Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BEF5280F44511EF8C706369762E951A.roa
File: 2BEF5280F44511EF8C706369762E951A.roa (raw, json)
Hash identifier: fYYeOeXm5YIpW2DUUhLRBSjj8J/lggZ1/lx4v5O62PI=
Subject key identifier: 81:7C:17:83:74:1D:BA:6D:1D:F8:D4:E5:CE:F2:C7:C2:23:08:EB:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BEF5280F44511EF8C706369762E951A.roa
Signing time: Wed 26 Feb 2025 13:25:40 +0000
ROA not before: Wed 26 Feb 2025 13:25:36 +0000
ROA not after: Sat 19 Feb 2028 13:25:36 +0000
asID: 17561
IP address blocks: 154.82.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91069 (0x163bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:25:36 2025 GMT
Not After : Feb 19 13:25:36 2028 GMT
Subject: CN=67bf1654-6968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7c:cf:b4:27:d4:4e:7d:68:01:3f:4a:f0:54:
1f:2e:f1:3d:25:c4:ec:20:df:9d:9f:b4:04:4e:0c:
44:7d:2c:42:30:76:94:9c:b1:a2:13:59:23:9e:bf:
94:67:d2:f4:32:17:f3:28:d0:20:42:7a:c5:99:8e:
b7:0b:8e:8b:27:48:fa:7f:6a:15:c7:c8:bf:11:19:
20:89:48:7c:c3:1a:37:9c:f0:a7:54:47:a3:e0:ef:
e8:1f:07:6e:5e:09:ad:dd:5d:68:30:4e:76:97:32:
df:0a:e2:e9:c5:49:42:a4:2e:3d:c6:3c:3a:f3:e0:
c2:6f:11:73:1e:0a:b5:44:b4:35:b5:dc:62:53:e9:
81:a2:91:e2:3e:bb:26:42:b0:1b:8f:55:df:10:07:
da:a9:95:1e:70:fb:cb:f8:3a:2f:07:3d:dd:cc:50:
22:47:05:5f:65:2b:bb:2d:8a:24:8a:a3:c9:6d:1b:
68:1a:79:e3:d6:ad:22:38:eb:a6:ae:45:c6:2e:94:
91:3a:8e:87:05:3a:c7:d9:96:cb:b8:f3:48:bd:87:
85:f7:7c:81:e2:90:3d:8b:e4:2d:30:1f:a2:c4:58:
bf:75:03:7a:11:8d:a7:11:a2:6a:00:f5:87:18:92:
08:c3:b4:55:ae:7b:c5:4c:a6:e9:ba:7c:6e:32:f3:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7C:17:83:74:1D:BA:6D:1D:F8:D4:E5:CE:F2:C7:C2:23:08:EB:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BEF5280F44511EF8C706369762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.178.0/24
Signature Algorithm: sha256WithRSAEncryption
37:38:c3:bf:29:ba:67:6e:c7:e3:3e:64:e3:91:2d:ca:94:20:
cb:e9:b0:4c:8e:04:0f:14:a9:75:69:7a:70:85:5f:4a:0b:f7:
87:1f:6f:6b:b2:9c:20:4b:55:8b:87:d5:ad:1b:12:56:04:10:
2e:26:30:e0:c1:cb:38:89:d8:3c:c1:25:08:93:66:33:f5:73:
52:e2:f6:78:37:29:fc:93:37:ba:46:96:1a:77:bc:b6:fc:74:
79:33:36:98:40:8d:6d:fd:9f:d4:9e:be:87:cc:37:34:8b:6f:
25:c7:86:2c:f6:16:49:04:0d:75:56:1c:4d:9c:b6:33:b9:86:
31:a8:24:12:82:75:f1:7e:42:b5:8f:a7:8b:6e:37:47:5f:94:
40:27:36:cf:8a:8b:e9:3d:bb:9b:94:a5:aa:80:72:9f:77:b0:
01:6a:ed:c3:95:71:3f:03:51:13:1c:a0:b9:d6:5d:b6:be:39:
cb:d8:b2:26:75:dd:00:73:1c:08:64:e5:f5:18:8c:be:7f:d8:
46:a4:91:75:47:f7:89:7a:45:c4:4c:50:31:d7:59:9a:69:15:
f1:97:3b:5d:cd:2b:54:33:7b:b1:5a:bf:b8:8b:e9:fa:f4:07:
cb:f5:9a:aa:77:be:83:70:b0:33:65:57:e6:c3:0d:18:2a:5d:
7b:11:e1:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWO9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTMyNTM2WhcNMjgwMjE5MTMyNTM2WjAYMRYw
FAYDVQQDEw02N2JmMTY1NC02OTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA23zPtCfUTn1oAT9K8FQfLvE9JcTsIN+dn7QETgxEfSxCMHaUnLGiE1kj
nr+UZ9L0MhfzKNAgQnrFmY63C46LJ0j6f2oVx8i/ERkgiUh8wxo3nPCnVEej4O/o
HwduXgmt3V1oME52lzLfCuLpxUlCpC49xjw68+DCbxFzHgq1RLQ1tdxiU+mBopHi
PrsmQrAbj1XfEAfaqZUecPvL+DovBz3dzFAiRwVfZSu7LYokiqPJbRtoGnnj1q0i
OOumrkXGLpSROo6HBTrH2ZbLuPNIvYeF93yB4pA9i+QtMB+ixFi/dQN6EY2nEaJq
APWHGJIIw7RVrnvFTKbpunxuMvNHKwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIF8
F4N0HbptHfjU5c7yx8IjCOtAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQkVGNTI4MEY0NDUxMUVGOEM3MDYzNjk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlKyMA0GCSqGSIb3DQEB
CwUAA4IBAQA3OMO/KbpnbsfjPmTjkS3KlCDL6bBMjgQPFKl1aXpwhV9KC/eHH29r
spwgS1WLh9WtGxJWBBAuJjDgwcs4idg8wSUIk2Yz9XNS4vZ4Nyn8kze6RpYad7y2
/HR5MzaYQI1t/Z/Unr6HzDc0i28lx4Ys9hZJBA11VhxNnLYzuYYxqCQSgnXxfkK1
j6eLbjdHX5RAJzbPiovpPbublKWqgHKfd7ABau3DlXE/A1ETHKC51l22vjnL2LIm
dd0AcxwIZOX1GIy+f9hGpJF1R/eJekXETFAx11maaRXxlztdzStUM3uxWr+4i+n6
9AfL9Zqqd76DcLAzZVfmww0YKl17EeE5
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:04:23 2025 by rpki-client