Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/941765D2C54211EF91C8B774762E951A.roa
File: 941765D2C54211EF91C8B774762E951A.roa (raw, json)
Hash identifier: 5K4aGyBGYasts7PQzZBuCl4BTZLI1A9UjrRGivWGCtk=
Subject key identifier: 68:16:03:95:01:77:B5:EF:0F:35:3A:71:56:1D:3E:52:63:99:31:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C8B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/941765D2C54211EF91C8B774762E951A.roa
Signing time: Sat 28 Dec 2024 17:38:42 +0000
ROA not before: Sat 28 Dec 2024 17:38:38 +0000
ROA not after: Fri 12 Dec 2025 17:38:38 +0000
asID: 984
IP address blocks: 154.206.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76939 (0x12c8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:38:38 2024 GMT
Not After : Dec 12 17:38:38 2025 GMT
Subject: CN=677037a1-b3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:37:41:c5:59:15:d8:c3:75:db:1e:62:7d:
62:eb:d5:54:a1:60:d2:2a:d2:74:fc:1a:93:fb:65:
00:db:63:1a:05:d3:59:a3:a6:81:99:53:04:14:3b:
6d:bd:79:51:1c:f6:ec:99:9d:5e:62:63:cf:96:1b:
df:7e:ed:54:a2:b6:c8:ea:8d:ec:15:ed:e3:27:3c:
b5:e6:63:d0:76:35:ac:94:de:5c:54:3c:5b:c4:73:
01:aa:a9:b6:35:e7:53:a3:22:42:16:53:96:c1:43:
1f:b2:d7:ac:f1:27:aa:96:ae:25:f3:1e:3b:ec:4c:
af:2e:b5:9b:a4:41:1a:01:67:69:43:e5:f1:93:fa:
94:5c:84:1a:7b:87:21:86:2c:4a:e2:06:25:84:73:
2a:e8:f2:d6:df:39:ed:30:ce:9d:cf:26:63:e8:07:
89:22:07:83:ed:0b:10:0f:49:5b:f3:9f:4f:33:74:
22:17:7f:b4:a0:46:c8:7e:0b:75:95:dc:56:4c:46:
05:5e:46:f2:df:4b:a2:cd:01:3e:26:1e:5c:37:9d:
2c:59:02:97:2c:c6:8a:dd:1d:44:02:d1:76:68:4c:
b1:c1:f7:b0:86:1e:47:cc:c5:15:fd:4a:69:6a:69:
d6:b5:c1:f7:b3:be:1c:b2:23:5f:f5:f2:db:f9:e6:
de:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:16:03:95:01:77:B5:EF:0F:35:3A:71:56:1D:3E:52:63:99:31:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/941765D2C54211EF91C8B774762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.253.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:87:30:e4:72:ab:9e:db:9b:94:af:9f:86:62:d1:d9:ed:a0:
ac:15:3e:d7:92:19:a2:85:10:ae:ec:db:29:f4:2e:cd:fe:b8:
eb:64:70:3b:43:63:de:0d:c3:c5:1f:e5:67:75:04:10:92:6f:
c2:0e:a2:8c:2a:7a:79:a9:8c:3e:70:63:5b:58:a1:f2:5d:83:
54:b2:f5:e6:2c:90:7b:74:b6:b2:8a:36:44:ae:a1:f0:3d:34:
f0:7f:f7:10:49:47:ac:76:e2:72:6d:34:7b:4c:06:32:00:05:
4b:96:a3:25:d4:ec:59:b6:43:ae:3b:1e:f4:25:86:3d:19:44:
48:1c:b3:f0:ae:0f:14:e1:dd:3f:ae:38:60:35:71:5f:ad:db:
ec:2c:a7:f2:bd:6f:26:76:a9:23:bf:d9:87:e7:56:40:38:f6:
50:cb:c2:c8:63:ab:0c:dd:c6:6b:87:a5:64:0f:07:dc:58:c7:
60:d0:d5:d4:28:22:01:12:33:ec:13:97:b7:14:6a:a5:ba:92:
54:03:6e:96:77:22:2b:d9:9e:a3:40:aa:62:3d:4f:6a:fc:81:
e2:b2:6d:ac:9b:9d:40:bf:46:7e:f1:1e:21:b8:1b:a4:f5:ec:
ef:85:46:6f:aa:0d:ee:e2:5e:10:07:c1:47:d2:4d:1f:bf:98:
c9:e0:20:d3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASyLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTczODM4WhcNMjUxMjEyMTczODM4WjAYMRYw
FAYDVQQDEw02NzcwMzdhMS1iM2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtIE3QcVZFdjDddseYn1i69VUoWDSKtJ0/BqT+2UA22MaBdNZo6aBmVME
FDttvXlRHPbsmZ1eYmPPlhvffu1UorbI6o3sFe3jJzy15mPQdjWslN5cVDxbxHMB
qqm2NedToyJCFlOWwUMfstes8Seqlq4l8x477EyvLrWbpEEaAWdpQ+Xxk/qUXIQa
e4chhixK4gYlhHMq6PLW3zntMM6dzyZj6AeJIgeD7QsQD0lb859PM3QiF3+0oEbI
fgt1ldxWTEYFXkby30uizQE+Jh5cN50sWQKXLMaK3R1EAtF2aEyxwfewhh5HzMUV
/UppamnWtcH3s74csiNf9fLb+ebeaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGgW
A5UBd7XvDzU6cVYdPlJjmTGuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NDE3NjVEMkM1NDIxMUVGOTFDOEI3NzQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms79MA0GCSqGSIb3DQEB
CwUAA4IBAQAfhzDkcque25uUr5+GYtHZ7aCsFT7XkhmihRCu7Nsp9C7N/rjrZHA7
Q2PeDcPFH+VndQQQkm/CDqKMKnp5qYw+cGNbWKHyXYNUsvXmLJB7dLayijZErqHw
PTTwf/cQSUesduJybTR7TAYyAAVLlqMl1OxZtkOuOx70JYY9GURIHLPwrg8U4d0/
rjhgNXFfrdvsLKfyvW8mdqkjv9mH51ZAOPZQy8LIY6sM3cZrh6VkDwfcWMdg0NXU
KCIBEjPsE5e3FGqlupJUA26WdyIr2Z6jQKpiPU9q/IHism2sm51Av0Z+8R4huBuk
9ezvhUZvqg3u4l4QB8FH0k0fv5jJ4CDT
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:18:36 2025 by rpki-client