Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24FFBB30C27811EF95F3FF42762E951A.roa
File: 24FFBB30C27811EF95F3FF42762E951A.roa (raw, json)
Hash identifier: l0bKcALFdXu/hHRcSPXItFsqnMMgWryi9Iju9C4Jzfk=
Subject key identifier: 8E:D7:C9:71:22:8B:46:EF:64:56:2C:DB:BC:E3:B3:1D:92:C3:D9:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0124B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24FFBB30C27811EF95F3FF42762E951A.roa
Signing time: Wed 25 Dec 2024 04:24:34 +0000
ROA not before: Wed 25 Dec 2024 04:24:31 +0000
ROA not after: Wed 10 Dec 2025 04:24:31 +0000
asID: 984
IP address blocks: 154.211.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74930 (0x124b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 04:24:31 2024 GMT
Not After : Dec 10 04:24:31 2025 GMT
Subject: CN=676b8902-c601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:9e:49:46:88:aa:5f:46:76:5b:76:60:60:
25:37:7c:05:83:10:1b:05:c5:8f:79:6c:ae:06:17:
9f:24:ea:83:cd:ae:93:da:36:5c:2d:e8:df:42:3b:
c4:9b:c8:14:08:89:ec:2b:ba:f6:ec:08:b7:fe:93:
79:f6:78:87:b6:67:8e:10:f1:6b:f3:1a:25:3b:ce:
4e:b1:9d:73:d8:50:14:4b:84:55:69:27:1e:53:6f:
e5:c2:ab:35:6f:f4:8f:09:ef:49:3f:00:20:0d:08:
f9:2e:a4:43:a1:31:12:c5:e7:35:6e:24:dc:d4:ee:
fc:08:b7:fa:9d:1d:59:31:fa:53:be:e8:cc:a4:04:
fb:8d:c8:a6:be:79:7a:6f:7f:55:33:bf:c2:19:a0:
96:c2:e3:fc:26:59:25:57:dd:91:b8:79:e6:1e:35:
97:db:96:aa:af:94:67:04:90:4c:4d:ef:32:c2:12:
d6:6a:38:e7:a8:9f:79:80:7e:b4:95:70:5c:df:20:
e7:4c:a2:2d:9a:b5:d1:c6:3a:82:bc:02:49:a6:50:
0e:70:b9:0a:eb:8c:d8:f9:8b:af:0e:6e:76:b1:fb:
17:41:51:83:e3:85:69:75:a4:77:81:20:84:ed:7a:
80:04:39:22:fd:37:d8:bf:7e:c8:72:73:82:7b:75:
c1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D7:C9:71:22:8B:46:EF:64:56:2C:DB:BC:E3:B3:1D:92:C3:D9:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24FFBB30C27811EF95F3FF42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.246.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:56:15:13:a8:1e:3b:62:3d:47:d0:ad:2d:1e:d4:67:b3:e9:
eb:67:a9:66:5d:1b:0d:65:cf:3d:2a:5a:b6:e4:a3:f9:91:52:
aa:50:b7:ac:62:48:31:05:3d:76:6d:2a:b5:80:08:7c:5f:bb:
00:87:1d:86:7a:26:56:cd:0b:ab:76:1a:c5:04:df:57:6c:ba:
d8:d9:cd:98:68:15:91:ed:d1:ea:86:c8:90:66:22:3d:f3:dd:
49:b1:78:fb:cc:bc:fc:1a:d9:00:45:03:2c:45:d9:69:39:db:
e7:6b:91:b7:a6:92:68:50:7b:26:93:4b:90:31:d6:7c:f1:e5:
15:46:df:ea:de:51:d7:70:1b:11:37:63:1a:f0:22:e1:0b:f6:
96:42:7b:2b:dc:54:8d:38:66:ee:c4:18:17:f2:99:ea:39:cb:
47:6e:61:7d:08:c4:7c:f1:8a:87:d6:57:21:d8:ca:e6:1a:8b:
31:f4:bb:83:89:40:94:50:cd:75:59:81:3d:92:f7:52:98:74:
c7:47:7c:00:da:93:d3:34:14:a1:a5:aa:d1:cc:6a:8a:dc:04:
5c:17:26:d5:d1:11:e6:5e:27:36:6f:21:27:b0:9c:22:d4:5a:
82:2f:7f:4d:81:60:29:36:65:87:d9:1a:50:ca:16:74:72:36:
71:79:95:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASSyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDQyNDMxWhcNMjUxMjEwMDQyNDMxWjAYMRYw
FAYDVQQDEw02NzZiODkwMi1jNjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtWOeSUaIql9Gdlt2YGAlN3wFgxAbBcWPeWyuBhefJOqDza6T2jZcLejf
QjvEm8gUCInsK7r27Ai3/pN59niHtmeOEPFr8xolO85OsZ1z2FAUS4RVaSceU2/l
wqs1b/SPCe9JPwAgDQj5LqRDoTESxec1biTc1O78CLf6nR1ZMfpTvujMpAT7jcim
vnl6b39VM7/CGaCWwuP8JlklV92RuHnmHjWX25aqr5RnBJBMTe8ywhLWajjnqJ95
gH60lXBc3yDnTKItmrXRxjqCvAJJplAOcLkK64zY+YuvDm52sfsXQVGD44VpdaR3
gSCE7XqABDki/TfYv37IcnOCe3XBuQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFI7X
yXEii0bvZFYs27zjsx2Sw9mbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNEZGQkIzMEMyNzgxMUVGOTVGM0ZGNDI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtP2MA0GCSqGSIb3DQEB
CwUAA4IBAQCwVhUTqB47Yj1H0K0tHtRns+nrZ6lmXRsNZc89Klq25KP5kVKqULes
YkgxBT12bSq1gAh8X7sAhx2GeiZWzQurdhrFBN9XbLrY2c2YaBWR7dHqhsiQZiI9
891JsXj7zLz8GtkARQMsRdlpOdvna5G3ppJoUHsmk0uQMdZ88eUVRt/q3lHXcBsR
N2Ma8CLhC/aWQnsr3FSNOGbuxBgX8pnqOctHbmF9CMR88YqH1lch2MrmGosx9LuD
iUCUUM11WYE9kvdSmHTHR3wA2pPTNBShparRzGqK3ARcFybV0RHmXic2byEnsJwi
1FqCL39NgWApNmWH2RpQyhZ0cjZxeZVn
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:03 2025 by rpki-client