Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8325C16F45011EF971392BB762E951A.roa
File: E8325C16F45011EF971392BB762E951A.roa (raw, json)
Hash identifier: 3M2KgrdsjSPh41GWiFMBer6nbcH+0F7CV1i41W2a/dk=
Subject key identifier: 7E:30:32:5E:6D:54:F4:9D:49:FE:7E:44:D8:5D:12:F3:83:3A:29:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01647F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8325C16F45011EF971392BB762E951A.roa
Signing time: Wed 26 Feb 2025 14:49:40 +0000
ROA not before: Wed 26 Feb 2025 14:49:36 +0000
ROA not after: Sat 19 Feb 2028 14:49:36 +0000
asID: 17561
IP address blocks: 154.82.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91263 (0x1647f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:49:36 2025 GMT
Not After : Feb 19 14:49:36 2028 GMT
Subject: CN=67bf2a04-4d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:63:d8:ef:16:c5:28:49:75:90:cb:2b:f9:
57:e5:9a:31:b3:ea:74:0a:10:b5:b7:b7:1b:88:a5:
ce:01:2a:d2:b8:52:e3:9d:61:11:84:52:61:ef:9a:
d5:5e:c4:b4:3f:76:c2:1f:ee:df:63:1d:a3:0f:10:
8b:83:44:22:21:95:89:f3:cd:9a:b2:d1:c6:18:a8:
d5:95:08:85:91:93:c4:e3:fb:3f:6c:9e:ee:4b:a1:
6b:93:a9:87:ea:35:c3:1d:d5:04:2b:cb:d8:47:dd:
2f:62:b3:f5:ac:3d:fa:ab:69:60:af:16:45:00:fb:
d7:c8:5d:ec:34:e6:5d:8f:2a:f6:f0:9c:c0:0b:08:
c1:0d:91:90:a5:97:b7:1a:c4:f0:30:64:a8:ba:f8:
05:9d:99:f1:e7:41:76:78:4a:c7:e1:fa:09:a8:ce:
35:03:ee:be:1c:bf:c1:31:ca:b2:87:96:73:b9:18:
5f:b8:35:5d:ba:5b:c9:19:8b:9c:c5:5f:bf:d8:88:
b2:5c:07:39:08:04:c3:33:eb:61:40:a2:99:46:e4:
0a:25:14:c2:5e:44:72:20:21:15:0a:f1:d3:7d:01:
c7:d2:ed:52:97:61:c3:75:de:c1:2c:e1:31:43:47:
76:53:29:bb:3a:31:b8:35:e4:6d:0f:0a:a4:a7:2e:
7b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:30:32:5E:6D:54:F4:9D:49:FE:7E:44:D8:5D:12:F3:83:3A:29:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8325C16F45011EF971392BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.219.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:97:11:95:49:bb:3f:66:cc:09:66:05:02:8e:53:de:77:8d:
3f:43:bc:42:21:4d:b9:d8:e4:46:c7:e1:d5:6c:f7:a7:22:1f:
98:0e:04:ce:44:37:8f:e5:a6:bf:be:8e:c2:a0:2d:80:01:db:
21:a7:46:c0:48:7e:5d:b5:b9:7a:02:5b:2d:e9:3c:b2:d1:53:
2b:b2:db:9c:58:43:50:09:40:2a:bf:0d:62:8b:d2:b0:9e:87:
28:c6:1a:e6:7f:98:0d:de:4f:30:20:18:46:e0:d5:8c:4b:bb:
d7:15:29:f2:86:e4:5c:94:c2:ed:b4:18:1f:52:98:72:c8:b5:
58:ab:3e:f0:ad:5c:5d:b7:fb:af:d8:2f:21:d1:30:db:68:74:
98:88:64:1f:25:79:06:b4:0d:e2:59:ca:70:5c:7b:2e:59:19:
77:ff:58:c2:94:20:70:15:6c:57:d0:13:c2:12:2e:d6:3a:01:
51:68:8c:0a:86:9a:95:a8:34:fb:80:83:8e:25:fa:ac:dd:86:
2c:d9:c8:5a:a0:6b:90:da:5a:cf:68:56:af:5a:8e:2a:da:be:
52:af:26:d7:64:e2:a3:2b:c1:8f:85:75:13:d7:b7:48:4b:c8:
65:ef:f9:4d:c8:57:4b:c4:f3:ed:7d:44:69:44:b1:7f:f8:1b:
15:38:86:28
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWR/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTQ0OTM2WhcNMjgwMjE5MTQ0OTM2WjAYMRYw
FAYDVQQDEw02N2JmMmEwNC00ZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnjNj2O8WxShJdZDLK/lX5Zoxs+p0ChC1t7cbiKXOASrSuFLjnWERhFJh
75rVXsS0P3bCH+7fYx2jDxCLg0QiIZWJ882astHGGKjVlQiFkZPE4/s/bJ7uS6Fr
k6mH6jXDHdUEK8vYR90vYrP1rD36q2lgrxZFAPvXyF3sNOZdjyr28JzACwjBDZGQ
pZe3GsTwMGSouvgFnZnx50F2eErH4foJqM41A+6+HL/BMcqyh5ZzuRhfuDVdulvJ
GYucxV+/2IiyXAc5CATDM+thQKKZRuQKJRTCXkRyICEVCvHTfQHH0u1Sl2HDdd7B
LOExQ0d2Uym7OjG4NeRtDwqkpy57dwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH4w
Ml5tVPSdSf5+RNhdEvODOintMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FODMyNUMxNkY0NTAxMUVGOTcxMzkyQkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlLbMA0GCSqGSIb3DQEB
CwUAA4IBAQCulxGVSbs/ZswJZgUCjlPed40/Q7xCIU252ORGx+HVbPenIh+YDgTO
RDeP5aa/vo7CoC2AAdshp0bASH5dtbl6Alst6Tyy0VMrstucWENQCUAqvw1ii9Kw
nocoxhrmf5gN3k8wIBhG4NWMS7vXFSnyhuRclMLttBgfUphyyLVYqz7wrVxdt/uv
2C8h0TDbaHSYiGQfJXkGtA3iWcpwXHsuWRl3/1jClCBwFWxX0BPCEi7WOgFRaIwK
hpqVqDT7gIOOJfqs3YYs2chaoGuQ2lrPaFavWo4q2r5SrybXZOKjK8GPhXUT17dI
S8hl7/lNyFdLxPPtfURpRLF/+BsVOIYo
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:01 2025 by rpki-client