Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58CDED60DE2A11EFB2FC975A762E951A.roa
File: 58CDED60DE2A11EFB2FC975A762E951A.roa (raw, json)
Hash identifier: xdXZNThsUP//5TD6A7/2jpkNQ1mR9hb2LTzMaOK6A9E=
Subject key identifier: F7:D9:0E:DB:13:5A:14:8B:6C:8C:72:99:1A:F7:4C:52:AC:7B:EA:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58CDED60DE2A11EFB2FC975A762E951A.roa
Signing time: Wed 29 Jan 2025 10:18:13 +0000
ROA not before: Wed 29 Jan 2025 10:18:09 +0000
ROA not after: Wed 05 Mar 2025 10:18:09 +0000
asID: 203020
IP address blocks: 154.204.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85394 (0x14d92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 10:18:09 2025 GMT
Not After : Mar 5 10:18:09 2025 GMT
Subject: CN=679a0065-37a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4d:c4:a9:2f:f6:90:a0:f0:9e:6f:d8:cd:1d:
7d:fe:dd:38:c2:a4:83:97:b5:73:3b:08:50:08:99:
52:72:b0:47:74:bf:30:4a:95:23:6f:41:b0:99:b0:
87:26:b2:9b:b0:31:46:13:73:63:da:11:e1:78:ae:
9b:e0:16:f4:88:89:6d:48:7f:0d:66:d2:f4:29:fa:
7f:e5:27:e4:68:77:84:cd:00:5b:18:6d:27:ac:64:
ac:62:87:3b:4f:32:d2:5c:1f:ea:10:aa:e9:03:44:
3a:90:51:fa:af:02:b9:bc:21:fb:eb:7a:4a:53:4f:
b6:d6:7d:a5:4a:13:71:f3:31:4f:e8:5b:2c:3f:7b:
47:21:25:43:3b:7f:07:d7:ee:e3:fe:17:d0:f8:42:
ee:01:cc:23:ac:f7:77:2a:6e:17:8e:a6:f5:24:c2:
e2:42:67:2b:85:3e:c8:f6:4b:99:71:20:2d:57:b5:
c2:e6:5c:3f:c7:c4:f0:38:b3:a4:e2:59:a7:ea:84:
d4:39:84:1c:09:c7:ea:00:0d:66:09:6a:7c:84:51:
24:5d:0c:07:e3:26:50:d5:6a:4b:9e:78:f6:e3:d8:
e6:4f:d2:33:3a:6e:f4:db:ea:3c:71:7f:c4:97:c0:
ec:f2:d4:87:31:27:fd:74:bb:53:55:4f:b7:e7:5a:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D9:0E:DB:13:5A:14:8B:6C:8C:72:99:1A:F7:4C:52:AC:7B:EA:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58CDED60DE2A11EFB2FC975A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.40.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e0:1d:27:4a:ca:90:d2:e3:a4:e5:b2:9a:0f:e2:e1:89:af:
fc:e0:86:42:6b:63:92:8c:56:88:fa:8d:71:29:d3:d3:86:07:
6d:50:a1:e4:ea:a9:f6:fc:63:40:30:66:94:95:63:70:05:54:
27:fa:2d:a3:58:e2:fe:de:6d:89:86:bf:88:65:4e:f1:ce:57:
c5:3a:a2:15:f8:16:75:4f:e5:ac:94:b1:99:b9:eb:6e:3f:21:
4c:c7:68:d8:ef:78:b0:2b:49:03:98:84:b0:e5:c4:9d:b4:58:
03:fb:fd:d0:37:b9:ec:ac:bb:63:e2:41:c5:9f:58:fa:67:57:
6a:9a:e2:4e:f6:ce:9c:c0:42:ca:c9:4a:83:a9:60:bf:af:30:
c7:49:2c:ad:94:1f:b0:91:d5:aa:4b:78:f8:27:56:c0:0b:68:
7c:41:96:d8:9a:79:65:50:25:1b:5c:7c:79:4d:53:56:2f:b7:
43:e1:1f:89:90:ed:97:86:c2:49:f9:45:41:16:47:d2:96:a5:
4e:97:34:bd:04:1f:8e:93:9b:7e:97:98:97:52:b2:95:2e:16:
2a:55:60:06:87:9f:51:0b:5f:e3:d0:d8:47:00:ca:e0:f8:b1:
e1:dd:2c:2e:12:ff:9a:c2:24:40:22:74:1c:46:66:4c:1a:c7:
24:27:25:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU2SMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI5MTAxODA5WhcNMjUwMzA1MTAxODA5WjAYMRYw
FAYDVQQDEw02NzlhMDA2NS0zN2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5E3EqS/2kKDwnm/YzR19/t04wqSDl7VzOwhQCJlScrBHdL8wSpUjb0Gw
mbCHJrKbsDFGE3Nj2hHheK6b4Bb0iIltSH8NZtL0Kfp/5SfkaHeEzQBbGG0nrGSs
Yoc7TzLSXB/qEKrpA0Q6kFH6rwK5vCH763pKU0+21n2lShNx8zFP6FssP3tHISVD
O38H1+7j/hfQ+ELuAcwjrPd3Km4Xjqb1JMLiQmcrhT7I9kuZcSAtV7XC5lw/x8Tw
OLOk4lmn6oTUOYQcCcfqAA1mCWp8hFEkXQwH4yZQ1WpLnnj249jmT9IzOm702+o8
cX/El8Ds8tSHMSf9dLtTVU+351qIPQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPfZ
DtsTWhSLbIxymRr3TFKse+rQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81OENERUQ2MERFMkExMUVGQjJGQzk3NUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmswoMA0GCSqGSIb3DQEB
CwUAA4IBAQCX4B0nSsqQ0uOk5bKaD+Lhia/84IZCa2OSjFaI+o1xKdPThgdtUKHk
6qn2/GNAMGaUlWNwBVQn+i2jWOL+3m2Jhr+IZU7xzlfFOqIV+BZ1T+WslLGZuetu
PyFMx2jY73iwK0kDmISw5cSdtFgD+/3QN7nsrLtj4kHFn1j6Z1dqmuJO9s6cwELK
yUqDqWC/rzDHSSytlB+wkdWqS3j4J1bAC2h8QZbYmnllUCUbXHx5TVNWL7dD4R+J
kO2XhsJJ+UVBFkfSlqVOlzS9BB+Ok5t+l5iXUrKVLhYqVWAGh59RC1/j0NhHAMrg
+LHh3SwuEv+awiRAInQcRmZMGsckJyW1
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:48:30 2025 by rpki-client