Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E35B498CC9C611EFA6FFE6B7762E951A.roa
File: E35B498CC9C611EFA6FFE6B7762E951A.roa (raw, json)
Hash identifier: ZUpHfo5jnCJZkWEka15FyzxtTMT2yvUxTYGcu7X+CrM=
Subject key identifier: 62:1D:01:BE:2C:17:C0:9C:A3:8E:7D:50:7D:6E:27:B6:5D:74:99:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E35B498CC9C611EFA6FFE6B7762E951A.roa
Signing time: Fri 03 Jan 2025 11:35:53 +0000
ROA not before: Fri 03 Jan 2025 11:35:49 +0000
ROA not after: Tue 04 Feb 2025 11:35:49 +0000
asID: 203020
IP address blocks: 154.203.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79018 (0x134aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 11:35:49 2025 GMT
Not After : Feb 4 11:35:49 2025 GMT
Subject: CN=6777cb99-4ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:43:3d:11:84:31:ea:8f:a3:5d:e8:d3:ba:
e6:52:31:e6:21:05:58:26:f8:07:1d:ca:69:92:2d:
c4:fd:17:4a:31:1b:16:81:0d:f5:19:a0:56:f7:26:
1c:55:9d:c3:1c:76:5f:cd:84:36:a5:48:7c:27:c5:
40:a1:a9:b0:40:f8:3d:86:fb:2e:4d:bb:94:f1:d1:
35:13:ea:ba:ef:7f:34:c5:ea:86:58:8f:51:3b:9b:
02:65:1e:a7:8b:11:94:92:74:5b:0f:84:62:1f:1d:
1a:2e:36:20:0b:19:4c:40:b5:ba:b2:12:12:25:d6:
a0:a1:fa:9e:d0:56:0c:86:86:a6:38:ba:ce:a0:df:
bd:5c:7f:ce:e6:14:6c:3a:14:fa:5c:85:5e:a4:02:
1e:8e:00:5e:d8:74:00:08:ff:07:b3:bd:db:39:3e:
41:b1:ea:0d:3f:d0:94:3d:59:80:47:b8:03:23:45:
27:11:fe:25:6f:70:79:74:48:63:08:dc:b1:d8:89:
c0:a3:0b:eb:e1:ab:e7:6f:98:84:07:93:57:49:e5:
6e:4e:c0:c6:43:e6:74:c4:5e:46:a2:9d:33:d4:fb:
52:2a:6f:e9:d4:e8:c2:4d:f4:96:96:dd:87:9e:92:
17:3a:18:c8:fb:45:7d:a7:77:f8:20:b9:f5:ee:9a:
0d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1D:01:BE:2C:17:C0:9C:A3:8E:7D:50:7D:6E:27:B6:5D:74:99:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E35B498CC9C611EFA6FFE6B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.95.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:fe:71:39:84:03:0a:39:be:ab:78:40:9f:6f:f6:a1:c7:ff:
b8:56:10:49:93:c6:50:f4:af:c0:34:d1:18:84:a2:f3:d7:f1:
a9:38:d6:0b:d3:26:f3:cd:0e:7a:1e:32:63:81:a0:32:a4:58:
46:6f:a7:47:94:cf:d2:4b:9e:19:1c:7c:c3:2a:5c:4c:ee:3c:
11:cb:fd:1e:c9:74:9c:d3:b3:c6:1d:c5:fa:0a:9b:24:66:64:
ec:0e:f3:7b:b7:8c:2a:17:9e:82:d9:14:0e:75:82:12:dc:d7:
e4:0c:83:36:19:ee:d6:e1:16:1f:cf:2f:20:42:e8:b3:ea:62:
f8:1b:2f:24:ae:3b:1f:48:9a:6f:89:95:ce:c2:bf:90:66:37:
97:4d:21:ab:f4:7a:e9:34:e7:bb:55:65:70:bd:65:2a:58:c4:
9c:1f:df:f3:b1:54:ff:27:32:f5:24:c8:19:30:86:42:3b:43:
35:63:a3:7a:2e:a4:4f:d3:97:14:e2:2e:01:e7:df:53:9f:3f:
6f:b9:9c:91:03:5b:15:62:df:ec:c4:82:63:b7:ae:96:95:99:
8c:d1:3a:2c:49:3c:44:e0:88:18:c6:9d:88:2c:55:5c:ff:83:
e8:fe:ba:3b:bd:a1:c1:09:81:99:bf:a4:28:cd:49:27:2b:db:
db:26:b4:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATSqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAzMTEzNTQ5WhcNMjUwMjA0MTEzNTQ5WjAYMRYw
FAYDVQQDEw02Nzc3Y2I5OS00ZWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvJNDPRGEMeqPo13o07rmUjHmIQVYJvgHHcppki3E/RdKMRsWgQ31GaBW
9yYcVZ3DHHZfzYQ2pUh8J8VAoamwQPg9hvsuTbuU8dE1E+q67380xeqGWI9RO5sC
ZR6nixGUknRbD4RiHx0aLjYgCxlMQLW6shISJdagofqe0FYMhoamOLrOoN+9XH/O
5hRsOhT6XIVepAIejgBe2HQACP8Hs73bOT5BseoNP9CUPVmAR7gDI0UnEf4lb3B5
dEhjCNyx2InAowvr4avnb5iEB5NXSeVuTsDGQ+Z0xF5Gop0z1PtSKm/p1OjCTfSW
lt2HnpIXOhjI+0V9p3f4ILn17poN2wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGId
Ab4sF8Cco459UH1uJ7ZddJnQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMzVCNDk4Q0M5QzYxMUVGQTZGRkU2Qjc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmstfMA0GCSqGSIb3DQEB
CwUAA4IBAQBe/nE5hAMKOb6reECfb/ahx/+4VhBJk8ZQ9K/ANNEYhKLz1/GpONYL
0ybzzQ56HjJjgaAypFhGb6dHlM/SS54ZHHzDKlxM7jwRy/0eyXSc07PGHcX6Cpsk
ZmTsDvN7t4wqF56C2RQOdYIS3NfkDIM2Ge7W4RYfzy8gQuiz6mL4Gy8krjsfSJpv
iZXOwr+QZjeXTSGr9HrpNOe7VWVwvWUqWMScH9/zsVT/JzL1JMgZMIZCO0M1Y6N6
LqRP05cU4i4B599Tnz9vuZyRA1sVYt/sxIJjt66WlZmM0TosSTxE4IgYxp2ILFVc
/4Po/ro7vaHBCYGZv6QozUknK9vbJrRE
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:43:45 2025 by rpki-client