Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89059332D96D11EFB01F8F5B762E951A.roa
File: 89059332D96D11EFB01F8F5B762E951A.roa (raw, json)
Hash identifier: LGa52U4zXiqVTUJS/QOxh7D0w6woJGko71PNE+UOaD0=
Subject key identifier: 45:49:4C:AD:24:71:3F:1E:39:23:61:45:73:68:E1:03:9C:F7:3C:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89059332D96D11EFB01F8F5B762E951A.roa
Signing time: Thu 23 Jan 2025 09:36:35 +0000
ROA not before: Thu 23 Jan 2025 09:36:31 +0000
ROA not after: Fri 28 Feb 2025 09:36:31 +0000
asID: 62240
IP address blocks: 154.194.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82162 (0x140f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:36:31 2025 GMT
Not After : Feb 28 09:36:31 2025 GMT
Subject: CN=67920da2-3aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:64:29:24:1e:42:7c:a0:41:3a:a8:8e:86:f5:
ad:25:56:f5:7f:fb:a9:fd:57:bf:45:e0:01:be:d8:
2d:8a:fa:27:b8:90:89:a2:54:c6:f3:e8:93:90:cd:
17:62:ee:f6:17:f7:1c:84:11:ac:b0:fa:9b:5b:de:
c6:f7:28:db:c8:e8:8a:f0:3a:77:dd:55:07:64:21:
7a:87:36:00:67:a8:d4:23:73:af:9d:87:fe:57:48:
50:63:e6:79:3e:db:4b:f7:d4:e4:5d:87:df:40:2e:
43:9e:f0:e0:f3:64:77:0f:fa:de:b4:27:37:d8:3b:
0f:fe:aa:e3:90:a4:c9:9c:41:13:ac:14:87:4a:40:
83:ef:a9:f5:24:6d:1e:69:54:95:c4:2c:0b:49:19:
0b:55:66:83:8d:e2:b3:2a:8f:9e:c7:0f:db:13:16:
37:f7:d4:f3:7d:2d:d4:c2:b4:f8:6d:92:c4:74:75:
a7:c9:35:5b:ec:b2:4d:73:7f:aa:b1:25:dd:53:f3:
5b:74:96:a8:be:0e:32:ad:2b:2d:a9:e5:6d:08:dd:
aa:2c:84:bc:0b:48:83:36:0a:71:51:4b:9d:ae:7a:
a9:4b:dd:24:ac:c7:ca:32:d2:5c:9d:ee:1d:af:1a:
39:a2:fd:dd:56:25:c1:1c:b1:68:40:e4:b2:08:30:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:49:4C:AD:24:71:3F:1E:39:23:61:45:73:68:E1:03:9C:F7:3C:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89059332D96D11EFB01F8F5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.115.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a8:2c:1e:2c:76:96:fd:30:aa:af:9e:c4:eb:5b:89:bb:17:
14:10:1c:0e:94:cb:f5:91:f3:2c:03:02:0c:35:7e:45:2e:23:
ca:9a:51:4b:18:3d:6d:8b:72:b9:47:20:e1:9e:f8:dd:a5:9a:
d2:47:1e:34:97:2c:50:12:f6:17:20:77:57:73:60:77:a1:6d:
d0:4f:bb:71:31:16:8e:1c:d8:44:a1:22:db:37:3a:13:1a:34:
78:98:79:07:38:e9:82:c4:03:9f:53:d0:25:de:02:a8:11:27:
5c:54:a5:e3:a3:21:81:3f:49:d8:1e:fb:78:aa:61:c1:6b:7b:
46:f0:6d:9c:93:5b:dd:6f:fe:99:b0:50:d2:b1:2e:ec:7c:13:
a4:45:65:dd:bb:5f:73:ca:78:45:15:ac:78:f9:c6:5a:19:92:
9b:52:01:53:78:95:c9:99:94:22:b3:45:2e:b7:4c:c1:98:b5:
d0:b1:2f:e4:7f:78:02:fd:81:4b:4e:08:d1:15:b9:1f:fb:82:
12:16:48:3d:19:36:86:c3:67:dc:0d:d8:04:fe:ee:f7:51:9d:
49:00:ec:63:08:7a:d2:77:a8:4d:0d:93:9e:84:4d:67:b6:f9:
b3:5c:fd:a6:a6:83:12:a2:49:d9:75:fb:dc:2e:75:ad:1d:5c:
23:d3:c5:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUDyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMDkzNjMxWhcNMjUwMjI4MDkzNjMxWjAYMRYw
FAYDVQQDEw02NzkyMGRhMi0zYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6GQpJB5CfKBBOqiOhvWtJVb1f/up/Ve/ReABvtgtivonuJCJolTG8+iT
kM0XYu72F/cchBGssPqbW97G9yjbyOiK8Dp33VUHZCF6hzYAZ6jUI3OvnYf+V0hQ
Y+Z5PttL99TkXYffQC5DnvDg82R3D/retCc32DsP/qrjkKTJnEETrBSHSkCD76n1
JG0eaVSVxCwLSRkLVWaDjeKzKo+exw/bExY399TzfS3UwrT4bZLEdHWnyTVb7LJN
c3+qsSXdU/NbdJaovg4yrSstqeVtCN2qLIS8C0iDNgpxUUudrnqpS90krMfKMtJc
ne4drxo5ov3dViXBHLFoQOSyCDAK2QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEVJ
TK0kcT8eOSNhRXNo4QOc9zxyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84OTA1OTMzMkQ5NkQxMUVGQjAxRjhGNUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJzMA0GCSqGSIb3DQEB
CwUAA4IBAQCAqCweLHaW/TCqr57E61uJuxcUEBwOlMv1kfMsAwIMNX5FLiPKmlFL
GD1ti3K5RyDhnvjdpZrSRx40lyxQEvYXIHdXc2B3oW3QT7txMRaOHNhEoSLbNzoT
GjR4mHkHOOmCxAOfU9Al3gKoESdcVKXjoyGBP0nYHvt4qmHBa3tG8G2ck1vdb/6Z
sFDSsS7sfBOkRWXdu19zynhFFax4+cZaGZKbUgFTeJXJmZQis0Uut0zBmLXQsS/k
f3gC/YFLTgjRFbkf+4ISFkg9GTaGw2fcDdgE/u73UZ1JAOxjCHrSd6hNDZOehE1n
tvmzXP2mpoMSoknZdfvcLnWtHVwj08Wx
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:20:14 2025 by rpki-client