Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E800E256DB1B11EFB947C8B8762E951A.roa
File: E800E256DB1B11EFB947C8B8762E951A.roa (raw, json)
Hash identifier: VqpALlQC131B8AtHZkq9j0Y39RJndilzhYELD1iawuI=
Subject key identifier: 06:C0:AC:37:3F:E1:D1:62:4C:A4:CB:21:8A:D3:95:01:38:D6:C6:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01495E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E800E256DB1B11EFB947C8B8762E951A.roa
Signing time: Sat 25 Jan 2025 12:57:17 +0000
ROA not before: Sat 25 Jan 2025 12:57:14 +0000
ROA not after: Mon 03 Mar 2025 12:57:14 +0000
asID: 202656
IP address blocks: 154.219.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84318 (0x1495e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 12:57:14 2025 GMT
Not After : Mar 3 12:57:14 2025 GMT
Subject: CN=6794dfad-1514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:15:0e:2e:9d:3b:7e:d4:a8:a1:62:64:0f:
11:ef:e7:fd:f5:f0:df:4b:40:80:e8:16:ca:ac:7d:
30:72:8d:6f:a4:a8:a3:c6:d1:19:48:20:bd:ea:02:
35:2f:a1:a4:63:1a:ab:cc:0d:ef:83:66:dc:90:b3:
63:20:c8:f4:19:ed:3c:9a:00:8f:e4:1c:30:97:30:
6e:c4:cf:ee:f2:5a:90:e8:6e:bd:e1:b4:ec:1b:6f:
a6:3a:2b:8b:9b:98:50:f9:76:87:30:63:2c:46:9c:
e7:64:3b:b2:3c:ab:47:73:4e:6f:20:17:a2:b5:f3:
8f:37:81:28:2f:5c:ef:8b:a7:17:b5:7f:14:92:dc:
29:3d:7f:91:88:0e:7f:72:c7:6b:fc:83:a4:b2:01:
65:58:f1:b7:79:b5:02:25:b6:9a:ec:a9:d7:c4:a0:
e4:ac:10:ae:96:35:2c:00:6e:75:13:c8:25:af:10:
75:e6:ae:b4:1f:ea:ad:43:6f:e3:5e:dc:c5:2d:2e:
95:50:f3:f8:c3:31:c8:b5:32:da:b4:b8:74:c6:47:
cb:11:62:a3:30:91:56:43:b9:32:a5:0c:8c:90:b9:
74:94:ab:8e:f3:1d:d2:ad:10:e0:fc:3d:6a:0b:3b:
38:6b:7b:ae:14:d5:68:36:aa:d8:a7:99:cb:7a:26:
3b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C0:AC:37:3F:E1:D1:62:4C:A4:CB:21:8A:D3:95:01:38:D6:C6:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E800E256DB1B11EFB947C8B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.24.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b2:7b:dd:71:80:bc:8d:d9:77:0d:f0:f9:3f:d4:0d:9b:b2:
d7:54:98:fa:39:96:e3:77:52:68:38:ee:0c:db:de:af:15:4d:
02:41:49:3c:cb:de:3e:df:7c:26:0c:5f:ae:b4:ae:2f:2d:2d:
db:4f:65:9d:5e:64:c0:55:90:13:7a:6b:c8:9b:1f:6e:54:67:
98:13:13:31:f0:1b:7b:49:85:e3:84:f4:ad:5e:bf:6d:7d:85:
14:be:f6:df:99:f3:97:c7:0a:d3:72:fb:01:da:42:ad:14:47:
c0:18:49:1f:ff:56:e4:77:55:ad:bc:e7:7e:a3:81:2c:e3:e5:
0e:e6:6c:3d:4a:b7:89:39:98:9c:4c:6f:50:31:04:68:c2:95:
b1:6d:0e:a6:6e:65:32:2c:a6:61:d8:91:95:fc:1e:22:34:9d:
35:14:3c:2e:1d:97:a6:bf:e9:50:c5:b6:3f:0c:9d:87:0c:a5:
d7:84:da:55:a2:5b:0b:37:98:46:e2:b6:70:ea:e2:03:c6:ec:
53:80:7b:3f:65:a8:5d:95:20:ef:3c:b4:65:25:83:77:5d:59:
f8:3f:07:fc:4b:2a:70:38:64:7e:b5:b0:2f:27:b6:b4:28:9e:
73:a3:92:94:c8:52:28:b8:5c:87:62:18:d7:e4:fb:0f:b7:50:
33:8f:ba:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUleMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI1MTI1NzE0WhcNMjUwMzAzMTI1NzE0WjAYMRYw
FAYDVQQDEw02Nzk0ZGZhZC0xNTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtyAVDi6dO37UqKFiZA8R7+f99fDfS0CA6BbKrH0wco1vpKijxtEZSCC9
6gI1L6GkYxqrzA3vg2bckLNjIMj0Ge08mgCP5BwwlzBuxM/u8lqQ6G694bTsG2+m
OiuLm5hQ+XaHMGMsRpznZDuyPKtHc05vIBeitfOPN4EoL1zvi6cXtX8UktwpPX+R
iA5/csdr/IOksgFlWPG3ebUCJbaa7KnXxKDkrBCuljUsAG51E8glrxB15q60H+qt
Q2/jXtzFLS6VUPP4wzHItTLatLh0xkfLEWKjMJFWQ7kypQyMkLl0lKuO8x3SrRDg
/D1qCzs4a3uuFNVoNqrYp5nLeiY7CwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAbA
rDc/4dFiTKTLIYrTlQE41saPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FODAwRTI1NkRCMUIxMUVGQjk0N0M4Qjg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtsYMA0GCSqGSIb3DQEB
CwUAA4IBAQATsnvdcYC8jdl3DfD5P9QNm7LXVJj6OZbjd1JoOO4M296vFU0CQUk8
y94+33wmDF+utK4vLS3bT2WdXmTAVZATemvImx9uVGeYExMx8Bt7SYXjhPStXr9t
fYUUvvbfmfOXxwrTcvsB2kKtFEfAGEkf/1bkd1WtvOd+o4Es4+UO5mw9SreJOZic
TG9QMQRowpWxbQ6mbmUyLKZh2JGV/B4iNJ01FDwuHZemv+lQxbY/DJ2HDKXXhNpV
olsLN5hG4rZw6uIDxuxTgHs/ZahdlSDvPLRlJYN3XVn4Pwf8SypwOGR+tbAvJ7a0
KJ5zo5KUyFIouFyHYhjX5PsPt1Azj7pB
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:50:15 2025 by rpki-client