Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98632256DA5111EF91C4BA5E762E951A.roa
File: 98632256DA5111EF91C4BA5E762E951A.roa (raw, json)
Hash identifier: Aia6FVnymWlSOtaix1qqGVImoPBEIkiAECHLmmSC4YE=
Subject key identifier: CD:9B:EA:1A:18:15:2D:4C:D0:2F:E5:DE:7D:7A:04:63:51:2F:D5:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01470A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98632256DA5111EF91C4BA5E762E951A.roa
Signing time: Fri 24 Jan 2025 12:49:05 +0000
ROA not before: Fri 24 Jan 2025 12:49:02 +0000
ROA not after: Wed 05 Mar 2025 12:49:02 +0000
asID: 44559
IP address blocks: 154.209.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83722 (0x1470a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:49:02 2025 GMT
Not After : Mar 5 12:49:02 2025 GMT
Subject: CN=67938c41-7ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:f8:c8:0d:a3:62:92:a6:66:4c:14:18:e8:
66:15:b6:9c:cb:4f:23:5c:44:fe:c1:1b:ab:19:10:
d0:6e:c8:7b:df:a9:8c:32:51:7d:11:07:1f:7a:05:
95:e8:45:43:19:13:df:ed:d2:4f:00:c8:1e:71:d5:
ed:cc:5d:79:10:77:7f:7b:2d:b7:72:bd:7e:be:f7:
fc:83:05:50:b0:40:51:43:8a:0b:43:0e:a1:d6:75:
84:7a:81:4c:af:78:b7:80:5d:b0:cd:63:94:67:30:
9e:0a:f9:7a:0c:8d:00:2e:7d:af:76:60:bb:3d:ed:
b3:2a:1d:52:f5:48:b1:2e:59:82:7c:06:2b:b1:65:
ba:61:95:fa:7a:ad:b6:83:8b:b3:4f:3b:f7:de:08:
03:60:93:0e:92:ee:f8:7b:20:bd:99:e4:37:80:f2:
02:0e:6b:33:36:25:42:06:d1:85:da:fd:20:12:0d:
b8:c9:c9:1a:74:bd:3b:f5:aa:30:45:11:c5:84:64:
f5:47:c2:5e:12:82:a2:7c:dc:15:f1:8a:fb:73:34:
cb:a3:ee:69:47:de:8e:ea:c5:ca:f1:a8:85:9a:e0:
78:d2:5c:f0:72:f2:c3:5b:3f:86:83:c8:96:65:a8:
f5:59:53:97:ea:47:f2:3f:13:cf:b5:b0:25:c8:c6:
85:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9B:EA:1A:18:15:2D:4C:D0:2F:E5:DE:7D:7A:04:63:51:2F:D5:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98632256DA5111EF91C4BA5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.157.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:ff:97:76:f9:b4:5b:2d:ea:dd:b8:76:1d:48:b5:cb:d5:3d:
99:1b:b0:f6:59:30:3f:78:f1:ea:42:05:56:3a:31:8d:f9:74:
aa:54:be:06:75:43:90:09:a5:5c:ab:08:d9:2e:87:6b:62:72:
87:e8:3b:10:f0:9d:0f:1a:5f:1b:bd:f8:e2:7c:98:4e:9d:49:
76:bb:04:80:64:8e:5b:5e:2c:c7:da:e2:bf:46:7d:08:c1:f7:
4f:c5:f7:28:6d:ed:35:99:93:5a:aa:5a:4d:af:47:ce:d0:d8:
50:d4:03:12:41:e5:cf:b9:64:12:cb:79:bc:1d:2f:f8:e1:c2:
ce:10:0c:6b:8d:17:26:4c:ba:9f:00:b0:ef:07:0c:51:05:d1:
fb:f4:5d:fb:0d:38:f3:74:6b:a5:80:18:6c:26:44:aa:66:8e:
c7:37:b9:04:2b:05:62:ca:b3:c8:db:79:53:ed:e3:11:a6:6c:
d8:5b:6a:cc:ec:50:c0:c8:44:2b:62:9d:72:5d:32:a7:b3:20:
0c:b6:35:64:53:31:0a:c2:ea:7b:ce:dd:4d:67:b1:77:f0:4b:
95:37:1e:f8:a5:61:a9:8f:1c:09:d5:ab:08:5f:ff:54:03:74:
71:be:5e:86:3a:45:57:f2:6f:85:80:c2:f8:34:01:bf:09:4c:
9e:ed:56:0d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUcKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTI0OTAyWhcNMjUwMzA1MTI0OTAyWjAYMRYw
FAYDVQQDEw02NzkzOGM0MS03YWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwRP4yA2jYpKmZkwUGOhmFbacy08jXET+wRurGRDQbsh736mMMlF9EQcf
egWV6EVDGRPf7dJPAMgecdXtzF15EHd/ey23cr1+vvf8gwVQsEBRQ4oLQw6h1nWE
eoFMr3i3gF2wzWOUZzCeCvl6DI0ALn2vdmC7Pe2zKh1S9UixLlmCfAYrsWW6YZX6
eq22g4uzTzv33ggDYJMOku74eyC9meQ3gPICDmszNiVCBtGF2v0gEg24yckadL07
9aowRRHFhGT1R8JeEoKifNwV8Yr7czTLo+5pR96O6sXK8aiFmuB40lzwcvLDWz+G
g8iWZaj1WVOX6kfyPxPPtbAlyMaFYQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM2b
6hoYFS1M0C/l3n16BGNRL9UEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85ODYzMjI1NkRBNTExMUVGOTFDNEJBNUU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtGdMA0GCSqGSIb3DQEB
CwUAA4IBAQDH/5d2+bRbLerduHYdSLXL1T2ZG7D2WTA/ePHqQgVWOjGN+XSqVL4G
dUOQCaVcqwjZLodrYnKH6DsQ8J0PGl8bvfjifJhOnUl2uwSAZI5bXizH2uK/Rn0I
wfdPxfcobe01mZNaqlpNr0fO0NhQ1AMSQeXPuWQSy3m8HS/44cLOEAxrjRcmTLqf
ALDvBwxRBdH79F37DTjzdGulgBhsJkSqZo7HN7kEKwViyrPI23lT7eMRpmzYW2rM
7FDAyEQrYp1yXTKnsyAMtjVkUzEKwup7zt1NZ7F38EuVNx74pWGpjxwJ1asIX/9U
A3Rxvl6GOkVX8m+FgML4NAG/CUye7VYN
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:52:11 2025 by rpki-client