e4:0a:18:
6d:5a:35:f0:5b:5f:be:25:bb:f9:8a:53:4e:ce:16:c0:f1:3e:
5e:a1:c5:d5:d3:6a:78:99:30:b6:55:50:de:8d:ad:e4:ce:fc:
18:cb:ce:53:a1:20:fa:56:be:25:33:9e:8f:c1:06:e9:f0:84:
b8:ba:c0:88:4f:09:0c:4f:82:80:da:52:6f:38:6a:1f:92:8f:
46:46:37:50:9d:ab:9d:91:fd:67:e1:9d:dc:14:d9:b6:4b:cf:
bb:6f:1c:08:43:6f:72:00:6b:98:d5:b1:5a:21:64:bc:38:cc:
ef:2f:0a:40:a1:ee:c3:80:84:93:cf:03:3b:84:f2:07:d9:9e:
8a:d8:90:5d:f5:1b:82:ce:e3:09:50:0f:7f:fc:a6:21:4b:1a:
1b:6d:56:98:18:a5:f0:15:8d:02:6f:a1:a4:c4:fc:31:27:87:
eb:72:57:63:aa:3d:2e:b9:c2:c4:ff:c8:92:19:3a:16:3d:b2:
be:ad:37:53:32:c8:36:69:75:41:3d:7e:1e:d5:99:f4:e4:31:
94:38:9a:0e:b9:29:96:b1:35:45:34:67:f8:dd:06:46:8d:ce:
5f:db:4f:84
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATleMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA5MTYzMDE3WhcNMjUwMjExMTYzMDE3WjAYMRYw
FAYDVQQDEw02NzdmZjk5Yy1mOTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtPASZ9Vl7tzFtnk5QUze8mkM7iqWFSRn7UPUs9T/MUoydFRYt4LPTaQq
IVz+WY7QnefsMhnUi1U767YlYXfrcfCRcGG0wgRuNW8kAhN16+KWGsfll/rHQEGm
HY4GYQYVMNI5OuqiRpvFNlw6OHfsCbilAX4BuzLUWlY9Cgcks9Y5eJ9CnwTba6V2
07OtSYUJIQ2Dp0ibx3AbFQoSiWPSuOe9ABQBWgN6eqDC5JxmJ0ZpiO+TjosLEPH0
P88azDXUzOoP6OTo6fC4B0qnbfd6A2rQB7xfqnulEynQIHCEOhQvwiaOudL7xnSh
VKY6EcvD5agyiNoMNSYMla7HeS2AQwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAeh
VawHbnfoF/nF1zjt2zo4HpkqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNDkxOTNFQ0NFQTcxMUVGOTM0MjNCQkE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmloYMA0GCSqGSIb3DQEB
CwUAA4IBAQArRgt35QK9dAiIgqMEt8H2qf5Tt0Sxs4d7Y72Zkz9f8A3kChhtWjXw
W1++Jbv5ilNOzhbA8T5eocXV02p4mTC2VVDeja3kzvwYy85ToSD6Vr4lM56PwQbp
8IS4usCITwkMT4KA2lJvOGofko9GRjdQnaudkf1n4Z3cFNm2S8+7bxwIQ29yAGuY
1bFaIWS8OMzvLwpAoe7DgISTzwM7hPIH2Z6K2JBd9RuCzuMJUA9//KYhSxobbVaY
GKXwFY0Cb6GkxPwxJ4frcldjqj0uucLE/8iSGToWPbK+rTdTMsg2aXVBPX4e1Zn0
5DGUOJoOuSmWsTVFNGf43QZGjc5f20+E
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:05 2025 by rpki-client