Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58401002DA3911EFA90B20B8762E951A.roa
File: 58401002DA3911EFA90B20B8762E951A.roa (raw, json)
Hash identifier: KCU/fAz0dH+fv478AkMKZCshq1XTPBAJ09Z9Z5cutXE=
Subject key identifier: 21:71:0D:37:C5:1D:30:A0:85:7A:7E:01:88:23:6F:32:B8:99:9E:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014535
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58401002DA3911EFA90B20B8762E951A.roa
Signing time: Fri 24 Jan 2025 09:55:30 +0000
ROA not before: Fri 24 Jan 2025 09:55:26 +0000
ROA not after: Wed 05 Mar 2025 09:55:26 +0000
asID: 202656
IP address blocks: 154.219.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83253 (0x14535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:55:26 2025 GMT
Not After : Mar 5 09:55:26 2025 GMT
Subject: CN=67936392-ea3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:d0:71:b7:1a:f8:2c:70:46:f8:c5:0b:ca:
8e:56:96:c8:af:0c:48:ea:ca:05:84:88:de:6d:19:
f7:5a:2d:fe:b3:80:5c:0f:73:44:37:62:08:a9:e7:
44:db:3d:bf:6d:c9:44:96:21:aa:cd:e8:bd:81:1e:
96:56:47:7e:48:b0:8b:bc:55:5c:7f:99:61:e1:d2:
14:57:56:57:04:85:9b:0d:a9:85:dd:07:af:58:3c:
52:5d:de:95:aa:40:5c:20:20:64:27:c2:e4:81:7b:
62:18:2f:ef:c0:f7:3a:2e:16:f9:24:d3:b8:c0:8f:
ee:2c:9f:f4:60:2b:f6:56:ed:b9:9e:e5:6e:06:4b:
0f:a3:0e:4d:c5:8c:69:be:56:18:56:b3:21:b2:02:
8a:ed:a2:f9:70:d8:00:16:1a:7e:05:92:77:c2:86:
d3:3a:c6:53:53:34:5e:90:24:51:a6:c3:8e:d2:2b:
42:91:12:15:6d:20:92:98:a8:80:91:07:97:2e:41:
8e:ec:3f:67:4a:40:7a:e5:6b:c7:c3:dd:3e:d2:ed:
db:60:83:b0:51:e3:0b:94:8d:84:1f:a6:4e:31:b3:
18:bd:fc:95:74:9b:6a:9d:f0:d1:c1:af:5d:ce:0a:
90:83:e0:34:e5:44:0d:0c:02:71:7e:be:d4:ac:3f:
61:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:71:0D:37:C5:1D:30:A0:85:7A:7E:01:88:23:6F:32:B8:99:9E:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58401002DA3911EFA90B20B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.233.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b0:24:42:8c:3d:47:62:4d:22:3a:54:53:be:51:d8:17:80:
c4:dd:9a:a9:9a:80:5e:e7:7d:cb:a2:a4:5e:13:cc:44:ef:d2:
e9:f5:d5:d3:54:05:35:be:a9:73:d6:53:a6:df:f1:9a:e6:43:
8c:75:ae:60:89:ea:62:98:a8:28:23:f6:8f:81:b1:d3:5a:c8:
89:15:50:64:c8:ea:fd:0d:c8:1c:15:35:50:c6:90:b5:e1:d2:
02:53:49:cc:6c:29:03:d7:f7:a4:fe:f8:a8:df:51:eb:1c:95:
d4:e9:71:ef:62:71:c0:52:1b:8f:66:64:6c:e4:be:e6:54:d2:
ce:3f:53:a6:a6:67:02:73:fd:52:60:81:3f:8a:21:f6:59:19:
1d:68:1f:59:14:ad:78:30:5a:d5:20:f1:a5:f1:cd:75:88:33:
b7:40:54:ec:1a:30:2b:87:8b:c5:ed:07:ee:9e:22:bd:7f:e0:
36:aa:3f:76:d0:ba:58:1c:f6:97:e6:cf:e8:84:5b:47:5c:6e:
ba:55:5d:e8:aa:71:03:05:8c:c0:20:76:69:67:45:f3:a0:35:
5b:bd:3a:0e:eb:e0:95:86:04:95:4f:50:ca:a8:9e:21:15:c2:
c0:56:01:ba:fc:6a:ad:0c:4f:73:17:43:6a:bd:f5:43:f0:f6:
f0:55:1a:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUU1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MDk1NTI2WhcNMjUwMzA1MDk1NTI2WjAYMRYw
FAYDVQQDEw02NzkzNjM5Mi1lYTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArLHQcbca+CxwRvjFC8qOVpbIrwxI6soFhIjebRn3Wi3+s4BcD3NEN2II
qedE2z2/bclEliGqzei9gR6WVkd+SLCLvFVcf5lh4dIUV1ZXBIWbDamF3QevWDxS
Xd6VqkBcICBkJ8LkgXtiGC/vwPc6Lhb5JNO4wI/uLJ/0YCv2Vu25nuVuBksPow5N
xYxpvlYYVrMhsgKK7aL5cNgAFhp+BZJ3wobTOsZTUzRekCRRpsOO0itCkRIVbSCS
mKiAkQeXLkGO7D9nSkB65WvHw90+0u3bYIOwUeMLlI2EH6ZOMbMYvfyVdJtqnfDR
wa9dzgqQg+A05UQNDAJxfr7UrD9hnQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCFx
DTfFHTCghXp+AYgjbzK4mZ7oMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81ODQwMTAwMkRBMzkxMUVGQTkwQjIwQjg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtvpMA0GCSqGSIb3DQEB
CwUAA4IBAQApsCRCjD1HYk0iOlRTvlHYF4DE3ZqpmoBe533LoqReE8xE79Lp9dXT
VAU1vqlz1lOm3/Ga5kOMda5giepimKgoI/aPgbHTWsiJFVBkyOr9DcgcFTVQxpC1
4dICU0nMbCkD1/ek/vio31HrHJXU6XHvYnHAUhuPZmRs5L7mVNLOP1OmpmcCc/1S
YIE/iiH2WRkdaB9ZFK14MFrVIPGl8c11iDO3QFTsGjArh4vF7QfuniK9f+A2qj92
0LpYHPaX5s/ohFtHXG66VV3oqnEDBYzAIHZpZ0XzoDVbvToO6+CVhgSVT1DKqJ4h
FcLAVgG6/GqtDE9zF0NqvfVD8PbwVRru
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:17 2025 by rpki-client