Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/248FB874EE1711EFBADD3EA5762E951A.roa
File: 248FB874EE1711EFBADD3EA5762E951A.roa (raw, json)
Hash identifier: FMIjp8CksqjIIEjbAJ0P5FTStMGq7THcijfMg5qujgE=
Subject key identifier: B0:00:C9:7D:A5:6E:EC:88:75:02:5A:39:4B:68:F4:38:64:D7:BC:60
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 19F5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/248FB874EE1711EFBADD3EA5762E951A.roa
Signing time: Tue 18 Feb 2025 16:41:04 +0000
ROA not before: Tue 18 Feb 2025 16:41:00 +0000
ROA not after: Sat 20 Feb 2027 16:41:00 +0000
asID: 61317
IP address blocks: 154.16.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6645 (0x19f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 18 16:41:00 2025 GMT
Not After : Feb 20 16:41:00 2027 GMT
Subject: CN=67b4b820-df0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:02:cc:96:2b:c6:29:27:fe:68:fb:a5:75:
22:86:7e:53:20:0c:15:75:57:46:a3:50:aa:06:42:
47:87:ee:a9:0e:53:b4:97:d6:8f:26:36:d3:11:77:
f6:21:f0:10:53:23:b6:ed:1a:0e:48:40:7b:a5:38:
38:fb:a3:f3:76:05:64:bb:a9:21:1b:b9:1e:8c:1d:
3e:c9:06:35:2a:79:e9:5f:c2:b8:ee:9a:0a:33:2f:
2b:8c:6e:bd:61:9e:d4:f2:2f:98:e8:48:03:9e:55:
4d:42:6b:4f:9b:69:ee:03:d1:fa:74:a7:70:be:80:
ab:c1:18:21:4c:ed:69:ed:25:f7:73:82:5b:66:43:
68:04:db:f7:ba:43:05:11:ba:38:cb:7d:66:bc:de:
8c:6d:f0:b0:01:6d:04:c3:6a:57:a3:dd:49:d0:13:
02:b4:d5:e1:31:8b:e6:ae:6e:0e:da:8a:00:16:73:
5e:77:55:8f:fa:34:8f:ee:61:8d:af:e4:a4:1c:7a:
47:7e:77:05:9f:7c:ad:c9:2f:48:e4:fe:2b:50:4a:
84:8a:a3:03:26:ab:9d:20:27:32:0e:08:c6:b1:2d:
a5:98:84:7d:44:e0:84:af:de:89:da:01:62:e6:9d:
53:15:0a:14:c4:01:93:c5:b9:39:7a:0d:12:72:64:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:00:C9:7D:A5:6E:EC:88:75:02:5A:39:4B:68:F4:38:64:D7:BC:60
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/248FB874EE1711EFBADD3EA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.226.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:67:ec:86:cc:a1:99:b5:3c:c1:36:84:e2:29:86:41:cc:64:
9e:94:0f:5c:d7:cc:97:8b:09:eb:f5:7b:3b:e0:20:28:b8:9a:
59:d3:03:90:35:a6:41:89:81:a8:47:a5:1d:7f:85:51:8e:cf:
0b:ec:bf:ab:ed:d5:86:44:f6:d7:02:48:97:cd:e4:b8:39:e6:
1a:d6:94:0f:b7:cb:4d:b3:9a:21:97:2e:2a:d4:f7:6a:43:20:
9a:c5:07:f5:31:d3:0d:9e:eb:9c:d3:eb:9f:2e:9e:44:de:e8:
14:70:20:e5:ec:90:08:06:04:eb:05:4f:74:9a:77:3b:21:50:
55:aa:5e:44:42:65:c8:af:5d:bd:ea:c5:6a:dc:b8:c9:7f:99:
44:16:d8:0a:f5:8c:a1:39:9a:5e:68:97:23:c7:63:81:34:c7:
1a:ad:c9:03:96:77:63:3e:09:1a:b6:b7:e8:f5:f5:e7:ba:d1:
5f:80:ad:48:f8:79:e7:31:d7:6b:a9:2c:7b:3f:11:51:82:8a:
0d:e7:05:52:f9:bf:a0:dc:2b:df:b1:66:58:b0:90:f3:3d:ad:
6d:1b:99:19:a8:d3:73:b0:68:f6:20:b1:01:9c:1a:23:34:6d:
08:d0:2c:e0:d4:c3:97:30:cb:fb:12:02:6c:e3:c7:79:89:90:
9f:82:e0:8b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGfUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTAyMTgxNjQxMDBaFw0yNzAyMjAxNjQxMDBaMBgxFjAU
BgNVBAMTDTY3YjRiODIwLWRmMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGXALMlivGKSf+aPuldSKGflMgDBV1V0ajUKoGQkeH7qkOU7SX1o8mNtMR
d/Yh8BBTI7btGg5IQHulODj7o/N2BWS7qSEbuR6MHT7JBjUqeelfwrjumgozLyuM
br1hntTyL5joSAOeVU1Ca0+bae4D0fp0p3C+gKvBGCFM7WntJfdzgltmQ2gE2/e6
QwURujjLfWa83oxt8LABbQTDalej3UnQEwK01eExi+aubg7aigAWc153VY/6NI/u
YY2v5KQcekd+dwWffK3JL0jk/itQSoSKowMmq50gJzIOCMaxLaWYhH1E4ISv3ona
AWLmnVMVChTEAZPFuTl6DRJyZPi1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUsADJ
faVu7Ih1Alo5S2j0OGTXvGAwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzI0OEZCODc0RUUxNzExRUZCQUREM0VBNTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEOIwDQYJKoZIhvcNAQEL
BQADggEBAKBn7IbMoZm1PME2hOIphkHMZJ6UD1zXzJeLCev1ezvgICi4mlnTA5A1
pkGJgahHpR1/hVGOzwvsv6vt1YZE9tcCSJfN5Lg55hrWlA+3y02zmiGXLirU92pD
IJrFB/Ux0w2e65zT658unkTe6BRwIOXskAgGBOsFT3SadzshUFWqXkRCZcivXb3q
xWrcuMl/mUQW2Ar1jKE5ml5olyPHY4E0xxqtyQOWd2M+CRq2t+j19ee60V+ArUj4
eecx12upLHs/EVGCig3nBVL5v6DcK9+xZliwkPM9rW0bmRmo03OwaPYgsQGcGiM0
bQjQLODUw5cwy/sSAmzjx3mJkJ+C4Is=
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:07 2025 by rpki-client