Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5743BD9ED98911EF90182B95762E951A.roa
File: 5743BD9ED98911EF90182B95762E951A.roa (raw, json)
Hash identifier: lVqVL5KBb5B4JQdjfpjb/QsJ0FR7Ze9trAM9pCq0Tfw=
Subject key identifier: 00:4B:31:BD:A2:A4:7F:10:45:DC:45:7A:91:54:14:4D:2E:08:AD:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014249
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5743BD9ED98911EF90182B95762E951A.roa
Signing time: Thu 23 Jan 2025 12:55:37 +0000
ROA not before: Thu 23 Jan 2025 12:55:33 +0000
ROA not after: Fri 28 Feb 2025 12:55:33 +0000
asID: 62240
IP address blocks: 154.196.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82505 (0x14249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:55:33 2025 GMT
Not After : Feb 28 12:55:33 2025 GMT
Subject: CN=67923c49-e859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:40:a8:0c:cc:e0:5f:41:69:cb:31:c6:aa:06:
76:5b:db:f6:0b:9c:76:18:91:0b:a6:4d:7b:fb:0e:
67:fc:97:05:f8:97:64:44:ab:63:2a:2b:e4:22:0f:
3a:ee:8d:98:1c:0e:83:00:f8:99:0d:86:35:6d:8f:
0e:8a:22:55:cb:33:3a:c5:f1:97:f4:d1:90:09:e5:
45:7a:28:d9:ff:00:12:28:bc:64:79:52:97:f9:7b:
06:dd:89:69:10:a5:1b:f6:20:f0:c0:95:5d:61:08:
5f:28:ed:15:fb:60:21:32:e5:75:8f:77:20:af:61:
66:a4:ff:84:5f:ad:56:a1:15:93:b5:a3:f8:b1:bf:
3f:15:2e:19:ec:5c:36:e6:5d:49:6e:7c:50:4f:9e:
83:97:45:9e:c8:1a:cf:c0:6c:b9:67:a0:cb:c3:41:
ba:29:23:9c:95:26:09:1f:1a:d2:25:9b:a0:03:55:
5d:bb:ea:05:bd:71:5d:28:1c:f1:29:e9:33:2a:28:
90:9a:6a:ed:3a:73:91:c7:d2:d1:bc:0f:a9:df:57:
59:78:9d:08:67:74:24:c5:97:79:31:bf:6e:31:49:
44:1d:6c:be:bb:8b:5a:4d:0b:8e:79:08:18:69:d1:
49:10:7e:4b:5c:1b:e1:54:3f:d7:f0:9e:0f:92:3d:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4B:31:BD:A2:A4:7F:10:45:DC:45:7A:91:54:14:4D:2E:08:AD:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5743BD9ED98911EF90182B95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.18.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d0:63:62:63:92:c7:f0:0d:d7:28:50:62:ec:82:76:9b:48:
84:f0:5c:62:20:cb:2d:48:b3:8f:26:dc:6a:5b:05:5d:51:a3:
3a:8e:12:3c:13:b0:d3:9c:b2:13:5e:a9:40:1d:b5:6f:89:c5:
53:1c:ee:b0:a1:4c:ef:17:7f:92:44:80:4e:ce:f2:41:cb:2b:
df:9c:9d:f3:53:ac:00:1c:8c:0e:2e:df:71:fc:73:f5:04:2e:
0b:96:18:71:73:32:2e:c6:8d:10:0e:28:b8:a8:4a:88:91:2a:
de:f8:b7:7f:a2:bb:1b:7b:11:4b:57:24:43:d9:c4:80:d0:fb:
05:c5:e9:f5:eb:82:e4:cd:75:be:2e:e2:e5:06:34:61:de:0e:
3b:89:bf:df:a7:a1:ae:bb:ca:54:47:73:fa:04:35:eb:e3:84:
5c:76:fe:b6:f7:65:6b:0c:1e:04:04:dc:93:e2:d9:e2:d2:86:
bc:67:d9:a6:82:05:f8:4b:0e:21:54:0d:64:56:b7:cc:96:c3:
20:a3:79:aa:f4:1c:cb:06:ea:1f:fc:01:51:5c:66:8f:f2:f7:
85:6c:01:31:a6:96:05:55:cb:81:26:11:fc:60:fd:29:0d:1e:
4c:c7:98:25:72:39:93:fe:b1:3d:c8:60:d3:59:ea:87:89:97:
df:71:f1:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUJJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTI1NTMzWhcNMjUwMjI4MTI1NTMzWjAYMRYw
FAYDVQQDEw02NzkyM2M0OS1lODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmECoDMzgX0FpyzHGqgZ2W9v2C5x2GJELpk17+w5n/JcF+JdkRKtjKivk
Ig867o2YHA6DAPiZDYY1bY8OiiJVyzM6xfGX9NGQCeVFeijZ/wASKLxkeVKX+XsG
3YlpEKUb9iDwwJVdYQhfKO0V+2AhMuV1j3cgr2FmpP+EX61WoRWTtaP4sb8/FS4Z
7Fw25l1JbnxQT56Dl0WeyBrPwGy5Z6DLw0G6KSOclSYJHxrSJZugA1Vdu+oFvXFd
KBzxKekzKiiQmmrtOnORx9LRvA+p31dZeJ0IZ3QkxZd5Mb9uMUlEHWy+u4taTQuO
eQgYadFJEH5LXBvhVD/X8J4Pkj2JLwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFABL
Mb2ipH8QRdxFepFUFE0uCK2MMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NzQzQkQ5RUQ5ODkxMUVGOTAxODJCOTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsQSMA0GCSqGSIb3DQEB
CwUAA4IBAQBa0GNiY5LH8A3XKFBi7IJ2m0iE8FxiIMstSLOPJtxqWwVdUaM6jhI8
E7DTnLITXqlAHbVvicVTHO6woUzvF3+SRIBOzvJByyvfnJ3zU6wAHIwOLt9x/HP1
BC4LlhhxczIuxo0QDii4qEqIkSre+Ld/orsbexFLVyRD2cSA0PsFxen164LkzXW+
LuLlBjRh3g47ib/fp6Guu8pUR3P6BDXr44Rcdv6292VrDB4EBNyT4tni0oa8Z9mm
ggX4Sw4hVA1kVrfMlsMgo3mq9BzLBuof/AFRXGaP8veFbAExppYFVcuBJhH8YP0p
DR5Mx5glcjmT/rE9yGDTWeqHiZffcfEv
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:34:23 2025 by rpki-client