Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0082EE54CEED11EF996EEE6A762E951A.roa
File: 0082EE54CEED11EF996EEE6A762E951A.roa (raw, json)
Hash identifier: H3FdTaf956/sW8646Ph64OyWydtOZbKhcW+124CShFE=
Subject key identifier: 09:99:07:E1:39:0B:93:31:95:E9:F5:52:E3:84:C9:8E:29:65:20:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013968
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0082EE54CEED11EF996EEE6A762E951A.roa
Signing time: Fri 10 Jan 2025 00:51:18 +0000
ROA not before: Fri 10 Jan 2025 00:00:15 +0000
ROA not after: Thu 13 Feb 2025 00:00:15 +0000
asID: 54801
IP address blocks: 154.83.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80232 (0x13968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 00:00:15 2025 GMT
Not After : Feb 13 00:00:15 2025 GMT
Subject: CN=67806f06-c1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:59:04:4c:37:41:8b:eb:49:72:14:7c:a3:
8b:2e:11:6c:f7:33:28:da:05:75:79:20:a1:07:f4:
a9:2b:86:af:bb:54:e1:c6:df:67:15:04:25:a7:37:
b8:7d:0b:18:8a:69:2d:6d:38:31:bc:33:46:c5:6d:
3f:5a:16:42:9e:c7:8c:e8:74:f3:f5:c7:20:e2:67:
5e:26:92:07:76:47:44:2f:5b:9d:d1:49:54:4b:91:
c2:04:b3:d8:5b:3f:05:06:f3:e4:3a:a5:0b:94:b2:
0c:4d:58:5e:fc:4f:fd:c8:d7:c2:31:f1:fd:36:ce:
12:f3:c4:1d:8f:f4:97:17:df:e5:09:06:a1:d2:a9:
1e:7d:2e:55:50:e8:a9:70:73:61:71:e9:8e:58:8b:
14:c8:bd:10:10:9e:62:e8:35:de:4f:a6:f5:db:05:
cc:26:f8:39:18:df:9d:e7:b7:9c:b1:05:d8:c6:dc:
28:81:de:4b:09:fa:53:2c:b7:7f:a4:ba:8e:a7:98:
8e:14:f9:1a:fb:e1:78:2a:80:0a:62:42:80:07:77:
45:95:f6:96:f5:da:ef:df:8b:0e:f1:61:d8:88:e7:
da:e7:75:2a:bd:40:8d:bc:83:7e:14:f3:eb:30:f9:
59:f8:ce:fe:10:f9:cd:5a:a2:68:69:f4:ef:e4:df:
0f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:99:07:E1:39:0B:93:31:95:E9:F5:52:E3:84:C9:8E:29:65:20:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0082EE54CEED11EF996EEE6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.209.0/24
Signature Algorithm: sha256WithRSAEncryption
89:5f:fb:04:46:89:a5:fa:68:bf:16:b4:cc:c4:bf:d6:8e:4b:
7e:fd:2b:04:db:30:d0:b2:5f:f4:c5:5f:89:5f:c3:48:46:3f:
eb:c4:cc:a8:55:64:fe:ce:68:86:32:83:3b:17:c8:10:50:d6:
27:29:1d:83:15:12:98:25:4a:f7:82:15:71:dd:ca:57:6d:50:
b5:8c:c8:25:33:21:a7:5e:98:54:a6:8d:dc:21:54:63:55:44:
54:29:2b:8f:0b:19:09:e4:de:55:e4:2c:43:7c:73:ef:65:5a:
ef:51:78:55:8d:35:73:92:bd:94:d2:f2:0b:61:0f:e4:16:8e:
fc:f3:d0:8a:20:0f:e9:c3:09:64:b6:15:d2:af:9f:f6:a5:ba:
c4:f7:80:46:4c:75:29:85:06:59:4e:a4:4d:45:92:a4:e0:10:
a9:7e:46:a1:d6:a8:71:ed:19:06:ab:94:e6:f9:5d:3e:75:6a:
dd:06:19:7f:cd:50:f1:bb:ae:73:2b:79:50:4d:d7:3f:1d:26:
7e:d9:2a:c0:8a:56:ae:eb:86:fe:1d:c7:9e:9e:de:8a:57:09:
0c:e1:7c:7b:c4:f9:6a:9a:ce:cf:14:20:f9:9c:4d:cb:c3:45:
c0:30:e4:fd:85:d3:b9:98:33:e1:14:91:ef:25:ee:ef:7e:24:
7c:fe:f3:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATloMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTEwMDAwMDE1WhcNMjUwMjEzMDAwMDE1WjAYMRYw
FAYDVQQDEw02NzgwNmYwNi1jMWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxHVZBEw3QYvrSXIUfKOLLhFs9zMo2gV1eSChB/SpK4avu1Thxt9nFQQl
pze4fQsYimktbTgxvDNGxW0/WhZCnseM6HTz9ccg4mdeJpIHdkdEL1ud0UlUS5HC
BLPYWz8FBvPkOqULlLIMTVhe/E/9yNfCMfH9Ns4S88Qdj/SXF9/lCQah0qkefS5V
UOipcHNhcemOWIsUyL0QEJ5i6DXeT6b12wXMJvg5GN+d57ecsQXYxtwogd5LCfpT
LLd/pLqOp5iOFPka++F4KoAKYkKAB3dFlfaW9drv34sO8WHYiOfa53UqvUCNvIN+
FPPrMPlZ+M7+EPnNWqJoafTv5N8PZQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAmZ
B+E5C5Mxlen1UuOEyY4pZSA6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMDgyRUU1NENFRUQxMUVGOTk2RUVFNkE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlPRMA0GCSqGSIb3DQEB
CwUAA4IBAQCJX/sERoml+mi/FrTMxL/Wjkt+/SsE2zDQsl/0xV+JX8NIRj/rxMyo
VWT+zmiGMoM7F8gQUNYnKR2DFRKYJUr3ghVx3cpXbVC1jMglMyGnXphUpo3cIVRj
VURUKSuPCxkJ5N5V5CxDfHPvZVrvUXhVjTVzkr2U0vILYQ/kFo7889CKIA/pwwlk
thXSr5/2pbrE94BGTHUphQZZTqRNRZKk4BCpfkah1qhx7RkGq5Tm+V0+dWrdBhl/
zVDxu65zK3lQTdc/HSZ+2SrAilau64b+Hceent6KVwkM4Xx7xPlqms7PFCD5nE3L
w0XAMOT9hdO5mDPhFJHvJe7vfiR8/vMx
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:43:45 2025 by rpki-client