Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99F4F19CC9B911EFA47AE365762E951A.roa
File: 99F4F19CC9B911EFA47AE365762E951A.roa (raw, json)
Hash identifier: Go/1/7sVNYtVt7ZMHRFbLWfmyqfWVuOA/uLEBwkghO4=
Subject key identifier: AC:3A:E1:7C:F6:A1:EC:E7:76:D0:1A:87:B9:54:BF:F6:CE:59:F8:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013486
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99F4F19CC9B911EFA47AE365762E951A.roa
Signing time: Fri 03 Jan 2025 10:00:46 +0000
ROA not before: Fri 03 Jan 2025 10:00:42 +0000
ROA not after: Thu 06 Feb 2025 10:00:42 +0000
asID: 272092
IP address blocks: 154.83.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78982 (0x13486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 10:00:42 2025 GMT
Not After : Feb 6 10:00:42 2025 GMT
Subject: CN=6777b54e-ee17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:4f:86:21:d5:6a:a6:a5:ff:d3:63:76:62:
97:00:f5:8c:2d:42:22:cd:7d:11:5c:8d:ca:6b:4e:
41:71:74:40:99:66:ce:9b:01:c7:ba:7d:83:2b:b8:
9b:1d:dc:e2:8f:7d:d5:b7:5c:51:52:45:bb:5e:7f:
a4:07:e8:1e:ad:a0:56:42:c7:ea:4f:a8:e0:b0:30:
a8:05:31:c8:1e:09:df:2d:1e:01:01:ce:21:9d:4f:
33:68:bd:e8:ee:f9:0a:00:ad:c7:ef:78:9a:a4:64:
82:f9:4e:c2:70:20:cf:b2:dd:6b:0d:28:a5:27:19:
b4:90:c5:02:52:2c:fb:1b:09:96:0f:c2:6d:38:5e:
15:62:6b:fd:ec:1b:fa:54:19:61:f0:02:15:1b:17:
38:7d:50:e9:1e:6b:f2:7e:41:35:14:68:fb:a3:e1:
96:1c:80:72:42:e3:2c:13:ea:34:15:c9:7b:dd:2b:
79:02:40:a6:ba:49:7d:3e:d8:ed:01:fd:f4:84:b1:
4c:d2:bf:66:6a:1b:8d:de:73:d9:95:70:29:6d:92:
37:39:5a:91:50:e3:72:50:37:a2:6b:76:8b:92:7d:
1c:ff:05:3d:e2:d9:fe:ac:df:c4:62:cf:b2:f0:6f:
9e:a5:45:1e:39:fc:07:d8:10:b5:ae:ac:5e:15:4a:
6c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3A:E1:7C:F6:A1:EC:E7:76:D0:1A:87:B9:54:BF:F6:CE:59:F8:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99F4F19CC9B911EFA47AE365762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.29.0/24
Signature Algorithm: sha256WithRSAEncryption
83:57:df:db:60:ec:de:fd:7f:5b:f3:90:55:70:0d:2e:25:d1:
f9:0e:d3:7e:7c:fd:71:bc:58:7d:95:c3:66:77:e6:05:e2:0c:
38:8f:98:71:ad:db:fd:e0:09:e6:93:74:4d:bc:ae:48:d6:2d:
a3:ea:ef:0b:80:97:0a:e9:d9:3d:4f:63:2f:c1:98:d1:df:81:
b8:3a:76:1a:11:0a:bc:02:2b:02:8a:bc:a1:64:c2:92:23:c1:
ec:f0:37:5f:61:2c:b1:20:80:8b:8a:38:42:09:aa:f3:f5:cd:
d4:05:3f:1f:2a:b2:3d:c9:27:d6:74:bb:62:25:a2:6d:40:12:
7f:b3:7d:da:67:64:e2:54:37:83:0c:dd:2d:f3:38:5f:29:d2:
3c:1d:89:30:ad:fc:81:08:b6:62:77:9c:24:c2:81:81:84:0e:
21:f7:18:7b:f5:ad:53:a8:01:d0:41:2d:49:bb:e2:c9:12:ba:
c2:93:e4:62:3d:b8:f3:30:e6:1d:24:d6:6a:f9:e0:6b:96:c1:
6c:25:b0:b6:cb:72:8b:51:9f:b1:f1:7f:07:7d:f7:5e:d9:23:
c5:ab:33:57:6e:e3:79:1e:b8:0c:29:9e:29:91:4d:79:6a:6a:
4e:b0:bf:7a:6c:d3:27:a5:96:9f:3b:b3:4f:7f:0b:d0:f2:c4:
f4:b7:74:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATSGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAzMTAwMDQyWhcNMjUwMjA2MTAwMDQyWjAYMRYw
FAYDVQQDEw02Nzc3YjU0ZS1lZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArUZPhiHVaqal/9NjdmKXAPWMLUIizX0RXI3Ka05BcXRAmWbOmwHHun2D
K7ibHdzij33Vt1xRUkW7Xn+kB+geraBWQsfqT6jgsDCoBTHIHgnfLR4BAc4hnU8z
aL3o7vkKAK3H73iapGSC+U7CcCDPst1rDSilJxm0kMUCUiz7GwmWD8JtOF4VYmv9
7Bv6VBlh8AIVGxc4fVDpHmvyfkE1FGj7o+GWHIByQuMsE+o0Fcl73St5AkCmukl9
PtjtAf30hLFM0r9mahuN3nPZlXApbZI3OVqRUONyUDeia3aLkn0c/wU94tn+rN/E
Ys+y8G+epUUeOfwH2BC1rqxeFUpsAQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKw6
4Xz2oezndtAah7lUv/bOWfhyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85OUY0RjE5Q0M5QjkxMUVGQTQ3QUUzNjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlMdMA0GCSqGSIb3DQEB
CwUAA4IBAQCDV9/bYOze/X9b85BVcA0uJdH5DtN+fP1xvFh9lcNmd+YF4gw4j5hx
rdv94Anmk3RNvK5I1i2j6u8LgJcK6dk9T2MvwZjR34G4OnYaEQq8AisCiryhZMKS
I8Hs8DdfYSyxIICLijhCCarz9c3UBT8fKrI9ySfWdLtiJaJtQBJ/s33aZ2TiVDeD
DN0t8zhfKdI8HYkwrfyBCLZid5wkwoGBhA4h9xh79a1TqAHQQS1Ju+LJErrCk+Ri
PbjzMOYdJNZq+eBrlsFsJbC2y3KLUZ+x8X8Hffde2SPFqzNXbuN5HrgMKZ4pkU15
ampOsL96bNMnpZafO7NPfwvQ8sT0t3Qe
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:47 2025 by rpki-client