Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C69E0A72C2A111EF862A4748762E951A.roa
File: C69E0A72C2A111EF862A4748762E951A.roa (raw, json)
Hash identifier: dea3qg2r+XYiBsTHWcTo+vVxcBnKcJzZFdrKSsP3fy4=
Subject key identifier: 98:75:5B:76:12:02:01:D3:C3:9D:DD:34:B2:EC:10:A7:C8:9D:B8:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01253A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C69E0A72C2A111EF862A4748762E951A.roa
Signing time: Wed 25 Dec 2024 09:22:35 +0000
ROA not before: Wed 25 Dec 2024 09:22:31 +0000
ROA not after: Thu 13 Feb 2025 09:22:31 +0000
asID: 138915
IP address blocks: 154.203.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75066 (0x1253a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:22:31 2024 GMT
Not After : Feb 13 09:22:31 2025 GMT
Subject: CN=676bcedb-d79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:4f:bf:02:fa:2b:9f:4d:81:a2:96:71:f0:
40:4c:03:02:0b:e0:4f:4b:50:05:af:8a:74:3d:f2:
32:95:30:b5:34:a5:ca:77:4f:34:64:8d:71:ed:89:
8c:e4:fd:6b:4d:a1:5d:d0:74:6f:47:c4:90:b7:4e:
51:30:15:04:cc:4e:92:55:c5:af:9a:49:4a:29:ba:
35:e2:88:b9:63:7b:4c:d6:a5:83:09:e2:e4:ce:0a:
85:c8:73:4d:37:ac:d6:85:74:ae:da:7b:73:69:e1:
67:f4:67:bf:8c:3f:7c:68:26:c6:59:71:d9:e4:65:
44:22:6a:1e:c6:96:ec:b0:05:42:5a:0f:2c:57:43:
71:b1:14:27:5c:21:87:4d:78:8e:51:c3:b3:96:f3:
c6:3a:e3:71:02:8f:29:2d:60:51:02:d0:e4:5f:73:
d1:0c:21:08:59:ef:59:14:92:af:52:a7:cf:e9:50:
75:1b:ae:59:62:13:1a:fe:a7:8f:d9:3b:9b:7a:f5:
42:45:04:7f:34:07:37:ff:72:61:bd:f5:ba:d8:f8:
15:50:0a:06:8a:3a:8d:bc:40:09:2b:c3:81:da:e8:
7c:b7:7d:15:35:37:43:23:c6:2a:ea:66:2d:6e:64:
a4:66:47:97:99:24:fe:c6:70:18:b1:5a:c5:e4:2d:
10:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:75:5B:76:12:02:01:D3:C3:9D:DD:34:B2:EC:10:A7:C8:9D:B8:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C69E0A72C2A111EF862A4748762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.136.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:ee:30:1a:15:7a:c7:94:25:ae:94:a4:7a:28:67:83:f9:c6:
ea:04:09:f4:cc:d5:d3:26:2f:68:08:80:5f:b8:6b:cd:07:18:
80:05:14:3a:78:a6:f2:f8:88:36:2a:56:a1:15:59:db:2a:e7:
80:29:1f:09:9c:51:75:33:64:60:79:60:2d:8c:54:1e:04:48:
b0:b1:54:c4:b3:37:5c:2e:37:2a:b0:9c:1e:26:1b:bd:72:8e:
32:c6:40:f0:28:01:47:9d:5b:50:66:ad:81:39:57:0b:8d:3b:
a0:69:36:47:d5:c0:40:3b:83:4e:cd:80:28:90:23:3c:c0:f1:
0d:95:a4:09:fb:87:91:a9:4b:c1:35:2a:86:3b:3a:bd:7f:86:
bb:f6:86:3f:be:16:6c:2b:8c:e1:cf:25:43:f6:7b:ff:14:c2:
ee:da:c2:9a:53:70:da:36:f8:d1:66:de:17:69:58:c0:e0:38:
fa:42:be:dc:88:d2:16:37:30:46:79:30:4a:5d:5d:59:45:5a:
36:48:b5:6c:61:6b:c5:db:83:39:f6:97:71:d8:e3:75:c8:f4:
f7:7e:96:0f:d2:71:ee:a8:83:0d:9b:87:31:1c:8b:03:bb:36:
d4:2f:7e:25:1f:ec:57:7f:2a:1d:54:ed:71:88:5e:ef:84:ec:
26:58:41:cb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASU6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDkyMjMxWhcNMjUwMjEzMDkyMjMxWjAYMRYw
FAYDVQQDEw02NzZiY2VkYi1kNzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqhlPvwL6K59NgaKWcfBATAMCC+BPS1AFr4p0PfIylTC1NKXKd080ZI1x
7YmM5P1rTaFd0HRvR8SQt05RMBUEzE6SVcWvmklKKbo14oi5Y3tM1qWDCeLkzgqF
yHNNN6zWhXSu2ntzaeFn9Ge/jD98aCbGWXHZ5GVEImoexpbssAVCWg8sV0NxsRQn
XCGHTXiOUcOzlvPGOuNxAo8pLWBRAtDkX3PRDCEIWe9ZFJKvUqfP6VB1G65ZYhMa
/qeP2TubevVCRQR/NAc3/3JhvfW62PgVUAoGijqNvEAJK8OB2uh8t30VNTdDI8Yq
6mYtbmSkZkeXmST+xnAYsVrF5C0QlQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJh1
W3YSAgHTw53dNLLsEKfInbimMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNjlFMEE3MkMyQTExMUVGODYyQTQ3NDg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsuIMA0GCSqGSIb3DQEB
CwUAA4IBAQAt7jAaFXrHlCWulKR6KGeD+cbqBAn0zNXTJi9oCIBfuGvNBxiABRQ6
eKby+Ig2KlahFVnbKueAKR8JnFF1M2RgeWAtjFQeBEiwsVTEszdcLjcqsJweJhu9
co4yxkDwKAFHnVtQZq2BOVcLjTugaTZH1cBAO4NOzYAokCM8wPENlaQJ+4eRqUvB
NSqGOzq9f4a79oY/vhZsK4zhzyVD9nv/FMLu2sKaU3DaNvjRZt4XaVjA4Dj6Qr7c
iNIWNzBGeTBKXV1ZRVo2SLVsYWvF24M59pdx2ON1yPT3fpYP0nHuqIMNm4cxHIsD
uzbUL34lH+xXfyodVO1xiF7vhOwmWEHL
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:34:54 2025 by rpki-client