Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B43B4C2DB1811EFB51DC39D762E951A.roa
File: 0B43B4C2DB1811EFB51DC39D762E951A.roa (raw, json)
Hash identifier: acH+HX79IWbosZG2EGab2FMe7i/8cAudPpr7g5JT7HQ=
Subject key identifier: EB:43:48:E0:76:5C:DD:14:F8:7B:31:47:64:60:14:93:88:86:6E:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014946
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B43B4C2DB1811EFB51DC39D762E951A.roa
Signing time: Sat 25 Jan 2025 12:29:39 +0000
ROA not before: Sat 25 Jan 2025 12:29:35 +0000
ROA not after: Mon 03 Mar 2025 12:29:35 +0000
asID: 202656
IP address blocks: 154.221.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84294 (0x14946)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 12:29:35 2025 GMT
Not After : Mar 3 12:29:35 2025 GMT
Subject: CN=6794d933-7ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:80:3a:1a:5c:5f:e0:a4:f1:b4:25:0a:cc:0a:
58:81:98:31:63:00:76:33:9d:32:b8:5b:26:67:69:
5a:f8:7d:82:c2:ab:45:c4:02:8b:27:5d:fa:a5:f4:
a2:13:8d:8a:53:39:47:39:32:2b:f1:68:dc:81:c2:
e9:ab:cf:ff:d4:e1:1e:fe:e8:98:7e:d5:97:58:32:
dc:1d:ed:d3:af:98:8d:38:31:89:09:ad:b2:b4:02:
65:84:10:1e:a9:71:5d:bd:ca:a6:b8:d4:1d:b8:74:
b0:74:f8:d0:cf:89:84:dd:30:34:e2:a4:71:b7:17:
74:31:65:d5:2e:e2:5f:60:04:1c:bc:5b:fc:99:bb:
3a:81:b9:b8:74:9a:05:c1:5e:bd:c5:75:8d:c4:5a:
da:ba:5f:74:63:e3:8c:55:31:4a:b0:e9:bd:d3:32:
01:21:63:67:3d:41:d4:be:83:17:8c:58:d2:a2:9a:
41:c0:d3:ea:2b:fd:83:b8:06:df:9c:50:62:1e:4a:
20:24:ee:6b:4e:69:c3:3d:26:9e:02:62:1b:c5:39:
0b:33:a5:89:e1:75:b4:3e:ac:f3:a6:d5:15:1b:aa:
ad:f8:c7:ab:db:00:45:c4:99:d4:43:6d:35:4b:54:
31:ee:21:35:29:ad:7c:04:00:ee:c2:61:12:e4:38:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:43:48:E0:76:5C:DD:14:F8:7B:31:47:64:60:14:93:88:86:6E:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B43B4C2DB1811EFB51DC39D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.60.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d5:b6:f3:e6:56:91:78:80:9e:d3:8c:49:90:d9:72:f8:e2:
0e:39:09:7f:2f:f4:66:8e:33:d1:f9:de:d5:0c:c6:49:21:10:
9f:b5:b7:67:d4:26:ba:07:86:bf:16:e9:38:96:c7:8b:02:f9:
de:31:60:6d:c9:1d:33:f4:38:e7:f0:b9:09:3c:11:8d:18:9d:
2f:33:fe:ab:fe:f0:11:d1:4c:fd:3b:10:7d:a9:84:bd:28:e6:
3b:8e:26:3f:c2:5d:4f:eb:44:22:f2:b1:ad:2e:67:d0:be:24:
07:30:89:fc:4b:65:20:9e:1a:30:01:bb:28:8f:a7:7b:73:72:
35:62:f5:53:ea:83:0f:f4:76:a5:52:d8:b6:e3:76:df:a2:4f:
d1:02:24:12:6c:f7:ee:a8:63:92:44:fc:e5:dc:7c:54:68:c9:
6a:9a:0e:3a:ee:9a:c2:7e:8f:44:85:f7:12:f3:81:ea:df:b0:
02:a1:7b:c6:b6:1a:1f:fd:b4:6a:51:88:de:65:f2:86:ed:4f:
72:2f:d4:16:e5:82:bc:96:83:dd:0b:4f:4e:16:7c:c8:9b:a0:
8f:48:c0:3f:37:3b:bf:c9:d5:c0:67:86:5b:88:66:12:2d:e3:
83:7e:bc:e1:f9:a2:43:81:60:2c:f1:63:33:8c:1f:db:16:31:
2a:04:99:2e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUlGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI1MTIyOTM1WhcNMjUwMzAzMTIyOTM1WjAYMRYw
FAYDVQQDEw02Nzk0ZDkzMy03ZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA44A6Glxf4KTxtCUKzApYgZgxYwB2M50yuFsmZ2la+H2CwqtFxAKLJ136
pfSiE42KUzlHOTIr8WjcgcLpq8//1OEe/uiYftWXWDLcHe3Tr5iNODGJCa2ytAJl
hBAeqXFdvcqmuNQduHSwdPjQz4mE3TA04qRxtxd0MWXVLuJfYAQcvFv8mbs6gbm4
dJoFwV69xXWNxFraul90Y+OMVTFKsOm90zIBIWNnPUHUvoMXjFjSoppBwNPqK/2D
uAbfnFBiHkogJO5rTmnDPSaeAmIbxTkLM6WJ4XW0PqzzptUVG6qt+Mer2wBFxJnU
Q201S1Qx7iE1Ka18BADuwmES5DjVSwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOtD
SOB2XN0U+HsxR2RgFJOIhm4pMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQjQzQjRDMkRCMTgxMUVGQjUxREMzOUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt08MA0GCSqGSIb3DQEB
CwUAA4IBAQCA1bbz5laReICe04xJkNly+OIOOQl/L/RmjjPR+d7VDMZJIRCftbdn
1Ca6B4a/Fuk4lseLAvneMWBtyR0z9Djn8LkJPBGNGJ0vM/6r/vAR0Uz9OxB9qYS9
KOY7jiY/wl1P60Qi8rGtLmfQviQHMIn8S2UgnhowAbsoj6d7c3I1YvVT6oMP9Hal
Uti243bfok/RAiQSbPfuqGOSRPzl3HxUaMlqmg467prCfo9EhfcS84Hq37ACoXvG
thof/bRqUYjeZfKG7U9yL9QW5YK8loPdC09OFnzIm6CPSMA/Nzu/ydXAZ4ZbiGYS
LeODfrzh+aJDgWAs8WMzjB/bFjEqBJku
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:55:09 2025 by rpki-client