Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/264DF776B21111EFBC92D66D762E951A.roa
File: 264DF776B21111EFBC92D66D762E951A.roa (raw, json)
Hash identifier: i3jYz/TyDJEaSA6+qhR6EDKkdN61Vkn603cIE1L+Gn4=
Subject key identifier: 3F:8E:2E:D8:94:32:30:AF:4E:29:68:60:23:18:9F:E4:73:A4:50:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/264DF776B21111EFBC92D66D762E951A.roa
Signing time: Wed 04 Dec 2024 07:27:00 +0000
ROA not before: Wed 04 Dec 2024 07:26:56 +0000
ROA not after: Sat 01 Feb 2025 07:26:56 +0000
asID: 150008
IP address blocks: 154.206.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71604 (0x117b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 07:26:56 2024 GMT
Not After : Feb 1 07:26:56 2025 GMT
Subject: CN=67500444-c8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:92:95:78:f7:ef:5c:d3:af:09:66:7e:74:
06:2c:f3:6e:eb:c7:74:4c:bb:8b:f1:52:94:97:67:
b5:80:12:e2:6e:0d:0b:42:31:b1:87:fa:9a:f4:17:
44:fc:be:ec:17:69:fb:73:6b:76:b2:a5:59:88:c5:
07:a9:ba:a7:3d:2e:5f:07:8b:bd:5c:93:1f:fb:11:
d6:4c:0f:b0:57:26:1e:97:7c:62:86:54:be:16:89:
2e:53:45:d8:73:ed:6c:3f:6c:89:a0:7c:1c:88:e5:
f7:9f:8e:af:a3:52:07:a6:d0:4c:20:0f:99:fc:e3:
20:63:8f:c0:63:31:57:00:ee:0a:d6:37:e2:d3:5f:
47:a4:76:dc:14:3f:1d:d4:c0:1f:0a:9e:f5:a3:95:
28:14:93:9c:be:ab:4b:16:34:9a:2b:85:72:20:3d:
80:3b:49:a3:b8:c9:3d:ad:e6:15:e2:7b:e0:8c:dd:
be:22:f7:3e:eb:74:84:e0:30:34:23:52:75:60:44:
c4:69:1f:00:1f:bd:a2:37:cd:9d:f0:40:72:27:94:
3a:0d:00:4a:80:f1:15:60:22:2d:f9:62:70:2c:85:
aa:93:68:42:ce:e6:b9:96:b4:d9:de:c3:8d:da:20:
54:40:b0:8f:0f:dd:ad:78:71:5e:4f:80:e1:47:ca:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8E:2E:D8:94:32:30:AF:4E:29:68:60:23:18:9F:E4:73:A4:50:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/264DF776B21111EFBC92D66D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.17.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:27:bd:0b:4d:e8:21:65:0a:34:2f:20:5f:f5:04:43:ff:9a:
5b:6a:21:c3:b1:af:86:b5:e6:f6:b1:87:a4:91:39:c7:fd:55:
71:13:cd:9c:b6:dd:79:57:ec:66:6e:5f:55:3c:c8:0d:f7:8d:
9a:5a:06:6c:e1:3f:8a:d1:ef:74:b7:3a:44:98:25:ba:1e:34:
3e:42:e7:23:0a:f5:49:d6:ec:24:f0:1e:8b:35:9c:62:19:d6:
1a:05:b7:99:50:96:7a:91:f2:98:b9:49:a0:be:dd:4a:92:0b:
0c:39:8f:ff:dd:c5:78:73:66:da:f2:27:29:86:f5:4b:a5:87:
8c:f3:b3:3c:18:9a:0e:9e:50:89:f9:39:a5:e9:e1:e7:41:ce:
0e:d4:17:b5:3d:72:f0:74:e6:a9:68:82:c7:bd:04:d7:a6:53:
e3:22:f6:a0:e7:08:69:d6:d0:83:e3:cf:96:47:5f:75:52:bb:
f7:5a:67:5a:89:e9:57:e5:c4:f1:86:92:ee:b0:c0:33:64:80:
1a:df:c8:b6:bc:a1:57:c4:a3:0f:91:6d:87:e2:2f:a7:72:73:
fa:fe:1b:1d:5a:ca:66:58:af:18:80:0f:4c:63:d7:b9:bd:91:
20:24:f0:06:c6:f2:f5:13:45:40:91:5a:58:ed:6e:18:a2:6b:
5a:c1:24:07
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARe0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjA0MDcyNjU2WhcNMjUwMjAxMDcyNjU2WjAYMRYw
FAYDVQQDEw02NzUwMDQ0NC1jOGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnuKSlXj371zTrwlmfnQGLPNu68d0TLuL8VKUl2e1gBLibg0LQjGxh/qa
9BdE/L7sF2n7c2t2sqVZiMUHqbqnPS5fB4u9XJMf+xHWTA+wVyYel3xihlS+Foku
U0XYc+1sP2yJoHwciOX3n46vo1IHptBMIA+Z/OMgY4/AYzFXAO4K1jfi019HpHbc
FD8d1MAfCp71o5UoFJOcvqtLFjSaK4VyID2AO0mjuMk9reYV4nvgjN2+Ivc+63SE
4DA0I1J1YETEaR8AH72iN82d8EByJ5Q6DQBKgPEVYCIt+WJwLIWqk2hCzua5lrTZ
3sON2iBUQLCPD92teHFeT4DhR8r15QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFD+O
LtiUMjCvTiloYCMYn+RzpFC/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNjRERjc3NkIyMTExMUVGQkM5MkQ2NkQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4RMA0GCSqGSIb3DQEB
CwUAA4IBAQDLJ70LTeghZQo0LyBf9QRD/5pbaiHDsa+Gteb2sYekkTnH/VVxE82c
tt15V+xmbl9VPMgN942aWgZs4T+K0e90tzpEmCW6HjQ+QucjCvVJ1uwk8B6LNZxi
GdYaBbeZUJZ6kfKYuUmgvt1KkgsMOY//3cV4c2ba8icphvVLpYeM87M8GJoOnlCJ
+Tml6eHnQc4O1Be1PXLwdOapaILHvQTXplPjIvag5whp1tCD48+WR191Urv3Wmda
ielX5cTxhpLusMAzZIAa38i2vKFXxKMPkW2H4i+ncnP6/hsdWspmWK8YgA9MY9e5
vZEgJPAGxvL1E0VAkVpY7W4YomtawSQH
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:46:03 2025 by rpki-client