Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08419110D9D611EF8EAA008F762E951A.roa
File: 08419110D9D611EF8EAA008F762E951A.roa (raw, json)
Hash identifier: sMcSPlh1DU87+4pjn0Y7122Q6YZ98HpcjhzMhUzzUjY=
Subject key identifier: 18:2C:82:AD:96:56:F7:35:19:9E:F5:FF:CD:E2:A0:F8:F6:CB:BB:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014335
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08419110D9D611EF8EAA008F762E951A.roa
Signing time: Thu 23 Jan 2025 22:04:36 +0000
ROA not before: Fri 24 Jan 2025 22:04:32 +0000
ROA not after: Sat 01 Mar 2025 22:04:32 +0000
asID: 44559
IP address blocks: 154.205.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82741 (0x14335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 22:04:32 2025 GMT
Not After : Mar 1 22:04:32 2025 GMT
Subject: CN=6792bcf4-9d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:ad:26:55:f5:28:bc:e5:8b:cf:80:a0:c1:
9b:da:01:59:02:8e:50:8f:ff:80:74:dd:a2:47:c8:
73:ad:c7:d5:ef:c7:35:14:b1:f9:71:83:cf:43:4f:
14:10:51:d7:bf:f5:2e:94:6a:03:33:5a:8a:3e:1a:
4f:79:d9:51:6a:27:ec:ca:00:16:11:26:27:a5:94:
6a:0b:1a:ba:9a:09:93:67:78:b4:53:3e:c1:7c:25:
c1:59:04:31:57:21:df:6c:ad:69:e1:22:17:ca:b7:
86:68:70:ff:d0:27:6e:7c:22:17:cf:b7:71:e7:b6:
86:26:b5:96:a4:21:0e:06:31:02:a3:a8:43:e1:3b:
e1:af:13:eb:b1:7c:df:08:9c:3d:bd:72:05:c9:a6:
13:ac:21:b1:04:31:a0:49:c0:68:49:97:ae:99:15:
1a:84:5d:6e:a0:97:82:c0:b7:89:76:be:48:87:fc:
2b:a8:e9:97:65:c3:4e:63:ce:89:d3:73:90:a0:2d:
12:e3:3f:74:d7:8b:d6:11:de:74:4f:b6:08:d8:5f:
b8:ac:11:08:08:65:78:d4:d9:9b:2f:57:3b:1d:59:
49:1a:4e:72:91:65:74:30:bd:bf:7e:8e:bb:3e:94:
0f:66:37:71:ba:f2:da:81:11:74:9a:10:45:ea:a7:
04:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2C:82:AD:96:56:F7:35:19:9E:F5:FF:CD:E2:A0:F8:F6:CB:BB:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08419110D9D611EF8EAA008F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.225.0/24
Signature Algorithm: sha256WithRSAEncryption
36:58:89:72:c8:c8:de:8e:11:ff:d1:e8:49:b9:1a:ad:a9:06:
28:c4:e3:45:bc:fe:d3:e6:cc:92:1b:9e:5f:e7:0c:be:6a:b4:
d5:71:95:d8:eb:08:e2:53:41:62:40:c3:3d:41:53:b1:ed:ad:
8d:79:0c:ee:98:a0:23:55:f5:36:58:e0:db:8a:31:45:11:c4:
79:79:0e:8a:5a:08:a5:c5:51:ae:57:3b:2d:ed:69:20:ae:4d:
fd:5b:fb:8a:d0:af:52:8f:d9:94:2a:09:fd:97:21:e2:17:2c:
c6:82:d1:f8:f6:ef:40:71:3a:d3:17:2c:f6:81:67:d4:dc:b9:
7e:56:f8:04:a4:60:10:61:cb:fa:93:ef:c0:5f:c6:96:68:4c:
57:5a:6d:b2:fa:7f:e2:76:e1:f7:c0:77:6a:8e:c9:5b:80:6e:
2b:b4:e4:2b:82:30:3c:79:63:7c:ee:56:00:77:cb:e0:3b:aa:
ec:de:98:e6:b7:bb:5f:30:99:7a:db:15:82:aa:01:a7:30:fe:
a8:b6:04:06:94:2d:ed:65:43:18:7b:e4:d6:0a:56:84:7b:99:
81:d2:4a:f0:72:15:05:ad:23:27:01:29:70:6b:ff:5d:9e:4f:
31:ff:08:92:a7:6d:a8:90:ba:e7:9e:49:d1:e8:10:b4:e8:4e:
06:0b:5d:bd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUM1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MjIwNDMyWhcNMjUwMzAxMjIwNDMyWjAYMRYw
FAYDVQQDEw02NzkyYmNmNC05ZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt+ytJlX1KLzli8+AoMGb2gFZAo5Qj/+AdN2iR8hzrcfV78c1FLH5cYPP
Q08UEFHXv/UulGoDM1qKPhpPedlRaifsygAWESYnpZRqCxq6mgmTZ3i0Uz7BfCXB
WQQxVyHfbK1p4SIXyreGaHD/0CdufCIXz7dx57aGJrWWpCEOBjECo6hD4TvhrxPr
sXzfCJw9vXIFyaYTrCGxBDGgScBoSZeumRUahF1uoJeCwLeJdr5Ih/wrqOmXZcNO
Y86J03OQoC0S4z9014vWEd50T7YI2F+4rBEICGV41NmbL1c7HVlJGk5ykWV0ML2/
fo67PpQPZjdxuvLagRF0mhBF6qcEwQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBgs
gq2WVvc1GZ71/83ioPj2y7tSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wODQxOTExMEQ5RDYxMUVGOEVBQTAwOEY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms3hMA0GCSqGSIb3DQEB
CwUAA4IBAQA2WIlyyMjejhH/0ehJuRqtqQYoxONFvP7T5sySG55f5wy+arTVcZXY
6wjiU0FiQMM9QVOx7a2NeQzumKAjVfU2WODbijFFEcR5eQ6KWgilxVGuVzst7Wkg
rk39W/uK0K9Sj9mUKgn9lyHiFyzGgtH49u9AcTrTFyz2gWfU3Ll+VvgEpGAQYcv6
k+/AX8aWaExXWm2y+n/iduH3wHdqjslbgG4rtOQrgjA8eWN87lYAd8vgO6rs3pjm
t7tfMJl62xWCqgGnMP6otgQGlC3tZUMYe+TWClaEe5mB0krwchUFrSMnASlwa/9d
nk8x/wiSp22okLrnnknR6BC06E4GC129
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:22:33 2025 by rpki-client