Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09F7395CC2A111EF8638DB43762E951A.roa
File: 09F7395CC2A111EF8638DB43762E951A.roa (raw, json)
Hash identifier: rwOz6Deno4ATskw4NiepwnGeM/Iz/saUfR5iHm31JQE=
Subject key identifier: 1B:F4:C2:8B:76:5C:CE:50:57:D2:F8:D1:06:85:78:7B:F8:0D:3C:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012532
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09F7395CC2A111EF8638DB43762E951A.roa
Signing time: Wed 25 Dec 2024 09:17:18 +0000
ROA not before: Wed 25 Dec 2024 09:17:15 +0000
ROA not after: Thu 13 Feb 2025 09:17:15 +0000
asID: 55320
IP address blocks: 154.205.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75058 (0x12532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:17:15 2024 GMT
Not After : Feb 13 09:17:15 2025 GMT
Subject: CN=676bcd9e-880e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:a9:aa:05:a0:e4:17:ad:21:9d:16:5b:8f:
be:95:5c:ae:bc:5a:c0:1c:9c:34:c3:4b:d4:bb:52:
a8:b4:da:b8:9d:07:3d:44:bc:f0:91:6d:30:87:85:
39:1f:40:06:5e:49:9b:96:db:4c:06:73:59:96:60:
af:43:4e:99:89:3b:9e:7d:40:05:3e:99:87:b5:54:
49:f4:15:37:af:a5:db:ee:b6:6c:cd:20:a7:fb:c1:
49:32:8d:e1:c9:26:72:dd:fc:dd:39:98:3f:65:ff:
b4:df:b3:f0:ae:5d:05:1d:3a:9c:54:c9:88:1b:38:
16:ca:74:a7:17:a3:9d:04:e3:77:93:94:1c:f9:d6:
6f:59:15:8b:7a:66:4b:2a:d0:c6:53:f2:55:7f:34:
bf:8f:89:4f:40:cb:de:75:1e:74:1f:47:f7:7d:5b:
82:e9:94:82:55:3e:8b:5c:65:9d:a8:56:46:6c:f3:
05:df:51:c2:1c:83:a4:7d:32:b6:a0:cf:4a:93:91:
3c:dd:11:3c:af:a1:2d:3d:13:37:f7:3b:72:99:24:
84:37:79:56:7a:16:04:76:37:d4:f1:33:81:e8:3e:
23:d7:f2:49:88:80:92:eb:06:04:a1:0b:b3:9d:78:
f7:47:a4:2d:e0:12:6f:90:45:46:3c:9f:13:f4:14:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F4:C2:8B:76:5C:CE:50:57:D2:F8:D1:06:85:78:7B:F8:0D:3C:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09F7395CC2A111EF8638DB43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.140.0/24
Signature Algorithm: sha256WithRSAEncryption
67:47:bf:92:d7:8f:8d:cf:90:b8:ea:2a:3b:ff:30:6e:5f:ed:
0a:a9:de:f5:a3:78:39:a2:bc:b1:c5:b2:42:ba:a0:ee:2d:b3:
cb:4b:51:fb:3a:a0:12:ac:b6:cb:da:24:36:e0:26:3e:9f:36:
53:85:e4:b3:cc:19:67:1e:a5:ff:33:a5:16:77:25:05:77:bb:
7d:72:5a:f4:5f:aa:63:08:7d:c1:a9:c5:50:a0:bd:a8:1c:98:
90:c5:95:ce:69:ac:fb:9a:43:6f:57:0b:ea:6f:98:b7:d1:ed:
43:d5:59:00:48:14:a0:b2:08:df:8c:d7:c3:be:12:78:b8:2c:
0f:ef:88:57:7e:c5:b6:e7:26:b1:02:79:61:f0:e6:41:88:62:
83:31:39:b4:58:3e:9a:57:d6:b1:bf:cd:ed:65:f1:23:9a:c2:
25:aa:5d:ad:85:db:aa:62:7b:53:ab:6c:2a:fb:a8:c5:23:32:
ec:48:3b:d9:66:44:59:10:30:2b:fc:7b:f8:a5:82:01:1c:4d:
aa:70:d2:69:ba:de:bc:5b:49:5c:95:4e:d3:1f:54:a3:96:57:
ff:e8:2a:bc:24:e2:56:dd:f5:fb:f1:71:bb:48:15:0d:65:b9:
4f:06:82:86:0d:72:9b:af:0d:a2:a7:30:0e:46:98:9b:d7:43:
5b:eb:74:c3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASUyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDkxNzE1WhcNMjUwMjEzMDkxNzE1WjAYMRYw
FAYDVQQDEw02NzZiY2Q5ZS04ODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnkapqgWg5BetIZ0WW4++lVyuvFrAHJw0w0vUu1KotNq4nQc9RLzwkW0w
h4U5H0AGXkmblttMBnNZlmCvQ06ZiTuefUAFPpmHtVRJ9BU3r6Xb7rZszSCn+8FJ
Mo3hySZy3fzdOZg/Zf+037Pwrl0FHTqcVMmIGzgWynSnF6OdBON3k5Qc+dZvWRWL
emZLKtDGU/JVfzS/j4lPQMvedR50H0f3fVuC6ZSCVT6LXGWdqFZGbPMF31HCHIOk
fTK2oM9Kk5E83RE8r6EtPRM39ztymSSEN3lWehYEdjfU8TOB6D4j1/JJiICS6wYE
oQuznXj3R6Qt4BJvkEVGPJ8T9BTC0QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBv0
wot2XM5QV9L40QaFeHv4DTxCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wOUY3Mzk1Q0MyQTExMUVGODYzOERCNDM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms2MMA0GCSqGSIb3DQEB
CwUAA4IBAQBnR7+S14+Nz5C46io7/zBuX+0Kqd71o3g5oryxxbJCuqDuLbPLS1H7
OqASrLbL2iQ24CY+nzZTheSzzBlnHqX/M6UWdyUFd7t9clr0X6pjCH3BqcVQoL2o
HJiQxZXOaaz7mkNvVwvqb5i30e1D1VkASBSgsgjfjNfDvhJ4uCwP74hXfsW25yax
Anlh8OZBiGKDMTm0WD6aV9axv83tZfEjmsIlql2thduqYntTq2wq+6jFIzLsSDvZ
ZkRZEDAr/Hv4pYIBHE2qcNJput68W0lclU7TH1Sjllf/6Cq8JOJW3fX78XG7SBUN
ZblPBoKGDXKbrw2ipzAORpib10Nb63TD
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:56:32 2025 by rpki-client