Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/279DBE5CD8AB11EFBBA4C3BD762E951A.roa
File: 279DBE5CD8AB11EFBBA4C3BD762E951A.roa (raw, json)
Hash identifier: aHmzp3birAirVb0kKqUdRUJhHrGSmsP0hnztzpoRjoo=
Subject key identifier: B3:8E:DD:D2:5E:99:0F:64:F0:92:02:46:2D:0A:DE:92:1D:54:6D:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/279DBE5CD8AB11EFBBA4C3BD762E951A.roa
Signing time: Wed 22 Jan 2025 10:25:09 +0000
ROA not before: Wed 22 Jan 2025 10:25:05 +0000
ROA not after: Sat 08 Feb 2025 10:25:05 +0000
asID: 150008
IP address blocks: 154.209.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81598 (0x13ebe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 10:25:05 2025 GMT
Not After : Feb 8 10:25:05 2025 GMT
Subject: CN=6790c785-36cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:32:b4:48:f5:0a:3a:3f:61:02:bd:58:66:88:
69:77:bc:c9:04:b8:8f:4b:78:1e:ec:2a:49:43:3e:
bf:32:7f:b5:40:7d:f1:6a:b3:9d:8c:1d:a2:11:8e:
d6:69:5a:12:08:99:06:32:27:d6:28:89:96:ac:a9:
5e:ef:b7:d8:45:0c:7c:9f:90:00:29:20:0f:94:f6:
ba:d9:5b:69:b3:3f:8a:ad:10:4c:d5:2c:78:d1:4e:
58:ae:4e:53:8e:6c:a9:06:bb:e9:be:5e:81:cd:86:
e2:f4:60:79:e2:87:e2:7b:a9:ca:38:d9:fe:62:7d:
11:7e:f3:65:8e:66:fa:fc:d8:ca:4b:81:2a:5c:41:
38:c9:7f:fc:ef:b0:24:cc:3b:4a:56:0c:24:5e:e3:
73:0c:df:f6:b5:eb:b7:55:a0:e1:fd:63:a6:cf:dc:
37:d5:9f:0c:98:ca:28:83:18:1d:ba:4b:f5:f0:4d:
ea:2d:ef:93:35:ce:8a:88:3c:f5:c1:bc:5d:59:c5:
53:18:7a:4a:11:29:7a:1a:f4:55:c5:b2:5c:2a:13:
d6:f7:0a:ba:31:14:d6:f2:87:08:82:c5:5d:94:3d:
8b:1d:ca:7f:df:a3:c1:e3:bb:97:89:73:27:1c:ef:
c5:dd:71:0c:1e:51:40:5b:c7:a9:f9:fb:ca:70:bc:
45:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8E:DD:D2:5E:99:0F:64:F0:92:02:46:2D:0A:DE:92:1D:54:6D:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/279DBE5CD8AB11EFBBA4C3BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.253.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:3e:82:01:e2:59:f5:d4:05:8c:8b:b9:d6:07:f7:ca:14:92:
71:18:2d:3d:17:18:3a:64:46:76:ae:a1:46:b4:4b:15:eb:fb:
74:ed:50:75:af:b3:4c:26:1e:c3:7d:48:a2:7c:9d:a4:b9:5e:
1e:37:48:81:c2:b8:e5:e1:4d:9f:10:65:50:80:62:6d:ac:60:
3f:8a:7c:53:27:e3:43:16:44:2f:1c:25:c8:c6:4d:f7:69:4b:
a8:09:8b:1b:53:84:3d:77:59:77:1b:6d:77:6b:86:88:16:a1:
cf:b4:64:1e:da:8a:52:9a:3b:1e:12:a1:ac:00:e8:3a:f6:97:
b3:85:bf:f0:bc:80:36:be:d2:d4:97:c2:2b:13:58:35:47:6f:
80:2a:48:12:db:39:6d:c5:55:fc:41:be:b6:82:50:b6:e6:af:
c2:9a:33:7f:b8:64:55:e2:93:20:cb:ca:fc:8f:4e:16:dc:62:
48:26:97:d0:77:96:b6:fc:3a:db:02:64:f8:4b:54:ea:5c:5f:
e6:35:5b:15:ab:25:f8:a9:3d:ce:98:41:b1:90:4a:76:c9:2a:
99:14:57:a2:41:27:90:a3:a0:81:fe:61:12:84:b6:b1:3b:20:
d9:03:46:d6:a0:a6:55:ec:fb:61:ac:30:40:27:9e:85:ca:5e:
8f:e7:de:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT6+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMTAyNTA1WhcNMjUwMjA4MTAyNTA1WjAYMRYw
FAYDVQQDEw02NzkwYzc4NS0zNmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1TK0SPUKOj9hAr1YZohpd7zJBLiPS3ge7CpJQz6/Mn+1QH3xarOdjB2i
EY7WaVoSCJkGMifWKImWrKle77fYRQx8n5AAKSAPlPa62Vtpsz+KrRBM1Sx40U5Y
rk5TjmypBrvpvl6BzYbi9GB54ofie6nKONn+Yn0RfvNljmb6/NjKS4EqXEE4yX/8
77AkzDtKVgwkXuNzDN/2teu3VaDh/WOmz9w31Z8MmMoogxgdukv18E3qLe+TNc6K
iDz1wbxdWcVTGHpKESl6GvRVxbJcKhPW9wq6MRTW8ocIgsVdlD2LHcp/36PB47uX
iXMnHO/F3XEMHlFAW8ep+fvKcLxFMwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLOO
3dJemQ9k8JICRi0K3pIdVG1BMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNzlEQkU1Q0Q4QUIxMUVGQkJBNEMzQkQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtH9MA0GCSqGSIb3DQEB
CwUAA4IBAQC2PoIB4ln11AWMi7nWB/fKFJJxGC09Fxg6ZEZ2rqFGtEsV6/t07VB1
r7NMJh7DfUiifJ2kuV4eN0iBwrjl4U2fEGVQgGJtrGA/inxTJ+NDFkQvHCXIxk33
aUuoCYsbU4Q9d1l3G213a4aIFqHPtGQe2opSmjseEqGsAOg69pezhb/wvIA2vtLU
l8IrE1g1R2+AKkgS2zltxVX8Qb62glC25q/CmjN/uGRV4pMgy8r8j04W3GJIJpfQ
d5a2/DrbAmT4S1TqXF/mNVsVqyX4qT3OmEGxkEp2ySqZFFeiQSeQo6CB/mEShLax
OyDZA0bWoKZV7PthrDBAJ56Fyl6P597r
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:44:36 2025 by rpki-client