Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A594817ED3D311EF88EEAA89762E951A.roa
File: A594817ED3D311EF88EEAA89762E951A.roa (raw, json)
Hash identifier: 5LCGgmu2PJjyQKvJWXo4Grd56weBFgiV6hrGxoNVkLU=
Subject key identifier: EB:31:23:97:57:1D:C4:54:9A:97:68:E8:66:17:95:44:3B:B3:2F:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A594817ED3D311EF88EEAA89762E951A.roa
Signing time: Thu 16 Jan 2025 06:32:24 +0000
ROA not before: Thu 16 Jan 2025 06:32:20 +0000
ROA not after: Wed 19 Feb 2025 06:32:20 +0000
asID: 7018
IP address blocks: 154.223.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80816 (0x13bb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 06:32:20 2025 GMT
Not After : Feb 19 06:32:20 2025 GMT
Subject: CN=6788a7f8-95f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:41:3c:81:14:ea:3b:00:90:bd:8f:6f:bb:
67:fd:86:57:e5:d2:a7:fd:ef:d2:a2:92:03:9f:73:
a1:f4:c5:c5:a9:73:45:f1:43:a4:49:62:fa:e8:bc:
57:b1:64:d4:9f:4f:4b:30:20:0a:ef:e7:e6:81:b7:
ac:dd:83:09:c0:a5:23:1a:0e:fd:d8:74:7f:20:3a:
43:75:4e:5f:2f:28:a2:19:d3:08:1f:39:33:47:3a:
6a:da:ae:fd:dc:51:9e:49:37:94:42:07:73:0c:40:
96:54:ee:80:ed:a9:63:e3:e7:b7:61:d8:60:7a:7b:
30:bd:41:2b:7f:e9:e2:d8:cc:31:cf:5e:7f:80:8c:
a9:aa:57:18:da:dc:98:6b:d2:5c:d0:ab:2a:43:e1:
5f:6a:9a:00:fa:92:69:42:a0:51:9a:8c:00:0e:de:
af:aa:7e:d5:8a:19:6a:f4:94:97:e3:7a:22:64:48:
cd:ff:0a:70:7d:f6:15:d6:06:27:3e:8f:09:c1:62:
33:cb:6b:e0:9a:89:2a:94:46:ef:cf:84:55:9e:a3:
68:6d:21:fc:d2:0c:12:dc:3d:da:48:fd:2e:82:18:
6a:f8:6a:6a:5c:a1:3d:e1:2e:e6:21:d8:b5:27:d8:
9b:62:75:24:c1:79:05:c6:9d:89:3d:cd:30:7c:36:
cf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:31:23:97:57:1D:C4:54:9A:97:68:E8:66:17:95:44:3B:B3:2F:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A594817ED3D311EF88EEAA89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.193.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:80:45:b1:04:75:d7:42:a6:c3:b5:69:ca:96:f2:c7:a5:9e:
6a:c0:8e:7e:07:ba:9a:66:ec:ca:ad:d0:c9:10:ca:df:ea:d7:
f6:8e:be:08:f1:b2:7e:bb:b4:a4:6f:50:2a:f5:7b:8d:51:1b:
5e:62:73:19:70:b7:63:19:53:31:7a:c8:78:d8:6a:0f:3b:7b:
5b:7c:6b:d9:ab:3c:8a:44:25:4c:7e:40:28:61:84:3f:de:45:
a1:6f:43:2b:f3:0f:59:df:98:3c:29:ee:fa:22:00:20:f9:a3:
32:34:44:a9:81:46:ad:13:90:80:06:4f:30:00:47:00:50:09:
df:13:0c:5f:67:e6:54:6f:59:0d:6e:d6:26:d9:af:16:35:ec:
70:33:0e:0b:2d:61:53:2b:9f:b5:90:21:fa:0d:8c:68:0c:e2:
11:27:20:ac:ed:36:2f:ac:de:ab:93:83:82:65:4e:c6:b2:23:
ab:ce:24:3c:a6:70:d9:5e:e7:12:99:93:52:e7:92:4a:eb:9c:
df:67:f3:69:f2:25:6e:ec:d0:55:70:58:df:01:90:55:62:8f:
4e:9e:97:15:b3:0f:75:a6:dc:34:65:51:bd:56:0b:99:45:79:
b2:be:76:28:90:3e:78:e4:bb:be:3b:bc:f0:6c:5d:a0:63:09:
49:ac:53:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATuwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE2MDYzMjIwWhcNMjUwMjE5MDYzMjIwWjAYMRYw
FAYDVQQDEw02Nzg4YTdmOC05NWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtiVBPIEU6jsAkL2Pb7tn/YZX5dKn/e/SopIDn3Oh9MXFqXNF8UOkSWL6
6LxXsWTUn09LMCAK7+fmgbes3YMJwKUjGg792HR/IDpDdU5fLyiiGdMIHzkzRzpq
2q793FGeSTeUQgdzDECWVO6A7alj4+e3YdhgenswvUErf+ni2Mwxz15/gIypqlcY
2tyYa9Jc0KsqQ+FfapoA+pJpQqBRmowADt6vqn7Vihlq9JSX43oiZEjN/wpwffYV
1gYnPo8JwWIzy2vgmokqlEbvz4RVnqNobSH80gwS3D3aSP0ughhq+GpqXKE94S7m
Idi1J9ibYnUkwXkFxp2JPc0wfDbPcQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOsx
I5dXHcRUmpdo6GYXlUQ7sy+hMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNTk0ODE3RUQzRDMxMUVGODhFRUFBODk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt/BMA0GCSqGSIb3DQEB
CwUAA4IBAQCqgEWxBHXXQqbDtWnKlvLHpZ5qwI5+B7qaZuzKrdDJEMrf6tf2jr4I
8bJ+u7Skb1Aq9XuNURteYnMZcLdjGVMxesh42GoPO3tbfGvZqzyKRCVMfkAoYYQ/
3kWhb0Mr8w9Z35g8Ke76IgAg+aMyNESpgUatE5CABk8wAEcAUAnfEwxfZ+ZUb1kN
btYm2a8WNexwMw4LLWFTK5+1kCH6DYxoDOIRJyCs7TYvrN6rk4OCZU7GsiOrziQ8
pnDZXucSmZNS55JK65zfZ/Np8iVu7NBVcFjfAZBVYo9OnpcVsw91ptw0ZVG9VguZ
RXmyvnYokD545Lu+O7zwbF2gYwlJrFPy
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:13:16 2025 by rpki-client