Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/767792A8DA3D11EF9E824C55762E951A.roa
File: 767792A8DA3D11EF9E824C55762E951A.roa (raw, json)
Hash identifier: DEXDU2VYE70U55O7Wjf3DeQU4/xE3yH4VkFo1Gn9Q88=
Subject key identifier: 28:14:AD:F3:22:27:01:0C:24:43:C3:1A:DE:D4:18:D3:79:93:46:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014585
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/767792A8DA3D11EF9E824C55762E951A.roa
Signing time: Fri 24 Jan 2025 10:24:59 +0000
ROA not before: Fri 24 Jan 2025 10:24:55 +0000
ROA not after: Wed 05 Mar 2025 10:24:55 +0000
asID: 202656
IP address blocks: 154.219.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83333 (0x14585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:24:55 2025 GMT
Not After : Mar 5 10:24:55 2025 GMT
Subject: CN=67936a7b-63d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:02:9f:00:35:5c:93:7c:54:48:a8:c4:62:a8:
5a:2d:ae:dc:47:73:f1:5c:90:88:df:8c:24:68:c2:
9e:74:e9:0c:ca:1f:fd:94:05:b8:cb:9d:7d:43:5b:
78:12:38:21:44:cc:64:48:91:a4:f5:7b:4f:d4:7a:
2b:89:aa:4c:c7:47:50:45:e1:e9:ff:b4:82:ff:6e:
a2:fb:4d:f0:af:55:6f:77:bb:d1:64:04:b7:e6:16:
af:03:c7:6b:b7:aa:fb:52:65:0e:56:39:e0:65:3b:
54:63:ee:90:ed:ea:2d:a8:a9:d3:8f:5d:b9:7d:b4:
21:05:c4:64:19:80:93:33:d2:5d:12:57:ce:3a:c9:
9c:b9:85:69:20:1f:a9:6d:ee:5e:71:57:04:39:0b:
78:ce:c4:49:62:4e:67:0f:9b:78:47:d0:4d:c3:a3:
b1:0a:07:0a:28:b5:e2:10:75:a9:0c:30:2d:e3:dc:
b0:cf:1f:c0:39:64:87:44:a5:6c:3d:1b:a6:c4:c8:
35:30:c2:91:92:94:f7:a7:d1:2a:23:87:61:a5:b0:
ed:ff:8e:6c:c5:88:6d:b8:68:f8:79:be:96:1c:82:
7d:ac:4a:cf:22:3f:f8:50:70:f4:37:b1:5a:f3:9e:
8a:75:b5:0e:e5:7a:79:b7:0d:ad:2b:f1:24:2d:b9:
cb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:14:AD:F3:22:27:01:0C:24:43:C3:1A:DE:D4:18:D3:79:93:46:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/767792A8DA3D11EF9E824C55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.250.0/24
Signature Algorithm: sha256WithRSAEncryption
65:aa:6a:fd:3c:23:22:f8:ee:0b:f5:c5:7d:d3:2b:42:a0:68:
39:66:04:99:5e:90:b6:71:26:f3:b3:2a:48:89:f0:70:ea:6f:
77:67:e0:55:96:53:55:6d:4c:7b:69:f5:29:93:9f:06:4c:91:
a4:d7:03:43:50:e9:da:6a:f5:8f:3e:fc:b7:6a:e2:0a:cf:de:
ca:0a:21:30:35:39:60:68:81:21:e2:d1:10:df:a8:06:71:9f:
d7:90:3a:51:7d:b6:c1:63:18:dc:db:15:f8:fc:37:f0:63:a2:
5e:bf:37:49:9a:49:e0:87:34:5b:65:19:77:10:3e:97:fb:54:
cb:d3:29:1f:61:32:8d:5b:22:04:31:dc:50:2b:09:24:28:62:
80:86:aa:10:d7:59:d6:53:6f:b0:60:d2:c4:b5:d9:62:e3:10:
82:09:44:5d:eb:ba:18:e5:91:92:b0:a7:1d:af:17:59:e4:70:
56:fb:75:4c:1a:39:a5:33:8c:01:ea:21:0c:fa:ec:2e:76:7e:
2b:50:06:18:aa:ab:9b:0c:4f:fe:cf:b2:2d:d3:39:0d:f8:c1:
ec:5b:f7:f1:14:d6:c3:f2:86:30:4d:46:9e:7d:60:9e:76:ff:
bc:7a:f2:51:4b:1f:56:6d:5d:3f:d5:ba:3d:1f:8f:d1:4b:12:
5f:8c:4c:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUWFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTAyNDU1WhcNMjUwMzA1MTAyNDU1WjAYMRYw
FAYDVQQDEw02NzkzNmE3Yi02M2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1AKfADVck3xUSKjEYqhaLa7cR3PxXJCI34wkaMKedOkMyh/9lAW4y519
Q1t4EjghRMxkSJGk9XtP1HoriapMx0dQReHp/7SC/26i+03wr1Vvd7vRZAS35hav
A8drt6r7UmUOVjngZTtUY+6Q7eotqKnTj125fbQhBcRkGYCTM9JdElfOOsmcuYVp
IB+pbe5ecVcEOQt4zsRJYk5nD5t4R9BNw6OxCgcKKLXiEHWpDDAt49ywzx/AOWSH
RKVsPRumxMg1MMKRkpT3p9EqI4dhpbDt/45sxYhtuGj4eb6WHIJ9rErPIj/4UHD0
N7Fa856KdbUO5Xp5tw2tK/EkLbnLYQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCgU
rfMiJwEMJEPDGt7UGNN5k0YAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83Njc3OTJBOERBM0QxMUVGOUU4MjRDNTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtv6MA0GCSqGSIb3DQEB
CwUAA4IBAQBlqmr9PCMi+O4L9cV90ytCoGg5ZgSZXpC2cSbzsypIifBw6m93Z+BV
llNVbUx7afUpk58GTJGk1wNDUOnaavWPPvy3auIKz97KCiEwNTlgaIEh4tEQ36gG
cZ/XkDpRfbbBYxjc2xX4/DfwY6JevzdJmknghzRbZRl3ED6X+1TL0ykfYTKNWyIE
MdxQKwkkKGKAhqoQ11nWU2+wYNLEtdli4xCCCURd67oY5ZGSsKcdrxdZ5HBW+3VM
GjmlM4wB6iEM+uwudn4rUAYYqqubDE/+z7It0zkN+MHsW/fxFNbD8oYwTUaefWCe
dv+8evJRSx9WbV0/1bo9H4/RSxJfjEwB
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:02:06 2025 by rpki-client