Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DA4A6EEDC9111EF938AF18E762E951A.roa
File: 4DA4A6EEDC9111EF938AF18E762E951A.roa (raw, json)
Hash identifier: FhshX+WesxohVOJWSnyLeOWakp53eZxgkLmlMXZPuLc=
Subject key identifier: 64:7C:25:B8:AE:BF:77:91:C5:8E:CA:B8:8A:D2:2B:87:AF:7F:C4:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B89
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DA4A6EEDC9111EF938AF18E762E951A.roa
Signing time: Mon 27 Jan 2025 09:30:10 +0000
ROA not before: Mon 27 Jan 2025 09:30:07 +0000
ROA not after: Sat 08 Feb 2025 09:30:07 +0000
asID: 5065
IP address blocks: 154.83.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84873 (0x14b89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 09:30:07 2025 GMT
Not After : Feb 8 09:30:07 2025 GMT
Subject: CN=67975222-f15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:de:39:f8:66:5a:0e:e5:9a:96:96:84:4d:
51:93:80:b5:b5:4b:73:f6:ce:c3:ba:bb:02:76:8d:
12:f9:d4:8b:6f:ad:97:d5:80:62:05:84:e3:b0:6c:
85:a1:33:11:d0:aa:98:87:36:73:56:ce:71:01:3b:
82:d0:15:9d:b1:d9:eb:79:8b:02:8c:de:76:eb:37:
e2:58:13:4d:bc:60:11:f5:fc:bf:64:9f:6b:20:c5:
d6:9e:7f:79:73:07:3f:77:a0:c9:66:14:cb:75:f7:
89:2f:c4:07:ad:a7:7e:59:6f:4d:d0:97:53:66:2a:
bc:14:9b:43:e6:24:92:96:52:f1:11:6d:72:14:a0:
bf:b9:0b:87:14:b5:cb:c9:3b:09:0e:0a:1c:51:9f:
f5:e2:a3:60:b4:c6:6b:85:20:6e:a8:cd:b7:5d:10:
49:98:bf:22:50:8f:f3:26:16:ed:12:02:2a:0e:bc:
cd:ab:66:72:0e:09:af:cb:08:fd:b1:ef:00:1c:65:
ce:38:4e:a9:9a:dd:36:6f:be:17:53:2d:c6:0f:4a:
98:b0:cc:4f:60:2a:b8:1a:51:61:fd:38:48:f7:c9:
6d:c6:65:c8:aa:97:68:e4:0d:46:23:93:e5:fb:cb:
2d:6d:81:6f:a9:ed:b3:eb:5f:c3:c4:77:48:ae:d1:
00:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7C:25:B8:AE:BF:77:91:C5:8E:CA:B8:8A:D2:2B:87:AF:7F:C4:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DA4A6EEDC9111EF938AF18E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.200.0/24
Signature Algorithm: sha256WithRSAEncryption
17:8e:9e:90:61:5b:ab:bb:0b:d3:81:91:7c:4a:a5:d6:5d:e8:
46:82:00:1b:19:83:c8:78:66:e0:eb:e4:c1:13:c2:f5:53:ad:
35:8a:85:99:03:6a:43:df:9f:7e:4a:e2:92:db:8c:c1:70:7f:
eb:a9:c5:c8:a5:ac:51:65:43:82:5f:93:15:05:2d:28:98:51:
51:83:f7:81:38:8e:54:a1:64:b1:c8:a9:5f:25:4d:a7:fb:d9:
00:a2:8c:80:4b:ad:7e:09:d1:8c:21:81:44:bd:50:13:02:4d:
d0:6f:4f:06:48:70:e7:89:a8:bd:7c:77:0b:e3:0d:7d:19:5d:
b1:4f:ae:43:30:94:9a:99:f0:7e:1a:32:98:ba:bd:4f:7a:8e:
cb:d5:1e:9d:52:4e:da:55:ef:a6:62:89:84:ab:51:a2:4f:18:
b8:8f:a7:f6:a0:e8:fd:7a:38:65:1d:b7:25:9c:bd:91:c1:5c:
32:b6:b3:a6:56:72:2d:75:95:cc:ab:eb:6b:aa:eb:9b:f2:47:
6f:e8:0d:cc:62:30:15:21:1b:4f:06:f7:6b:4b:41:47:06:c5:
dc:7a:26:43:60:dd:cc:99:83:96:be:43:c1:27:1e:55:71:30:
ca:44:0c:42:f9:fe:8f:77:f3:ac:38:61:27:97:76:b3:72:d8:
2b:80:97:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUuJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI3MDkzMDA3WhcNMjUwMjA4MDkzMDA3WjAYMRYw
FAYDVQQDEw02Nzk3NTIyMi1mMTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxWHeOfhmWg7lmpaWhE1Rk4C1tUtz9s7DursCdo0S+dSLb62X1YBiBYTj
sGyFoTMR0KqYhzZzVs5xATuC0BWdsdnreYsCjN526zfiWBNNvGAR9fy/ZJ9rIMXW
nn95cwc/d6DJZhTLdfeJL8QHrad+WW9N0JdTZiq8FJtD5iSSllLxEW1yFKC/uQuH
FLXLyTsJDgocUZ/14qNgtMZrhSBuqM23XRBJmL8iUI/zJhbtEgIqDrzNq2ZyDgmv
ywj9se8AHGXOOE6pmt02b74XUy3GD0qYsMxPYCq4GlFh/ThI98ltxmXIqpdo5A1G
I5Pl+8stbYFvqe2z61/DxHdIrtEAswIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGR8
Jbiuv3eRxY7KuIrSK4evf8TXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80REE0QTZFRURDOTExMUVGOTM4QUYxOEU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlPIMA0GCSqGSIb3DQEB
CwUAA4IBAQAXjp6QYVuruwvTgZF8SqXWXehGggAbGYPIeGbg6+TBE8L1U601ioWZ
A2pD359+SuKS24zBcH/rqcXIpaxRZUOCX5MVBS0omFFRg/eBOI5UoWSxyKlfJU2n
+9kAooyAS61+CdGMIYFEvVATAk3Qb08GSHDniai9fHcL4w19GV2xT65DMJSamfB+
GjKYur1Peo7L1R6dUk7aVe+mYomEq1GiTxi4j6f2oOj9ejhlHbclnL2RwVwytrOm
VnItdZXMq+trquub8kdv6A3MYjAVIRtPBvdrS0FHBsXceiZDYN3MmYOWvkPBJx5V
cTDKRAxC+f6Pd/OsOGEnl3azctgrgJew
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:50:10 2025 by rpki-client