Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DC4F186DA3B11EFB3213347762E951A.roa
File: 4DC4F186DA3B11EFB3213347762E951A.roa (raw, json)
Hash identifier: wyPcogcLvWsuliQAMuBip286dWjQGqETdel9MS9dOHI=
Subject key identifier: 9A:69:41:6B:D5:7C:4A:7D:71:51:DB:C2:C8:4C:1A:51:57:71:6A:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014556
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DC4F186DA3B11EFB3213347762E951A.roa
Signing time: Fri 24 Jan 2025 10:09:32 +0000
ROA not before: Fri 24 Jan 2025 10:09:28 +0000
ROA not after: Wed 05 Mar 2025 10:09:28 +0000
asID: 202656
IP address blocks: 154.219.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83286 (0x14556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:09:28 2025 GMT
Not After : Mar 5 10:09:28 2025 GMT
Subject: CN=679366db-3a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:53:42:e5:f0:fc:3c:ad:16:ce:e5:b6:ea:
96:04:8d:fa:30:f3:d6:16:b1:dc:2e:18:65:8d:16:
ce:c1:e3:14:f9:3e:44:c7:1f:d3:2a:05:76:bf:5b:
ca:bb:ae:e4:bd:5e:37:a9:75:95:79:8f:e8:d2:4f:
c1:cd:d3:7f:b1:6c:1e:33:27:d9:29:6f:77:40:cd:
a7:14:4f:75:97:fd:34:77:2a:29:f5:7c:4a:8f:0b:
e1:3b:62:79:b8:67:95:6e:2e:f8:c7:ea:0f:9d:6f:
0e:b5:5e:67:bc:43:ca:7b:cf:c5:7f:c5:73:7e:40:
c4:d7:20:cd:3b:10:fd:c2:a9:8d:f1:63:aa:0b:1e:
38:2f:95:1c:ad:48:a8:f9:da:d6:ea:40:56:c2:c0:
75:52:a1:2e:75:14:d3:ad:e5:3e:cd:13:3d:2c:95:
69:00:9d:a8:3d:67:90:85:22:ed:e0:5e:48:00:59:
79:b2:87:27:e0:5a:6f:4c:cf:ef:08:aa:1b:22:b0:
d7:1f:77:a2:f2:0f:22:b4:d6:e4:05:25:0d:09:33:
0d:77:85:0a:4c:d9:e2:9a:88:df:e2:42:7f:7c:53:
62:43:09:59:d8:0b:a7:05:fb:c0:90:00:61:65:e5:
a6:78:16:61:1d:70:48:19:6e:b3:86:8b:bf:1e:44:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:69:41:6B:D5:7C:4A:7D:71:51:DB:C2:C8:4C:1A:51:57:71:6A:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DC4F186DA3B11EFB3213347762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.240.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:a0:03:f2:c1:63:80:d2:cd:7f:84:0f:39:cb:84:32:6b:5b:
d4:65:e2:c1:0f:af:19:bd:02:13:45:71:4c:aa:20:08:bd:63:
63:02:ee:aa:52:01:bf:ff:f0:e2:eb:e7:84:55:0f:a0:3d:ef:
a8:bf:0c:74:7c:76:b8:d6:f2:8b:d5:af:2e:27:2d:74:7a:4a:
a4:13:70:f5:65:1b:95:a0:d7:a7:ee:a7:66:4e:3a:65:88:32:
9d:d8:4d:78:36:c4:22:aa:3f:0c:9a:f4:22:75:84:45:44:a5:
dc:4d:1b:4c:79:11:f1:7b:60:86:8b:79:cf:1a:1c:18:61:5f:
99:87:6c:51:6f:49:34:cc:ad:8b:58:f7:e8:20:7d:5c:d1:e8:
48:11:05:52:8c:d4:91:dd:b6:0a:a5:72:cd:07:ec:0a:76:80:
76:73:08:05:a7:93:62:d5:5f:43:d0:ed:66:4e:9a:b8:e7:74:
9d:5a:da:b4:20:e5:1d:af:9f:a6:83:67:fb:36:a4:76:0b:7f:
ec:8c:4e:6e:29:3a:5f:b1:d6:04:d0:a3:9c:bc:cf:94:64:a8:
68:d6:89:ef:d9:81:1b:77:83:2b:ea:e5:70:e4:93:7d:60:f3:
42:52:59:ef:48:dc:39:52:d6:5f:42:c8:a3:4b:8f:79:5a:46:
7a:ca:d1:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUVWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTAwOTI4WhcNMjUwMzA1MTAwOTI4WjAYMRYw
FAYDVQQDEw02NzkzNjZkYi0zYTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAslFTQuXw/DytFs7ltuqWBI36MPPWFrHcLhhljRbOweMU+T5Exx/TKgV2
v1vKu67kvV43qXWVeY/o0k/BzdN/sWweMyfZKW93QM2nFE91l/00dyop9XxKjwvh
O2J5uGeVbi74x+oPnW8OtV5nvEPKe8/Ff8VzfkDE1yDNOxD9wqmN8WOqCx44L5Uc
rUio+drW6kBWwsB1UqEudRTTreU+zRM9LJVpAJ2oPWeQhSLt4F5IAFl5socn4Fpv
TM/vCKobIrDXH3ei8g8itNbkBSUNCTMNd4UKTNnimojf4kJ/fFNiQwlZ2AunBfvA
kABhZeWmeBZhHXBIGW6zhou/HkT4EwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJpp
QWvVfEp9cVHbwshMGlFXcWohMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80REM0RjE4NkRBM0IxMUVGQjMyMTMzNDc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtvwMA0GCSqGSIb3DQEB
CwUAA4IBAQDRoAPywWOA0s1/hA85y4Qya1vUZeLBD68ZvQITRXFMqiAIvWNjAu6q
UgG///Di6+eEVQ+gPe+ovwx0fHa41vKL1a8uJy10ekqkE3D1ZRuVoNen7qdmTjpl
iDKd2E14NsQiqj8MmvQidYRFRKXcTRtMeRHxe2CGi3nPGhwYYV+Zh2xRb0k0zK2L
WPfoIH1c0ehIEQVSjNSR3bYKpXLNB+wKdoB2cwgFp5Ni1V9D0O1mTpq453SdWtq0
IOUdr5+mg2f7NqR2C3/sjE5uKTpfsdYE0KOcvM+UZKho1onv2YEbd4Mr6uVw5JN9
YPNCUlnvSNw5UtZfQsijS495WkZ6ytF+
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:47 2025 by rpki-client