Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14DD7A58DA4711EFA4AF0097762E951A.roa
File: 14DD7A58DA4711EFA4AF0097762E951A.roa (raw, json)
Hash identifier: XmdtDOdY9VBzM0FtcaLliubIWs5edAlH/2efddn3usQ=
Subject key identifier: CF:FF:A7:BE:73:34:D5:4B:DF:9C:65:DD:81:53:4A:3D:DC:E8:C2:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01461D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14DD7A58DA4711EFA4AF0097762E951A.roa
Signing time: Fri 24 Jan 2025 11:33:50 +0000
ROA not before: Fri 24 Jan 2025 11:33:46 +0000
ROA not after: Fri 28 Feb 2025 11:33:46 +0000
asID: 62240
IP address blocks: 154.196.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83485 (0x1461d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:33:46 2025 GMT
Not After : Feb 28 11:33:46 2025 GMT
Subject: CN=67937a9e-4e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:aa:02:a2:7e:53:86:eb:64:7e:c5:cf:4c:64:
c3:aa:b8:33:a5:0f:0d:31:78:58:4d:6b:89:f4:de:
53:ae:f2:90:e7:7a:03:57:5c:f9:28:ad:78:59:71:
2e:ad:10:20:d1:f5:48:a3:75:83:2a:bc:46:5d:c8:
61:1e:51:34:d0:f7:0f:4c:c1:f4:10:b2:61:e6:5e:
8b:55:ef:13:b3:af:6e:0e:a1:a5:ee:30:95:af:bc:
63:99:40:fb:b6:8c:3e:c8:aa:17:58:b8:a1:ed:d9:
18:72:bf:b1:37:91:c1:ec:ad:48:60:9d:f6:66:82:
2d:39:1a:06:89:cb:17:57:0f:99:a2:85:e9:ed:f9:
40:f9:81:02:f0:ab:19:fd:fd:6f:bd:58:c6:18:f7:
54:9b:54:fc:06:0f:78:d4:1f:b4:4d:99:2f:02:dd:
69:30:e6:ab:26:5a:67:d1:11:55:e8:ea:b5:32:a8:
9a:37:e3:2a:fd:b9:bc:f7:95:f4:f8:f1:6b:e0:7c:
26:71:4c:d8:bf:55:87:5e:c7:96:c6:d8:95:a7:b0:
64:3c:7f:66:fa:24:c2:56:9c:e2:97:ab:e3:1f:1d:
4b:23:c4:eb:d4:2e:56:23:71:32:29:06:35:4b:64:
d3:28:20:40:e0:af:5f:85:0a:0e:4b:70:84:7a:0b:
76:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FF:A7:BE:73:34:D5:4B:DF:9C:65:DD:81:53:4A:3D:DC:E8:C2:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14DD7A58DA4711EFA4AF0097762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.88.0/24
Signature Algorithm: sha256WithRSAEncryption
95:06:cf:7f:d8:90:04:e3:9a:46:74:3c:46:6b:e5:da:54:70:
9b:01:6c:76:de:2c:d0:5f:eb:27:34:4b:b9:94:e8:d4:2c:a0:
95:93:f1:e8:72:ae:a1:64:1c:b8:2c:0b:ba:14:e4:4a:78:4b:
99:91:64:96:1a:60:69:6d:aa:72:52:4c:8e:e3:b1:6e:9a:65:
e6:71:2a:8c:eb:87:7f:63:62:fa:3d:64:0a:4f:a1:0a:fc:1e:
c2:20:77:71:d8:63:bd:b6:66:29:d4:ac:cb:1a:c2:dc:db:16:
ee:e1:4b:d6:64:2c:e7:e1:ff:ed:ed:53:bb:87:01:5e:39:f4:
63:a6:11:c8:e8:c7:cb:4d:83:e5:62:57:17:9a:cc:e6:f1:b2:
f9:f2:06:db:d2:bc:97:c9:ca:ab:af:53:91:47:48:69:c8:99:
7a:7a:8a:64:92:43:6c:1b:02:6a:43:9d:55:11:4f:19:cb:7e:
8e:a3:fc:62:95:22:4f:0c:0b:13:74:29:08:fd:f4:f0:2a:fe:
d9:ef:23:9f:de:6f:59:f6:fe:c4:24:53:1e:8d:8c:da:50:56:
5e:2a:e4:aa:84:b3:df:3e:c8:bb:77:ea:2f:e6:a9:9d:25:cc:
99:af:71:1d:97:6a:0c:e7:d5:fd:fc:79:28:1b:c9:00:61:ce:
03:61:b1:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUYdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTEzMzQ2WhcNMjUwMjI4MTEzMzQ2WjAYMRYw
FAYDVQQDEw02NzkzN2E5ZS00ZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1aoCon5ThutkfsXPTGTDqrgzpQ8NMXhYTWuJ9N5TrvKQ53oDV1z5KK14
WXEurRAg0fVIo3WDKrxGXchhHlE00PcPTMH0ELJh5l6LVe8Ts69uDqGl7jCVr7xj
mUD7tow+yKoXWLih7dkYcr+xN5HB7K1IYJ32ZoItORoGicsXVw+ZooXp7flA+YEC
8KsZ/f1vvVjGGPdUm1T8Bg941B+0TZkvAt1pMOarJlpn0RFV6Oq1MqiaN+Mq/bm8
95X0+PFr4HwmcUzYv1WHXseWxtiVp7BkPH9m+iTCVpzil6vjHx1LI8Tr1C5WI3Ey
KQY1S2TTKCBA4K9fhQoOS3CEegt2HwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM//
p75zNNVL35xl3YFTSj3c6MInMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNEREN0E1OERBNDcxMUVGQTRBRjAwOTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsRYMA0GCSqGSIb3DQEB
CwUAA4IBAQCVBs9/2JAE45pGdDxGa+XaVHCbAWx23izQX+snNEu5lOjULKCVk/Ho
cq6hZBy4LAu6FORKeEuZkWSWGmBpbapyUkyO47FummXmcSqM64d/Y2L6PWQKT6EK
/B7CIHdx2GO9tmYp1KzLGsLc2xbu4UvWZCzn4f/t7VO7hwFeOfRjphHI6MfLTYPl
YlcXmszm8bL58gbb0ryXycqrr1ORR0hpyJl6eopkkkNsGwJqQ51VEU8Zy36Oo/xi
lSJPDAsTdCkI/fTwKv7Z7yOf3m9Z9v7EJFMejYzaUFZeKuSqhLPfPsi7d+ov5qmd
JcyZr3Edl2oM59X9/HkoG8kAYc4DYbGG
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:45:36 2025 by rpki-client