Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/253E5E76DA3D11EF8105D654762E951A.roa
File: 253E5E76DA3D11EF8105D654762E951A.roa (raw, json)
Hash identifier: Txzz65ZCMNhIt1Y6nUqLa2ZnajDddldM8CKRRw5ruFU=
Subject key identifier: 4C:C4:99:69:C5:AA:DF:F7:38:1B:68:12:B4:DC:0D:58:6B:CF:B7:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01457D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/253E5E76DA3D11EF8105D654762E951A.roa
Signing time: Fri 24 Jan 2025 10:22:42 +0000
ROA not before: Fri 24 Jan 2025 10:22:39 +0000
ROA not after: Wed 05 Mar 2025 10:22:39 +0000
asID: 202656
IP address blocks: 154.219.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83325 (0x1457d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:22:39 2025 GMT
Not After : Mar 5 10:22:39 2025 GMT
Subject: CN=679369f2-c6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c4:b8:94:dc:bc:96:48:1e:ad:6d:45:a6:ae:
4f:37:26:df:2b:a2:d5:2d:89:bb:ab:9e:84:ba:f3:
fa:23:f9:78:31:69:f8:f8:9b:28:72:fc:67:26:26:
65:c6:e4:4a:97:cf:07:d6:c2:b1:81:10:15:c5:f3:
ff:75:69:87:24:95:5c:c0:70:42:6d:17:09:3f:c4:
42:06:48:54:5c:cf:80:dc:c9:3e:ed:db:ef:64:fc:
c3:d2:35:fe:6b:73:e9:9d:3b:ff:f6:1c:5a:e9:5e:
7c:33:29:c7:08:67:88:6b:bc:6b:23:25:ac:92:67:
73:cc:ca:a2:56:2b:35:3a:85:81:c1:4e:74:d0:cf:
24:20:0e:fa:7d:93:56:3f:d6:96:00:fb:fa:76:a8:
a5:8b:44:6a:d3:68:58:b5:88:84:2e:b6:85:9b:b9:
0b:43:9a:14:bd:44:78:71:f9:1b:9f:57:80:d3:49:
10:32:a9:e3:ce:04:01:dc:5f:f4:04:04:16:95:0f:
20:99:6e:83:9f:1a:d4:7a:51:e0:02:79:48:9b:32:
ed:73:cf:30:4b:82:54:ea:1a:19:18:8f:17:96:c0:
9b:7f:8e:d4:5a:02:b7:ce:2b:57:80:98:6b:95:ac:
42:5a:d9:3a:9a:d5:bf:1e:6d:f2:15:4b:fd:c2:ed:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C4:99:69:C5:AA:DF:F7:38:1B:68:12:B4:DC:0D:58:6B:CF:B7:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/253E5E76DA3D11EF8105D654762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.248.0/24
Signature Algorithm: sha256WithRSAEncryption
58:01:dd:cd:34:37:56:6e:2e:41:26:b2:ac:7b:26:f2:2f:92:
32:f3:9c:c5:0f:07:c5:1a:cb:f8:d7:49:5f:cb:9d:d4:55:05:
e8:74:17:f9:93:63:57:c8:52:13:ea:e7:a0:21:35:70:18:ba:
30:d0:2f:83:d4:5f:68:63:12:0d:09:b5:79:d0:c3:d0:d4:37:
64:33:fe:d4:c8:c8:92:04:68:c6:46:8b:5c:1f:fc:82:eb:80:
8d:63:6a:b9:1a:2a:4f:1e:c2:55:f2:1c:67:c6:7b:2e:80:e3:
7e:4d:4a:0b:2a:df:2a:b2:bb:56:c8:c5:47:9e:d2:8d:99:1c:
e3:16:c4:b7:b7:81:32:1e:e3:21:7f:f2:7b:5f:31:28:d1:41:
0c:5b:d2:f0:39:7c:5f:8e:57:dc:d0:f9:54:f4:5d:d2:db:cf:
cb:da:c3:87:fe:ad:64:96:01:63:7c:2b:92:c7:64:8c:1b:11:
53:30:c1:45:23:06:de:b1:f9:12:cb:cd:f6:a2:3d:41:15:cf:
d7:21:ac:e4:05:80:28:d0:23:6b:1d:61:96:04:c7:ec:ae:f5:
8e:c2:87:0b:e7:6b:f4:a3:3b:b4:c9:b3:f1:4c:60:65:a7:eb:
c5:e9:14:6d:ac:f8:37:2a:56:83:62:c8:41:34:dd:0e:c2:38:
00:cb:10:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUV9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTAyMjM5WhcNMjUwMzA1MTAyMjM5WjAYMRYw
FAYDVQQDEw02NzkzNjlmMi1jNmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7sS4lNy8lkgerW1Fpq5PNybfK6LVLYm7q56EuvP6I/l4MWn4+Jsocvxn
JiZlxuRKl88H1sKxgRAVxfP/dWmHJJVcwHBCbRcJP8RCBkhUXM+A3Mk+7dvvZPzD
0jX+a3PpnTv/9hxa6V58MynHCGeIa7xrIyWskmdzzMqiVis1OoWBwU500M8kIA76
fZNWP9aWAPv6dqili0Rq02hYtYiELraFm7kLQ5oUvUR4cfkbn1eA00kQMqnjzgQB
3F/0BAQWlQ8gmW6DnxrUelHgAnlImzLtc88wS4JU6hoZGI8XlsCbf47UWgK3zitX
gJhrlaxCWtk6mtW/Hm3yFUv9wu2rUwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEzE
mWnFqt/3OBtoErTcDVhrz7dYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNTNFNUU3NkRBM0QxMUVGODEwNUQ2NTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtv4MA0GCSqGSIb3DQEB
CwUAA4IBAQBYAd3NNDdWbi5BJrKseybyL5Iy85zFDwfFGsv410lfy53UVQXodBf5
k2NXyFIT6uegITVwGLow0C+D1F9oYxINCbV50MPQ1DdkM/7UyMiSBGjGRotcH/yC
64CNY2q5GipPHsJV8hxnxnsugON+TUoLKt8qsrtWyMVHntKNmRzjFsS3t4EyHuMh
f/J7XzEo0UEMW9LwOXxfjlfc0PlU9F3S28/L2sOH/q1klgFjfCuSx2SMGxFTMMFF
IwbesfkSy832oj1BFc/XIazkBYAo0CNrHWGWBMfsrvWOwocL52v0ozu0ybPxTGBl
p+vF6RRtrPg3KlaDYshBNN0OwjgAyxCL
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:00:27 2025 by rpki-client