Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86ED50CEBB7911EF9528C79E762E951A.roa
File: 86ED50CEBB7911EF9528C79E762E951A.roa (raw, json)
Hash identifier: qg197yk4zbeBvCkccfOlhscVvKQZXV8Q7HkUf6lATa0=
Subject key identifier: B4:5B:1C:79:92:CE:71:55:94:4A:36:C4:B3:19:54:62:F6:09:63:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011BA4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86ED50CEBB7911EF9528C79E762E951A.roa
Signing time: Mon 16 Dec 2024 06:46:50 +0000
ROA not before: Mon 16 Dec 2024 06:46:46 +0000
ROA not after: Tue 04 Mar 2025 06:46:46 +0000
asID: 142403
IP address blocks: 154.92.14.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72612 (0x11ba4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 06:46:46 2024 GMT
Not After : Mar 4 06:46:46 2025 GMT
Subject: CN=675fccda-3d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:4f:4a:4a:5b:f0:af:67:f7:4a:bc:7c:a2:
14:69:7f:16:d6:fd:41:94:7f:66:2e:1a:1f:89:5c:
59:fa:9d:01:41:81:b4:8b:8f:c1:df:17:0a:cd:93:
7a:43:fc:c0:f6:e9:1f:ed:eb:26:22:6f:5d:63:c6:
94:8e:5a:39:32:22:30:4d:0a:44:d3:30:f3:e6:4a:
e4:b9:2b:83:9e:a2:39:05:8c:3d:6c:3b:aa:25:bc:
57:ac:51:e7:a6:39:b2:8a:6b:fc:59:53:f0:e6:f3:
13:f7:2f:25:97:90:50:93:b9:87:2e:1f:7a:b1:3e:
83:31:9a:5c:41:f7:7e:d7:19:54:86:b4:d6:48:aa:
7e:83:75:e7:8c:e3:96:69:b9:31:5c:9f:38:ae:35:
83:d1:80:51:94:e6:22:c4:c4:3d:db:07:9d:fb:3b:
48:2d:e3:66:18:35:7c:c8:7c:3a:b6:7d:09:04:98:
08:e3:e8:9b:3e:0b:3a:a9:a4:40:2a:96:d3:8b:bd:
bc:32:1d:74:b5:f3:0b:7a:e6:75:39:ad:ff:98:a4:
15:56:78:eb:91:23:39:60:e7:dd:1a:0c:99:27:61:
6c:b7:70:0e:aa:e1:90:b5:64:96:2d:1b:46:d0:2d:
5c:d9:03:45:73:54:bc:a0:53:c4:20:ef:df:b8:01:
a5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5B:1C:79:92:CE:71:55:94:4A:36:C4:B3:19:54:62:F6:09:63:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86ED50CEBB7911EF9528C79E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.14.0/23
Signature Algorithm: sha256WithRSAEncryption
35:0a:f7:e7:60:89:eb:ce:b5:cc:b2:47:40:fd:92:b6:99:8a:
19:13:de:bf:0b:ba:21:68:d7:53:9e:2c:96:29:17:b2:83:87:
60:b6:b8:2b:ab:e0:77:ef:b9:b0:d9:74:9e:72:3d:57:1d:76:
c6:11:1e:fe:a5:2f:65:93:aa:21:d0:d6:48:ee:ad:05:91:5c:
c0:e9:0d:47:33:5a:ac:4c:22:e6:bb:ba:b3:22:1a:a8:3c:d1:
28:d2:f2:c4:b9:f2:0b:39:4f:06:12:af:cb:62:1a:84:5e:86:
f8:eb:50:58:2e:a8:34:b1:0c:0b:d2:9e:24:b8:7e:a0:0f:98:
51:c5:ff:f3:27:ef:b2:0f:cc:ed:ca:66:52:3f:0a:44:d6:6e:
13:b8:88:ee:4d:24:48:30:07:a7:7f:4a:b0:83:60:4f:28:9d:
2f:57:67:8e:e6:9a:e1:23:d6:a5:a7:ec:49:ed:0b:6f:3f:c9:
4e:3a:61:7b:0d:28:2d:65:66:ee:38:02:56:de:3f:6d:ba:5c:
38:11:d8:13:93:df:dd:39:21:5c:e6:fc:df:24:da:67:cd:52:
d2:53:96:e8:7b:b6:75:fb:f7:05:f3:ed:45:ec:8c:60:09:6e:
64:03:c6:11:8b:f6:e2:a9:27:2b:bc:7f:25:dc:23:6d:57:9a:
da:61:2c:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARukMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjE2MDY0NjQ2WhcNMjUwMzA0MDY0NjQ2WjAYMRYw
FAYDVQQDEw02NzVmY2NkYS0zZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwAFPSkpb8K9n90q8fKIUaX8W1v1BlH9mLhofiVxZ+p0BQYG0i4/B3xcK
zZN6Q/zA9ukf7esmIm9dY8aUjlo5MiIwTQpE0zDz5krkuSuDnqI5BYw9bDuqJbxX
rFHnpjmyimv8WVPw5vMT9y8ll5BQk7mHLh96sT6DMZpcQfd+1xlUhrTWSKp+g3Xn
jOOWabkxXJ84rjWD0YBRlOYixMQ92wed+ztILeNmGDV8yHw6tn0JBJgI4+ibPgs6
qaRAKpbTi728Mh10tfMLeuZ1Oa3/mKQVVnjrkSM5YOfdGgyZJ2Fst3AOquGQtWSW
LRtG0C1c2QNFc1S8oFPEIO/fuAGlNQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLRb
HHmSznFVlEo2xLMZVGL2CWM8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NkVENTBDRUJCNzkxMUVGOTUyOEM3OUU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlwOMA0GCSqGSIb3DQEB
CwUAA4IBAQA1CvfnYInrzrXMskdA/ZK2mYoZE96/C7ohaNdTniyWKReyg4dgtrgr
q+B377mw2XSecj1XHXbGER7+pS9lk6oh0NZI7q0FkVzA6Q1HM1qsTCLmu7qzIhqo
PNEo0vLEufILOU8GEq/LYhqEXob461BYLqg0sQwL0p4kuH6gD5hRxf/zJ++yD8zt
ymZSPwpE1m4TuIjuTSRIMAenf0qwg2BPKJ0vV2eO5prhI9alp+xJ7QtvP8lOOmF7
DSgtZWbuOAJW3j9tulw4EdgTk9/dOSFc5vzfJNpnzVLSU5boe7Z1+/cF8+1F7Ixg
CW5kA8YRi/biqScrvH8l3CNtV5raYSwI
-----END CERTIFICATE-----
Generated at Tue Apr 29 01:04:43 2025 by rpki-client