Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EB6E632DE2511EFB8AB04B5762E951A.roa
File: 0EB6E632DE2511EFB8AB04B5762E951A.roa (raw, json)
Hash identifier: xgIBQQ3z+TINlWACnVMobxTqhOz/i4ePMx5jsL3AAe8=
Subject key identifier: A2:D3:80:0F:D8:94:9B:E3:9B:C3:EA:66:A5:6D:0A:72:8E:9B:D2:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EB6E632DE2511EFB8AB04B5762E951A.roa
Signing time: Wed 29 Jan 2025 09:40:21 +0000
ROA not before: Wed 29 Jan 2025 09:40:18 +0000
ROA not after: Fri 28 Feb 2025 09:40:18 +0000
asID: 395793
IP address blocks: 154.193.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85358 (0x14d6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 09:40:18 2025 GMT
Not After : Feb 28 09:40:18 2025 GMT
Subject: CN=6799f785-33f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:b2:e3:70:b0:a9:b2:79:d0:86:8f:03:6f:
df:d8:d7:01:59:8f:ff:d3:db:bc:f7:13:44:5b:4a:
ff:a6:3b:27:c5:ca:77:32:b1:ea:a2:cb:f1:2c:ad:
ff:74:b8:33:ed:16:af:57:90:dd:95:74:a6:c6:ba:
b2:88:4b:5b:f3:53:ea:f5:2e:66:e2:75:87:30:d5:
4f:52:00:3c:b9:44:56:a0:7e:0e:4d:d9:d2:be:91:
c4:de:a2:75:c4:9c:d4:64:21:36:0d:ee:a6:b4:ab:
0f:da:c0:4f:2e:2d:90:05:9a:de:b1:a0:9a:52:f8:
a3:79:61:0c:65:e3:df:6a:b0:e5:f9:db:e6:a6:7c:
37:95:93:3e:76:b4:ab:42:37:7f:a7:17:31:e0:6f:
de:06:c5:7e:21:02:d4:06:27:ae:d1:01:b0:b6:ea:
97:e3:4d:23:4d:d9:9c:89:cd:b5:94:33:88:38:b0:
e2:87:b5:3d:b5:7c:6b:32:04:d1:36:ea:5c:75:f0:
58:c8:be:6d:1b:f4:ee:97:9a:dc:f9:82:b8:70:46:
44:cc:d7:5d:55:d4:f8:ce:da:1d:3b:69:a5:ba:b0:
c3:54:d8:36:44:98:fc:a2:34:f8:59:5d:e1:e5:28:
d4:d5:22:38:b5:37:68:27:86:8b:52:9a:83:b4:d9:
42:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D3:80:0F:D8:94:9B:E3:9B:C3:EA:66:A5:6D:0A:72:8E:9B:D2:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EB6E632DE2511EFB8AB04B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.103.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:bf:50:c2:73:d8:95:71:86:dc:d2:46:d5:97:a6:fc:bb:a4:
6e:d0:b5:85:5f:16:40:41:6e:22:ee:ba:38:87:73:81:b8:4b:
20:45:94:d5:76:69:56:67:1c:18:29:a2:0d:9b:72:90:6b:0b:
c3:52:59:07:9f:9b:69:a3:4a:6b:a9:fb:11:53:46:47:6f:c7:
37:ae:28:ea:9f:91:fa:37:cb:48:73:d5:e9:df:b2:52:6a:21:
44:fa:71:e1:94:1f:d2:ef:03:6f:81:45:0f:f2:a7:27:f9:5a:
07:d3:c1:94:fc:79:c9:85:37:59:b7:08:b9:4a:e7:97:45:5c:
e5:89:ab:d4:25:5d:f0:46:2b:86:af:f3:a7:5d:3e:eb:57:77:
08:42:2a:04:88:71:74:5e:0c:f5:bc:33:8c:1f:ac:24:0b:73:
29:7a:27:30:cd:28:a3:49:66:74:c3:03:54:17:9e:b1:70:43:
7f:cf:d5:cc:ca:8f:4f:db:81:c0:58:a1:c9:c5:9c:17:54:0c:
aa:c4:c0:25:2d:e4:81:18:d7:74:b4:44:cc:e5:61:86:09:6d:
24:97:50:cf:d6:46:36:60:c5:08:80:29:41:45:d5:d2:50:23:
2e:72:b4:a6:7a:a4:e7:89:4f:89:63:41:66:ec:d8:34:46:e1:
94:b0:05:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU1uMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI5MDk0MDE4WhcNMjUwMjI4MDk0MDE4WjAYMRYw
FAYDVQQDEw02Nzk5Zjc4NS0zM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzWyy43CwqbJ50IaPA2/f2NcBWY//09u89xNEW0r/pjsnxcp3MrHqosvx
LK3/dLgz7RavV5DdlXSmxrqyiEtb81Pq9S5m4nWHMNVPUgA8uURWoH4OTdnSvpHE
3qJ1xJzUZCE2De6mtKsP2sBPLi2QBZresaCaUvijeWEMZePfarDl+dvmpnw3lZM+
drSrQjd/pxcx4G/eBsV+IQLUBieu0QGwtuqX400jTdmcic21lDOIOLDih7U9tXxr
MgTRNupcdfBYyL5tG/Tul5rc+YK4cEZEzNddVdT4ztodO2mlurDDVNg2RJj8ojT4
WV3h5SjU1SI4tTdoJ4aLUpqDtNlCfwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKLT
gA/YlJvjm8PqZqVtCnKOm9JlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wRUI2RTYzMkRFMjUxMUVGQjhBQjA0QjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsFnMA0GCSqGSIb3DQEB
CwUAA4IBAQB/v1DCc9iVcYbc0kbVl6b8u6Ru0LWFXxZAQW4i7ro4h3OBuEsgRZTV
dmlWZxwYKaINm3KQawvDUlkHn5tpo0prqfsRU0ZHb8c3rijqn5H6N8tIc9Xp37JS
aiFE+nHhlB/S7wNvgUUP8qcn+VoH08GU/HnJhTdZtwi5SueXRVzliavUJV3wRiuG
r/OnXT7rV3cIQioEiHF0Xgz1vDOMH6wkC3MpeicwzSijSWZ0wwNUF56xcEN/z9XM
yo9P24HAWKHJxZwXVAyqxMAlLeSBGNd0tETM5WGGCW0kl1DP1kY2YMUIgClBRdXS
UCMucrSmeqTniU+JY0Fm7Ng0RuGUsAWs
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:38 2025 by rpki-client