Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E58FAB88CDD811EF8C6F3097762E951A.roa
File: E58FAB88CDD811EF8C6F3097762E951A.roa (raw, json)
Hash identifier: IFeoFNVaDGJDIOUrdp8WcsKv9TVxtR2VxP17DYQ0Tok=
Subject key identifier: F4:0A:9D:47:1D:A7:D0:57:13:94:91:3D:04:25:4E:BB:41:84:D1:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013781
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E58FAB88CDD811EF8C6F3097762E951A.roa
Signing time: Wed 08 Jan 2025 15:54:52 +0000
ROA not before: Wed 08 Jan 2025 15:54:48 +0000
ROA not after: Sat 03 Jan 2026 15:54:48 +0000
asID: 984
IP address blocks: 154.89.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79745 (0x13781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 15:54:48 2025 GMT
Not After : Jan 3 15:54:48 2026 GMT
Subject: CN=677e9fcc-7625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:6a:90:de:1a:a3:a5:f7:c3:6c:58:b7:30:
18:f6:ea:eb:ad:0a:02:f8:97:5e:b6:82:7e:5e:a1:
36:66:0f:10:d4:e3:a4:ed:a3:ed:99:dc:dd:71:8d:
bb:0c:9f:03:ce:9b:ba:a0:93:09:37:bb:1b:26:e2:
19:18:2f:4b:07:89:82:86:17:b9:2a:7a:b9:3b:40:
19:2f:e7:6a:f8:a5:f7:d7:bc:19:d6:58:c7:88:c9:
2e:67:8d:8b:8c:b5:04:da:c6:e6:21:18:ba:73:06:
53:44:6f:c2:79:91:01:23:3c:a6:67:89:33:59:b0:
45:35:f8:65:f5:95:33:83:b3:1c:be:8b:16:26:f3:
d8:50:d9:ab:3c:72:d4:f7:0e:33:28:c2:45:68:ed:
9d:f9:e7:cc:49:6b:eb:1a:bf:64:72:ef:d2:4a:ae:
64:72:d0:95:fe:d1:5d:2a:d8:e5:b6:cd:85:d3:96:
35:1c:b3:49:05:b2:b2:6c:09:06:26:5b:72:82:33:
d9:35:77:b8:58:66:d3:e0:bc:91:c8:7e:9b:b6:f3:
27:c7:dc:10:0e:b3:cf:c4:0f:9d:05:55:8e:e0:31:
3b:0b:59:d9:5e:b7:60:18:d3:1d:d6:60:c7:47:f6:
6c:4d:5e:04:8a:f8:f6:cb:d1:a9:6a:5d:95:7a:5d:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0A:9D:47:1D:A7:D0:57:13:94:91:3D:04:25:4E:BB:41:84:D1:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E58FAB88CDD811EF8C6F3097762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.143.0/24
Signature Algorithm: sha256WithRSAEncryption
08:23:3a:c7:53:a0:b2:39:40:6b:9d:24:40:54:b2:e1:e2:b4:
3b:2d:24:cb:c1:d9:db:cb:ce:b9:c7:43:cd:19:fd:ce:e0:02:
5e:2f:24:44:6c:e9:10:f2:d4:25:1c:84:86:2e:44:85:c8:d8:
0d:85:54:44:44:a5:be:06:66:4b:82:9e:fe:05:9c:fd:be:d3:
e6:13:fe:09:03:01:b3:a5:d4:d1:58:f5:bf:56:79:d9:9e:12:
97:eb:e8:cd:e7:db:9a:78:cf:cc:64:b7:66:ff:7d:2e:91:5a:
39:97:d6:e9:03:6f:29:b4:c8:77:f4:3b:52:e1:a0:d4:06:d4:
3c:9c:8a:ad:50:15:19:a4:4e:93:5a:55:e9:73:45:99:ed:72:
e2:81:9b:e7:3c:f5:d4:5b:70:f7:ac:53:01:42:3b:ec:96:e9:
fa:1a:84:fb:94:a5:60:37:e5:df:89:3b:4f:30:d1:67:cc:a0:
16:7e:52:56:65:71:93:ca:4f:c4:14:74:51:55:aa:ac:5c:0f:
01:cc:02:76:f1:92:83:2d:17:19:a0:12:09:1e:3f:9e:79:57:
a4:ad:d0:c1:25:a1:bc:af:6b:e1:6a:61:e2:93:8d:49:5a:42:
21:e7:65:7d:1b:40:1d:f4:f7:68:4d:b6:41:5d:e6:b1:a4:8e:
ef:cc:dd:38
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATeBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MTU1NDQ4WhcNMjYwMTAzMTU1NDQ4WjAYMRYw
FAYDVQQDEw02NzdlOWZjYy03NjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwfVqkN4ao6X3w2xYtzAY9urrrQoC+JdetoJ+XqE2Zg8Q1OOk7aPtmdzd
cY27DJ8Dzpu6oJMJN7sbJuIZGC9LB4mChhe5Knq5O0AZL+dq+KX317wZ1ljHiMku
Z42LjLUE2sbmIRi6cwZTRG/CeZEBIzymZ4kzWbBFNfhl9ZUzg7McvosWJvPYUNmr
PHLU9w4zKMJFaO2d+efMSWvrGr9kcu/SSq5kctCV/tFdKtjlts2F05Y1HLNJBbKy
bAkGJltygjPZNXe4WGbT4LyRyH6btvMnx9wQDrPPxA+dBVWO4DE7C1nZXrdgGNMd
1mDHR/ZsTV4Eivj2y9Gpal2Vel2LhQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPQK
nUcdp9BXE5SRPQQlTrtBhNEPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNThGQUI4OENERDgxMUVGOEM2RjMwOTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlmPMA0GCSqGSIb3DQEB
CwUAA4IBAQAIIzrHU6CyOUBrnSRAVLLh4rQ7LSTLwdnby865x0PNGf3O4AJeLyRE
bOkQ8tQlHISGLkSFyNgNhVRERKW+BmZLgp7+BZz9vtPmE/4JAwGzpdTRWPW/VnnZ
nhKX6+jN59uaeM/MZLdm/30ukVo5l9bpA28ptMh39DtS4aDUBtQ8nIqtUBUZpE6T
WlXpc0WZ7XLigZvnPPXUW3D3rFMBQjvslun6GoT7lKVgN+XfiTtPMNFnzKAWflJW
ZXGTyk/EFHRRVaqsXA8BzAJ28ZKDLRcZoBIJHj+eeVekrdDBJaG8r2vhamHik41J
WkIh52V9G0Ad9PdoTbZBXeaxpI7vzN04
-----END CERTIFICATE-----
Generated at Thu Apr 10 14:14:30 2025 by rpki-client