Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEFD8026C1A111EF84437B5D762E951A.roa
File: DEFD8026C1A111EF84437B5D762E951A.roa (raw, json)
Hash identifier: YFp8sABKRUmTreWFld758P0vAHfetzhPaHm+9iLXro4=
Subject key identifier: 62:4B:54:8E:31:C8:45:1F:3C:0A:25:FB:EB:54:55:A4:8A:EF:C4:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEFD8026C1A111EF84437B5D762E951A.roa
Signing time: Tue 24 Dec 2024 02:50:45 +0000
ROA not before: Tue 24 Dec 2024 02:50:41 +0000
ROA not after: Wed 10 Dec 2025 02:50:41 +0000
asID: 984
IP address blocks: 154.90.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73917 (0x120bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:50:41 2024 GMT
Not After : Dec 10 02:50:41 2025 GMT
Subject: CN=676a2185-9ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:c5:b1:53:e5:45:e2:3a:31:04:c6:45:14:
98:3d:c8:f4:4d:17:6e:38:6e:d4:f9:2e:72:21:6f:
97:e3:ed:ea:19:b0:cc:a4:09:33:8f:b1:53:a1:98:
73:c3:90:eb:f7:38:52:9e:7f:fe:8e:43:9e:fa:74:
57:cc:cc:0e:38:7e:c4:ca:80:56:db:c7:65:16:cd:
ef:df:24:13:92:f3:eb:6d:fb:2c:24:d2:8e:8e:cd:
79:46:93:7b:36:9a:a8:29:68:c2:5c:d5:07:f1:90:
13:e3:d2:bc:ba:65:7a:59:03:36:43:a9:6f:36:0f:
0b:fd:4c:13:2b:e3:87:a5:d2:2d:4a:98:f4:32:29:
c6:0f:43:0d:cd:9e:4e:c2:11:f9:e4:8c:56:f4:8e:
97:1a:45:69:56:a2:8e:e7:b6:56:4c:d4:b4:31:57:
2a:f8:47:6c:c5:19:e0:3e:68:cb:10:8c:c4:3c:9b:
c0:b6:91:d7:5c:31:d6:8e:5b:e2:a3:69:2f:e2:a9:
5f:62:0a:4c:d5:c6:c3:f8:55:ae:d1:13:96:00:ed:
d6:1d:30:d2:bb:fb:bc:ad:85:7c:53:3c:e4:1a:6c:
e3:3b:e1:11:fd:64:3b:11:8d:35:cd:99:51:7d:2e:
4b:ae:bf:e6:25:da:69:e3:3e:c7:ca:1d:51:27:1f:
65:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4B:54:8E:31:C8:45:1F:3C:0A:25:FB:EB:54:55:A4:8A:EF:C4:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEFD8026C1A111EF84437B5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.250.0/24
Signature Algorithm: sha256WithRSAEncryption
60:0d:59:91:19:68:9c:90:d6:fe:c4:76:6f:f1:44:44:07:17:
1c:0a:73:d7:7b:9f:7f:23:16:5b:2f:f6:b7:2a:3d:05:b5:33:
49:80:86:20:a2:35:63:69:bf:7e:fd:0d:4b:74:f2:e7:b1:ca:
e1:55:d8:bc:1e:d9:da:72:99:2f:60:0c:be:2b:11:b4:cd:cd:
b3:39:e3:79:5a:02:13:51:ea:66:b5:cf:cd:5d:35:1c:e2:6c:
35:7d:e0:3b:23:b0:fa:90:18:85:ae:f9:2c:e2:da:bb:c8:3f:
3b:99:02:4e:b8:5d:00:92:7b:05:af:f8:dd:e0:b2:2e:5f:bf:
03:03:f5:86:a7:26:50:cf:e3:c1:99:bf:df:1d:dc:b6:1b:dc:
a7:7e:96:24:32:49:b4:70:44:94:93:72:08:f8:5d:68:bd:ae:
7e:41:b3:aa:4c:b9:d5:74:f5:69:e6:84:13:bb:bf:40:d2:d7:
4d:c2:27:c8:fd:74:34:56:94:76:79:17:bb:a4:93:69:bf:2c:
85:a0:44:71:88:02:92:0b:59:fd:c9:94:2c:7a:4a:c7:9a:9e:
99:9a:93:83:24:41:dc:13:fe:78:33:e7:c0:a9:18:93:7e:81:
75:d9:89:e1:f6:82:cd:e2:3a:02:46:5f:9a:8d:db:3f:88:30:
68:ea:f5:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASC9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDI1MDQxWhcNMjUxMjEwMDI1MDQxWjAYMRYw
FAYDVQQDEw02NzZhMjE4NS05ZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvmvFsVPlReI6MQTGRRSYPcj0TRduOG7U+S5yIW+X4+3qGbDMpAkzj7FT
oZhzw5Dr9zhSnn/+jkOe+nRXzMwOOH7EyoBW28dlFs3v3yQTkvPrbfssJNKOjs15
RpN7NpqoKWjCXNUH8ZAT49K8umV6WQM2Q6lvNg8L/UwTK+OHpdItSpj0MinGD0MN
zZ5OwhH55IxW9I6XGkVpVqKO57ZWTNS0MVcq+EdsxRngPmjLEIzEPJvAtpHXXDHW
jlvio2kv4qlfYgpM1cbD+FWu0ROWAO3WHTDSu/u8rYV8UzzkGmzjO+ER/WQ7EY01
zZlRfS5Lrr/mJdpp4z7Hyh1RJx9ltwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGJL
VI4xyEUfPAol++tUVaSK78RKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERUZEODAyNkMxQTExMUVGODQ0MzdCNUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlr6MA0GCSqGSIb3DQEB
CwUAA4IBAQBgDVmRGWickNb+xHZv8UREBxccCnPXe59/IxZbL/a3Kj0FtTNJgIYg
ojVjab9+/Q1LdPLnscrhVdi8HtnacpkvYAy+KxG0zc2zOeN5WgITUepmtc/NXTUc
4mw1feA7I7D6kBiFrvks4tq7yD87mQJOuF0AknsFr/jd4LIuX78DA/WGpyZQz+PB
mb/fHdy2G9ynfpYkMkm0cESUk3II+F1ova5+QbOqTLnVdPVp5oQTu79A0tdNwifI
/XQ0VpR2eRe7pJNpvyyFoERxiAKSC1n9yZQsekrHmp6ZmpODJEHcE/54M+fAqRiT
foF12Ynh9oLN4joCRl+ajds/iDBo6vVB
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:43 2025 by rpki-client