Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65DA6FF0B21B11EF853801B3762E951A.roa
File: 65DA6FF0B21B11EF853801B3762E951A.roa (raw, json)
Hash identifier: 5vBxwFjMQQXOgZ1ttTNNNVG0bK8V8WLydKmyqZVTtQ0=
Subject key identifier: A7:93:9A:18:C4:34:5F:47:B5:A1:0A:13:9E:9E:D1:C5:0C:61:82:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65DA6FF0B21B11EF853801B3762E951A.roa
Signing time: Wed 04 Dec 2024 08:40:21 +0000
ROA not before: Wed 04 Dec 2024 08:40:18 +0000
ROA not after: Sat 01 Feb 2025 08:40:18 +0000
asID: 55320
IP address blocks: 154.93.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71656 (0x117e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 08:40:18 2024 GMT
Not After : Feb 1 08:40:18 2025 GMT
Subject: CN=67501575-4402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:55:13:fe:04:14:ee:7e:fe:64:46:b8:b8:
8f:28:47:73:57:46:da:70:bc:54:c7:cd:3c:3c:cf:
34:7e:ab:e8:06:ac:92:46:2e:c4:64:95:81:ae:66:
ba:e2:44:6f:24:15:3d:66:c8:cc:fe:2e:5d:95:ed:
00:99:0a:4a:d0:ec:3a:74:63:27:20:e0:47:e1:68:
08:f2:93:68:49:c9:79:21:b0:22:27:2c:af:30:cb:
55:ce:89:09:e5:fc:35:f1:cb:04:8b:58:8b:78:e6:
c8:49:c8:ba:c8:f9:70:65:e1:53:ea:69:5d:c7:f5:
72:51:fc:09:d2:d6:21:00:ac:a3:05:5a:75:e9:a9:
02:dd:8f:bd:f0:23:0e:91:06:75:57:87:d9:de:a8:
b6:31:0f:4e:9f:44:7f:8c:e1:5a:d1:69:ae:76:10:
70:4a:98:48:41:12:ff:95:70:75:49:6d:3c:ec:0a:
38:20:43:5c:b6:4f:58:73:b7:ec:71:f3:f7:f4:1e:
20:fe:cb:2e:a0:39:96:fc:09:d6:d7:7c:74:d0:3c:
ae:53:d2:2e:ce:b9:6f:e7:18:40:19:95:e7:88:4d:
99:8c:55:e5:ad:1c:c2:ac:2f:46:f3:81:74:71:39:
c0:cc:48:9a:72:12:1e:c5:b7:c3:38:67:e7:c3:37:
77:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:93:9A:18:C4:34:5F:47:B5:A1:0A:13:9E:9E:D1:C5:0C:61:82:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65DA6FF0B21B11EF853801B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.98.0/24
Signature Algorithm: sha256WithRSAEncryption
10:34:29:13:40:a4:ea:6c:a8:c1:d8:2c:bc:25:c9:c3:6b:36:
a0:67:05:8a:77:49:c8:25:d8:c6:40:33:57:ad:a0:94:a0:2e:
9d:82:5d:15:b2:47:ac:cc:36:1a:15:a5:3a:81:94:0a:2f:50:
fd:48:ad:e4:1d:29:75:64:e1:6e:a5:22:96:fb:a7:e6:8e:fc:
01:2a:de:1e:a2:3b:3e:69:59:84:ca:cf:24:0f:43:e9:23:d9:
c0:ce:c6:88:fd:46:48:4a:ad:71:10:ea:29:e5:e6:b2:f8:32:
0d:a5:f9:ad:24:5f:f8:8d:43:79:fe:c1:f5:90:83:31:52:86:
e2:6d:80:48:48:9d:95:dc:4e:2e:f8:ce:fa:5a:17:a9:e5:3d:
0e:29:62:5a:f4:91:5b:47:4a:83:c9:1c:40:a7:a6:b8:3f:b9:
92:d8:5b:26:42:2f:26:f6:c9:ff:39:87:39:f1:8a:59:76:8c:
28:fe:95:8a:a4:66:d4:99:03:dd:93:f0:42:f0:c6:e4:4f:0f:
38:4a:55:75:5b:60:5c:72:d1:3b:e2:c6:3f:53:c7:3f:06:90:
d2:84:21:01:6f:f8:b8:8a:1f:37:74:2a:e4:75:3a:ba:4d:0a:
fd:92:c2:b1:8b:c3:75:b1:db:dc:a9:24:30:2a:ad:4e:02:f0:
15:1d:55:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARfoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjA0MDg0MDE4WhcNMjUwMjAxMDg0MDE4WjAYMRYw
FAYDVQQDEw02NzUwMTU3NS00NDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzaxVE/4EFO5+/mRGuLiPKEdzV0bacLxUx808PM80fqvoBqySRi7EZJWB
rma64kRvJBU9ZsjM/i5dle0AmQpK0Ow6dGMnIOBH4WgI8pNoScl5IbAiJyyvMMtV
zokJ5fw18csEi1iLeObISci6yPlwZeFT6mldx/VyUfwJ0tYhAKyjBVp16akC3Y+9
8CMOkQZ1V4fZ3qi2MQ9On0R/jOFa0WmudhBwSphIQRL/lXB1SW087Ao4IENctk9Y
c7fscfP39B4g/ssuoDmW/AnW13x00DyuU9Iuzrlv5xhAGZXniE2ZjFXlrRzCrC9G
84F0cTnAzEiachIexbfDOGfnwzd3kQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKeT
mhjENF9HtaEKE56e0cUMYYLTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NURBNkZGMEIyMUIxMUVGODUzODAxQjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml1iMA0GCSqGSIb3DQEB
CwUAA4IBAQAQNCkTQKTqbKjB2Cy8JcnDazagZwWKd0nIJdjGQDNXraCUoC6dgl0V
skeszDYaFaU6gZQKL1D9SK3kHSl1ZOFupSKW+6fmjvwBKt4eojs+aVmEys8kD0Pp
I9nAzsaI/UZISq1xEOop5eay+DINpfmtJF/4jUN5/sH1kIMxUobibYBISJ2V3E4u
+M76Whep5T0OKWJa9JFbR0qDyRxAp6a4P7mS2FsmQi8m9sn/OYc58YpZdowo/pWK
pGbUmQPdk/BC8MbkTw84SlV1W2BcctE74sY/U8c/BpDShCEBb/i4ih83dCrkdTq6
TQr9ksKxi8N1sdvcqSQwKq1OAvAVHVUj
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:48 2025 by rpki-client