Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76320AFACBEF11EFB6CAE068762E951A.roa
File: 76320AFACBEF11EFB6CAE068762E951A.roa (raw, json)
Hash identifier: GQZUhfXlvCg70p5Hf/Q39EhoHzyY6rYoyHAZlsIlJV8=
Subject key identifier: 5D:8A:9A:99:A7:0D:3A:84:A1:B0:8D:A4:E1:EA:C6:59:4E:1C:7E:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0135B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76320AFACBEF11EFB6CAE068762E951A.roa
Signing time: Mon 06 Jan 2025 05:31:21 +0000
ROA not before: Mon 06 Jan 2025 05:31:17 +0000
ROA not after: Tue 04 Feb 2025 05:31:17 +0000
asID: 5065
IP address blocks: 154.90.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79284 (0x135b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 05:31:17 2025 GMT
Not After : Feb 4 05:31:17 2025 GMT
Subject: CN=677b6aa9-991f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:40:68:ee:f3:95:e0:e5:ac:70:9c:c9:ed:bb:
2c:f9:f0:ae:f1:c3:3b:aa:9d:57:b5:2d:0f:a2:e4:
23:94:8b:01:8e:9e:8f:2b:5b:3e:b5:85:ba:8a:ac:
a2:37:4a:89:c4:6f:7f:88:3f:78:b0:89:56:8c:d9:
8b:c2:94:a5:11:2d:43:d5:8c:db:1b:f2:fe:d3:97:
03:6d:e9:f4:61:58:c5:ac:06:0a:47:64:03:39:4b:
d6:59:fc:fd:c3:9d:15:b4:aa:60:93:a0:d8:09:ed:
32:53:b3:44:f6:3c:e8:f7:25:1c:ba:fc:58:7a:63:
42:b8:af:6a:57:8a:83:be:8a:a3:1f:1e:87:f2:df:
c2:bd:b8:60:47:6e:25:bd:cd:25:d2:71:0d:6e:d8:
fe:0f:02:19:5c:8c:49:79:54:39:e3:52:d3:cc:19:
0b:29:5c:77:a8:58:61:a6:49:14:b4:09:44:b3:45:
f7:5d:d7:12:97:4b:ec:56:38:5c:8d:2c:be:7e:ce:
12:56:b8:2b:dd:c0:13:f4:e8:07:16:2c:e4:8e:9b:
c4:c2:06:6a:89:46:3a:0b:55:00:70:9f:5f:59:d2:
8e:e1:7d:f4:39:f9:27:2b:a0:f7:58:b1:e4:1c:67:
2d:d3:c6:ad:36:03:e7:58:77:3b:c3:f3:54:80:a6:
eb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8A:9A:99:A7:0D:3A:84:A1:B0:8D:A4:E1:EA:C6:59:4E:1C:7E:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76320AFACBEF11EFB6CAE068762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.24.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:e7:0e:2a:ee:76:e0:b9:85:83:93:05:ce:34:ef:33:d8:5d:
b3:ea:63:56:b4:6d:56:5e:91:e1:7d:c9:6a:13:51:ef:1a:53:
46:df:32:a2:02:13:31:bc:7b:62:09:20:9b:ff:e7:dd:a9:6c:
e6:bb:3e:ce:6f:a9:46:95:22:72:0d:37:51:cf:ec:f6:45:3c:
21:ad:26:be:26:c1:21:27:79:98:6b:15:36:29:87:b0:c8:9a:
0f:d7:75:b3:ec:29:df:8a:b7:f9:a4:fe:49:8f:40:43:88:cf:
84:a2:75:4e:99:59:7d:2c:2b:cd:c0:3d:bf:88:01:6d:7f:dd:
4d:10:22:3b:45:ef:9e:8d:2f:50:53:09:ca:2b:2f:f8:df:c5:
a5:ed:f0:99:13:4d:fd:fe:14:a3:67:cc:d1:c6:36:28:bc:49:
b7:90:3a:ea:89:9e:a7:35:e1:12:de:74:3b:f0:1b:e8:08:9c:
f7:76:43:b8:65:03:b1:aa:f1:58:c9:13:5f:28:3d:6f:9c:aa:
b0:19:bc:d0:f6:58:1d:1c:76:47:4d:79:86:ce:1c:ea:15:ee:
55:58:6b:e2:8c:b6:32:d6:62:3f:96:50:dc:51:ad:c2:a4:07:
2c:b2:63:0f:11:80:82:af:06:71:5c:03:7a:d0:aa:37:8d:04:
b7:25:13:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATW0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA2MDUzMTE3WhcNMjUwMjA0MDUzMTE3WjAYMRYw
FAYDVQQDEw02NzdiNmFhOS05OTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4kBo7vOV4OWscJzJ7bss+fCu8cM7qp1XtS0PouQjlIsBjp6PK1s+tYW6
iqyiN0qJxG9/iD94sIlWjNmLwpSlES1D1YzbG/L+05cDben0YVjFrAYKR2QDOUvW
Wfz9w50VtKpgk6DYCe0yU7NE9jzo9yUcuvxYemNCuK9qV4qDvoqjHx6H8t/Cvbhg
R24lvc0l0nENbtj+DwIZXIxJeVQ541LTzBkLKVx3qFhhpkkUtAlEs0X3XdcSl0vs
VjhcjSy+fs4SVrgr3cAT9OgHFizkjpvEwgZqiUY6C1UAcJ9fWdKO4X30OfknK6D3
WLHkHGct08atNgPnWHc7w/NUgKbraQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF2K
mpmnDTqEobCNpOHqxllOHH5kMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NjMyMEFGQUNCRUYxMUVGQjZDQUUwNjg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmloYMA0GCSqGSIb3DQEB
CwUAA4IBAQC75w4q7nbguYWDkwXONO8z2F2z6mNWtG1WXpHhfclqE1HvGlNG3zKi
AhMxvHtiCSCb/+fdqWzmuz7Ob6lGlSJyDTdRz+z2RTwhrSa+JsEhJ3mYaxU2KYew
yJoP13Wz7Cnfirf5pP5Jj0BDiM+EonVOmVl9LCvNwD2/iAFtf91NECI7Re+ejS9Q
UwnKKy/438Wl7fCZE039/hSjZ8zRxjYovEm3kDrqiZ6nNeES3nQ78BvoCJz3dkO4
ZQOxqvFYyRNfKD1vnKqwGbzQ9lgdHHZHTXmGzhzqFe5VWGvijLYy1mI/llDcUa3C
pAcssmMPEYCCrwZxXAN60Ko3jQS3JRO8
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:45 2025 by rpki-client