Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C800A24DA4011EF95ADF767762E951A.roa
File: 2C800A24DA4011EF95ADF767762E951A.roa (raw, json)
Hash identifier: Cz8wm3vXmsb0fKHVdvQEKNN+cdseQBipK2Agsnv5Y/k=
Subject key identifier: FE:3B:70:C4:AD:ED:D6:14:7B:D6:60:69:D0:30:81:25:AA:FF:19:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C800A24DA4011EF95ADF767762E951A.roa
Signing time: Fri 24 Jan 2025 10:44:23 +0000
ROA not before: Fri 24 Jan 2025 10:44:20 +0000
ROA not after: Wed 05 Mar 2025 10:44:20 +0000
asID: 202656
IP address blocks: 154.219.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83378 (0x145b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:44:20 2025 GMT
Not After : Mar 5 10:44:20 2025 GMT
Subject: CN=67936f07-13aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:63:97:39:25:e7:0c:fa:1e:95:b9:3b:50:
34:f7:fe:19:4f:b5:59:f8:b3:96:a5:2d:8d:70:59:
a4:3c:b7:d2:0f:3d:ac:02:9f:a2:a2:5d:03:42:49:
52:7d:b6:4a:14:77:8a:4e:d3:5b:54:61:d8:a9:6f:
a7:0c:1b:eb:65:be:1a:8d:c1:da:14:60:76:1d:c7:
1c:38:cf:9f:89:cf:a6:ab:e9:de:91:f2:73:51:a2:
a3:20:41:62:e0:f3:76:b5:47:e7:84:f9:2c:a4:7d:
06:7f:c2:35:7b:03:3d:d7:f2:6e:47:2d:a8:9e:79:
0c:31:b2:6d:94:0a:7f:11:30:a1:ef:54:98:4e:e6:
e9:7d:8d:84:e8:e6:a0:ce:04:5a:39:d4:d4:94:1d:
15:5e:7f:0f:ce:5a:9e:c0:f4:60:34:b1:58:68:c4:
8e:ed:58:56:5f:dd:28:a6:4b:cc:6b:07:30:ce:b8:
b8:f6:ce:3a:fb:46:cd:7d:ff:34:3c:05:cc:35:7a:
f4:6e:c9:ab:3b:0c:1e:a7:54:05:19:c4:2b:6b:aa:
fa:4a:66:67:f6:0a:e1:6b:c5:6d:1d:37:19:b3:94:
ab:b5:8b:ef:ca:da:0b:c5:c8:f9:ec:97:b8:ed:60:
cc:0a:f8:10:f2:04:b7:65:b8:e9:0e:49:0a:b3:ae:
78:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3B:70:C4:AD:ED:D6:14:7B:D6:60:69:D0:30:81:25:AA:FF:19:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C800A24DA4011EF95ADF767762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.21.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:aa:cd:90:a2:47:10:33:f6:7d:fd:ac:a5:2d:ac:6c:9b:95:
5b:5a:47:89:d5:3f:1b:28:53:69:83:c4:15:b7:ee:86:18:04:
35:ce:f7:cf:f9:00:03:96:cf:02:43:43:ab:df:a5:ae:3c:2f:
18:bd:6c:d4:a1:ec:99:e7:d3:aa:59:dd:08:14:c4:6a:8e:40:
e1:52:42:3b:40:0d:b4:75:2e:92:64:4e:db:32:d8:c5:96:28:
92:57:cd:81:37:44:44:d3:7c:99:02:a2:10:d7:a7:7f:14:fa:
8d:5c:79:ed:a5:e6:f7:05:0d:65:8f:70:38:1f:63:e7:8d:74:
34:36:b6:da:15:58:45:e8:cd:40:eb:7f:f9:a4:26:89:f6:c4:
5e:a4:2d:a3:1f:da:bd:2a:73:85:1b:81:4a:d3:7b:fa:4d:7e:
69:59:69:16:9d:20:28:4e:16:94:64:97:5a:3c:8d:e6:dc:90:
a4:8b:95:18:d1:67:e9:01:d4:46:e6:74:ed:f6:6e:5f:b7:77:
d0:a3:37:14:41:03:b0:5d:fa:72:75:d9:34:0c:04:03:10:61:
b0:19:a5:2d:2b:9c:33:53:dd:d2:b4:bc:4c:88:34:39:77:a0:
9c:32:a4:a6:35:85:84:8b:54:32:ea:ff:fb:98:7c:b2:b5:38:
bd:a7:17:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUWyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTA0NDIwWhcNMjUwMzA1MTA0NDIwWjAYMRYw
FAYDVQQDEw02NzkzNmYwNy0xM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAycJjlzkl5wz6HpW5O1A09/4ZT7VZ+LOWpS2NcFmkPLfSDz2sAp+iol0D
QklSfbZKFHeKTtNbVGHYqW+nDBvrZb4ajcHaFGB2HcccOM+fic+mq+nekfJzUaKj
IEFi4PN2tUfnhPkspH0Gf8I1ewM91/JuRy2onnkMMbJtlAp/ETCh71SYTubpfY2E
6OagzgRaOdTUlB0VXn8PzlqewPRgNLFYaMSO7VhWX90opkvMawcwzri49s46+0bN
ff80PAXMNXr0bsmrOwwep1QFGcQra6r6SmZn9grha8VtHTcZs5SrtYvvytoLxcj5
7Je47WDMCvgQ8gS3ZbjpDkkKs654iQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP47
cMSt7dYUe9ZgadAwgSWq/xllMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQzgwMEEyNERBNDAxMUVGOTVBREY3Njc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtsVMA0GCSqGSIb3DQEB
CwUAA4IBAQAfqs2QokcQM/Z9/aylLaxsm5VbWkeJ1T8bKFNpg8QVt+6GGAQ1zvfP
+QADls8CQ0Or36WuPC8YvWzUoeyZ59OqWd0IFMRqjkDhUkI7QA20dS6SZE7bMtjF
liiSV82BN0RE03yZAqIQ16d/FPqNXHntpeb3BQ1lj3A4H2PnjXQ0NrbaFVhF6M1A
63/5pCaJ9sRepC2jH9q9KnOFG4FK03v6TX5pWWkWnSAoThaUZJdaPI3m3JCki5UY
0WfpAdRG5nTt9m5ft3fQozcUQQOwXfpyddk0DAQDEGGwGaUtK5wzU93StLxMiDQ5
d6CcMqSmNYWEi1Qy6v/7mHyytTi9pxeX
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:33:02 2025 by rpki-client