Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94222506DA2511EFB142E2B3762E951A.roa
File: 94222506DA2511EFB142E2B3762E951A.roa (raw, json)
Hash identifier: 8oMngbWwvo95Zh0M6QEaYL908q30c6JB8QaxkzMtPBA=
Subject key identifier: 71:8D:BB:9A:CB:DE:ED:28:BE:15:8B:8D:7B:36:FB:6A:68:E7:59:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01441C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94222506DA2511EFB142E2B3762E951A.roa
Signing time: Fri 24 Jan 2025 07:34:00 +0000
ROA not before: Fri 24 Jan 2025 07:33:57 +0000
ROA not after: Wed 05 Mar 2025 07:33:57 +0000
asID: 48031
IP address blocks: 154.222.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82972 (0x1441c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 07:33:57 2025 GMT
Not After : Mar 5 07:33:57 2025 GMT
Subject: CN=67934268-170b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:76:43:ad:13:77:b7:09:09:c4:3a:24:ec:
74:23:7e:42:31:88:09:95:5c:dc:bc:ec:86:03:84:
c1:d9:8f:92:19:67:3e:79:84:b4:e5:e4:be:be:6a:
94:55:3c:c8:46:34:7c:fd:bc:6c:8b:9a:b5:ba:8d:
41:51:0c:ba:67:7e:b3:7f:ff:14:de:0d:c8:02:25:
51:98:3f:82:5d:2d:b6:41:03:c8:19:b0:07:0a:b1:
af:56:96:5a:de:7b:03:d6:3a:69:97:05:76:b7:25:
c6:ef:90:b1:45:dc:cd:e5:6d:68:3d:5f:6b:89:5e:
2d:28:1e:3b:f2:2d:e4:d7:fb:66:d3:f7:36:4d:91:
ae:d4:12:55:5f:e1:e5:b6:78:6f:9d:c4:b9:5e:1e:
75:50:aa:43:e4:52:10:d4:f7:88:14:b9:db:e0:fc:
f9:dd:b8:ef:1f:9d:57:71:d8:14:55:be:a5:30:7c:
c3:fb:55:95:dc:af:be:6d:57:fc:0a:26:01:cb:be:
62:18:42:8f:b5:5f:9c:78:05:67:1e:ce:55:b1:6d:
f8:b6:ad:cc:48:3e:2d:2b:8c:b1:14:79:28:12:f8:
46:24:7d:4e:66:b8:05:b6:86:7e:5d:d6:1f:0d:ec:
a3:f6:93:e7:85:06:e5:ab:40:88:3a:18:5e:72:a0:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8D:BB:9A:CB:DE:ED:28:BE:15:8B:8D:7B:36:FB:6A:68:E7:59:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94222506DA2511EFB142E2B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.219.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d2:c5:d1:29:21:9f:5c:9d:27:c0:4a:18:d9:b9:85:34:65:
23:ec:c6:67:ae:5f:46:5e:71:0b:d5:07:7c:2b:90:05:4d:d0:
76:b8:df:3f:92:77:bb:a9:1a:28:1e:8b:d9:95:c6:03:5c:4c:
36:f7:e6:17:3c:ee:e2:58:09:17:be:7e:95:bd:5b:cd:d3:09:
66:9d:7f:5f:07:58:7d:fe:be:b5:b7:86:ea:9c:c3:af:8f:e1:
4d:03:db:51:56:82:13:1f:40:ca:f1:59:87:cc:40:cc:4b:0b:
d3:da:e6:48:a8:f9:e1:0d:de:57:09:4e:21:6a:f5:cc:a9:f6:
c2:6a:99:ed:c5:01:a8:21:9c:d3:5e:fd:23:7e:14:96:2e:59:
e1:2e:bd:9c:d3:ed:cd:26:49:73:63:ba:0e:ff:61:21:b2:cd:
89:b7:87:2a:db:44:02:ac:b9:9c:a4:1a:06:98:11:d2:f4:08:
e6:52:dc:bf:4c:a4:5a:29:f8:53:cd:a9:60:be:96:04:d0:ac:
b6:62:55:e0:24:02:87:13:9b:c2:5a:7b:a4:40:52:11:06:f1:
d1:f7:4d:88:d9:cd:a6:e8:92:e9:70:a6:7f:83:55:60:30:66:
52:87:1e:01:e9:1a:db:ec:f2:fd:90:6f:2d:4d:c0:00:a0:41:
a1:71:8a:f6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUQcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MDczMzU3WhcNMjUwMzA1MDczMzU3WjAYMRYw
FAYDVQQDEw02NzkzNDI2OC0xNzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvlZ2Q60Td7cJCcQ6JOx0I35CMYgJlVzcvOyGA4TB2Y+SGWc+eYS05eS+
vmqUVTzIRjR8/bxsi5q1uo1BUQy6Z36zf/8U3g3IAiVRmD+CXS22QQPIGbAHCrGv
VpZa3nsD1jpplwV2tyXG75CxRdzN5W1oPV9riV4tKB478i3k1/tm0/c2TZGu1BJV
X+HltnhvncS5Xh51UKpD5FIQ1PeIFLnb4Pz53bjvH51XcdgUVb6lMHzD+1WV3K++
bVf8CiYBy75iGEKPtV+ceAVnHs5VsW34tq3MSD4tK4yxFHkoEvhGJH1OZrgFtoZ+
XdYfDeyj9pPnhQblq0CIOhhecqBLgQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHGN
u5rL3u0ovhWLjXs2+2po51muMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NDIyMjUwNkRBMjUxMUVGQjE0MkUyQjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt7bMA0GCSqGSIb3DQEB
CwUAA4IBAQBw0sXRKSGfXJ0nwEoY2bmFNGUj7MZnrl9GXnEL1Qd8K5AFTdB2uN8/
kne7qRooHovZlcYDXEw29+YXPO7iWAkXvn6VvVvN0wlmnX9fB1h9/r61t4bqnMOv
j+FNA9tRVoITH0DK8VmHzEDMSwvT2uZIqPnhDd5XCU4havXMqfbCapntxQGoIZzT
Xv0jfhSWLlnhLr2c0+3NJklzY7oO/2Ehss2Jt4cq20QCrLmcpBoGmBHS9AjmUty/
TKRaKfhTzalgvpYE0Ky2YlXgJAKHE5vCWnukQFIRBvHR902I2c2m6JLpcKZ/g1Vg
MGZShx4B6Rrb7PL9kG8tTcAAoEGhcYr2
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:13:37 2025 by rpki-client