Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B55B6BADE2611EF9D2314BE762E951A.roa
File: 6B55B6BADE2611EF9D2314BE762E951A.roa (raw, json)
Hash identifier: GVz1EDSUiyIRTy/VWgJ3kJzrzEzZMA9wcwpyxpbHEXE=
Subject key identifier: 3B:2E:D6:FB:A7:3E:90:09:D0:69:DC:E7:0B:60:84:3E:AD:95:4E:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B55B6BADE2611EF9D2314BE762E951A.roa
Signing time: Wed 29 Jan 2025 09:50:06 +0000
ROA not before: Wed 29 Jan 2025 09:50:02 +0000
ROA not after: Fri 28 Feb 2025 09:50:02 +0000
asID: 395793
IP address blocks: 154.193.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85368 (0x14d78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 09:50:02 2025 GMT
Not After : Feb 28 09:50:02 2025 GMT
Subject: CN=6799f9ce-c5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:83:d4:c6:ee:4c:c2:31:01:f8:9f:87:67:
15:78:91:3d:39:85:5e:60:d9:56:ee:35:3d:9e:5b:
a3:77:be:95:c1:66:23:d5:c4:2d:04:17:89:b6:e1:
b3:f9:2b:1a:61:2f:4d:5c:f0:8a:f3:71:e3:b2:32:
9b:77:d5:f1:da:57:34:b9:f9:7b:49:bf:f2:aa:43:
75:d0:71:46:b3:9d:6d:e1:bc:b2:fe:80:7f:1a:02:
8c:1b:25:64:d9:3f:09:4e:ba:66:77:a3:ce:2d:fa:
a8:95:9f:b7:b7:c6:c4:16:a3:7a:9b:76:67:bd:9a:
6b:e4:d2:92:44:15:0f:7e:d4:17:42:1c:c2:f8:d9:
c9:07:a9:56:49:d8:8d:43:86:76:18:ac:b0:ad:f1:
7f:e9:ab:8e:b7:ff:df:89:1d:d9:14:cb:a9:37:1e:
9d:b4:ee:56:5b:b7:f5:50:10:42:c4:29:49:dd:35:
4b:a7:7e:1e:55:11:6b:03:4f:a9:fb:07:5e:f9:42:
13:57:39:2f:17:32:5f:ac:3a:e8:13:35:02:da:a0:
fc:4a:a8:08:14:da:b6:e6:ae:5d:b5:0d:33:eb:7d:
64:aa:6c:b3:ff:cc:ac:a9:8e:1c:db:eb:5c:2a:53:
4c:b3:cc:7d:d0:55:60:ac:75:42:7d:aa:76:13:3c:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2E:D6:FB:A7:3E:90:09:D0:69:DC:E7:0B:60:84:3E:AD:95:4E:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B55B6BADE2611EF9D2314BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.108.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:14:ac:e2:ff:9b:41:29:23:05:77:42:2c:b8:96:50:f3:df:
42:86:16:9d:1a:1f:48:d3:b8:fd:4e:4b:57:2d:ea:89:04:2c:
3d:40:5f:89:0a:ee:21:ba:9c:55:40:08:c4:72:c8:cf:85:0d:
ec:50:5d:8d:35:22:59:b7:e6:5a:95:a2:91:53:62:f3:ec:ce:
92:1e:ad:51:6e:d1:ac:ab:ac:03:07:22:03:94:24:06:9f:4f:
d9:85:ab:a4:84:2f:70:4b:1c:fe:99:c9:c0:b8:ac:cb:c2:6b:
ad:ff:6e:86:29:73:84:db:27:07:7e:f1:64:1a:e1:32:5d:66:
d0:ac:70:7e:0e:46:30:8b:c6:30:3d:25:48:66:80:d7:16:b0:
d3:6d:fa:5f:ad:f8:86:e0:e8:6b:f0:ec:25:53:f3:bb:8e:3f:
d3:95:4c:e4:54:5b:06:ba:bc:82:9c:d7:90:54:6e:4c:7a:83:
1d:de:5a:fb:b9:41:e4:b7:45:03:17:6d:b3:81:64:bb:9a:ba:
1c:64:4c:b0:48:69:75:a6:7e:44:d1:fd:3c:ca:0f:ae:e5:6f:
2c:c3:fe:d1:2d:c8:97:fc:4b:25:9f:57:fc:8f:10:2f:fc:a6:
4d:a9:b7:f6:ac:91:8c:4f:25:2d:01:d2:42:f1:68:eb:5b:75:
b1:3f:08:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU14MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI5MDk1MDAyWhcNMjUwMjI4MDk1MDAyWjAYMRYw
FAYDVQQDEw02Nzk5ZjljZS1jNWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAytiD1MbuTMIxAfifh2cVeJE9OYVeYNlW7jU9nlujd76VwWYj1cQtBBeJ
tuGz+SsaYS9NXPCK83HjsjKbd9Xx2lc0ufl7Sb/yqkN10HFGs51t4byy/oB/GgKM
GyVk2T8JTrpmd6POLfqolZ+3t8bEFqN6m3ZnvZpr5NKSRBUPftQXQhzC+NnJB6lW
SdiNQ4Z2GKywrfF/6auOt//fiR3ZFMupNx6dtO5WW7f1UBBCxClJ3TVLp34eVRFr
A0+p+wde+UITVzkvFzJfrDroEzUC2qD8SqgIFNq25q5dtQ0z631kqmyz/8ysqY4c
2+tcKlNMs8x90FVgrHVCfap2EzxQbQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDsu
1vunPpAJ0Gnc5wtghD6tlU7wMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QjU1QjZCQURFMjYxMUVGOUQyMzE0QkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsFsMA0GCSqGSIb3DQEB
CwUAA4IBAQA6FKzi/5tBKSMFd0IsuJZQ899ChhadGh9I07j9TktXLeqJBCw9QF+J
Cu4hupxVQAjEcsjPhQ3sUF2NNSJZt+ZalaKRU2Lz7M6SHq1RbtGsq6wDByIDlCQG
n0/ZhaukhC9wSxz+mcnAuKzLwmut/26GKXOE2ycHfvFkGuEyXWbQrHB+DkYwi8Yw
PSVIZoDXFrDTbfpfrfiG4Ohr8OwlU/O7jj/TlUzkVFsGuryCnNeQVG5MeoMd3lr7
uUHkt0UDF22zgWS7mrocZEywSGl1pn5E0f08yg+u5W8sw/7RLciX/Esln1f8jxAv
/KZNqbf2rJGMTyUtAdJC8WjrW3WxPwhp
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:11:32 2025 by rpki-client