Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B8B475CDCC511EF9DD8A366762E951A.roa
File: 0B8B475CDCC511EF9DD8A366762E951A.roa (raw, json)
Hash identifier: h70NVZFxFYIcLZbmuFI64P9JlJC0gGITdWjKVJogC3k=
Subject key identifier: 8C:39:98:99:30:F3:B8:B5:29:3A:D7:E9:D6:E4:7F:4B:F3:91:14:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C4D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B8B475CDCC511EF9DD8A366762E951A.roa
Signing time: Mon 27 Jan 2025 15:40:33 +0000
ROA not before: Mon 27 Jan 2025 15:40:30 +0000
ROA not after: Thu 13 Feb 2025 15:40:30 +0000
asID: 212238
IP address blocks: 154.207.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85069 (0x14c4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 15:40:30 2025 GMT
Not After : Feb 13 15:40:30 2025 GMT
Subject: CN=6797a8f1-383e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:fc:6d:6d:e3:8c:85:81:9b:81:eb:9b:5b:
da:62:a1:9f:06:dd:9b:d4:8f:b0:e1:06:82:4d:5a:
cb:1f:bc:84:20:29:00:42:5e:1a:03:4d:ac:64:21:
2e:43:f4:7b:a5:4d:3e:39:bf:86:1f:42:c7:5f:0c:
17:2f:6a:ed:c5:72:e8:62:aa:e0:75:94:03:32:02:
f1:0d:52:04:fa:7e:e7:69:df:50:7f:90:52:8b:9b:
d8:82:19:3d:04:f3:84:ce:04:11:66:a5:3a:25:4f:
cc:06:e1:6c:84:59:fc:ca:7b:46:59:d1:cf:20:b0:
00:ec:f6:17:68:10:aa:da:31:54:2c:ac:94:8f:5b:
74:12:2a:48:67:31:1e:6f:af:ad:e5:f6:27:13:93:
cd:9b:c4:4d:f5:e0:61:18:4d:52:d1:5b:7f:c5:cc:
7d:f8:f8:70:75:7f:35:d7:45:23:56:bb:dc:3a:24:
ee:dd:5c:35:16:4b:24:78:95:34:22:25:f3:01:0a:
eb:a9:f8:b2:c3:c3:d8:81:e7:42:6f:d5:3b:30:54:
21:f5:a7:fb:08:29:a4:1b:42:6f:d6:a2:d1:a8:82:
c3:70:d3:32:02:42:1e:9f:c6:25:5e:3b:36:f5:6a:
40:68:df:5b:04:1b:fb:12:b9:64:bb:72:ad:f7:ab:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:39:98:99:30:F3:B8:B5:29:3A:D7:E9:D6:E4:7F:4B:F3:91:14:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B8B475CDCC511EF9DD8A366762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.160.0/22
Signature Algorithm: sha256WithRSAEncryption
47:48:a7:e8:e6:f2:32:cc:d4:6c:74:7f:b5:b2:48:5c:0e:d3:
d4:08:54:9a:ba:7b:99:f0:0d:cd:7b:39:ee:4d:29:da:6b:06:
02:6e:ff:10:99:23:1f:f6:24:db:f6:39:6b:ac:ac:63:0b:de:
ff:8c:77:9e:f9:dc:57:77:f0:22:c5:f2:57:04:20:c5:4a:c8:
67:d6:bc:87:60:b7:21:b6:fb:a4:33:2b:4c:39:2c:8a:2b:75:
56:c2:b4:0e:a0:64:16:ac:03:c3:45:23:50:96:12:41:1e:6c:
1a:26:90:dc:a0:bd:31:89:63:29:ec:ec:a5:a5:fc:78:dc:3f:
d2:62:a7:f3:0c:0f:82:b1:0d:b7:af:56:a4:7d:aa:f1:d1:50:
e1:25:b6:75:ea:75:62:6d:e1:41:38:0e:49:dd:09:55:42:b4:
59:4a:de:70:b6:52:38:d1:5f:76:d2:b3:bf:5e:e6:91:09:e0:
fe:16:44:e6:34:68:66:40:50:a1:92:dc:88:51:b2:bf:17:cb:
95:00:ce:77:87:9b:f3:70:c3:0d:f0:c5:86:48:01:53:57:64:
77:d0:a3:39:79:8c:78:e2:e0:23:79:3f:a1:0c:8d:e5:5c:5a:
6f:b3:3d:6b:bf:f3:b5:0c:d6:56:c6:5c:f8:55:ae:0d:dc:a1:
aa:99:47:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUxNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI3MTU0MDMwWhcNMjUwMjEzMTU0MDMwWjAYMRYw
FAYDVQQDEw02Nzk3YThmMS0zODNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqmf8bW3jjIWBm4Hrm1vaYqGfBt2b1I+w4QaCTVrLH7yEICkAQl4aA02s
ZCEuQ/R7pU0+Ob+GH0LHXwwXL2rtxXLoYqrgdZQDMgLxDVIE+n7nad9Qf5BSi5vY
ghk9BPOEzgQRZqU6JU/MBuFshFn8yntGWdHPILAA7PYXaBCq2jFULKyUj1t0EipI
ZzEeb6+t5fYnE5PNm8RN9eBhGE1S0Vt/xcx9+PhwdX8110UjVrvcOiTu3Vw1Fksk
eJU0IiXzAQrrqfiyw8PYgedCb9U7MFQh9af7CCmkG0Jv1qLRqILDcNMyAkIen8Yl
Xjs29WpAaN9bBBv7Erlku3Kt96txBQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIw5
mJkw87i1KTrX6dbkf0vzkRQ9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQjhCNDc1Q0RDQzUxMUVGOUREOEEzNjY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCms+gMA0GCSqGSIb3DQEB
CwUAA4IBAQBHSKfo5vIyzNRsdH+1skhcDtPUCFSaunuZ8A3NeznuTSnaawYCbv8Q
mSMf9iTb9jlrrKxjC97/jHee+dxXd/AixfJXBCDFSshn1ryHYLchtvukMytMOSyK
K3VWwrQOoGQWrAPDRSNQlhJBHmwaJpDcoL0xiWMp7Oylpfx43D/SYqfzDA+CsQ23
r1akfarx0VDhJbZ16nVibeFBOA5J3QlVQrRZSt5wtlI40V920rO/XuaRCeD+FkTm
NGhmQFChktyIUbK/F8uVAM53h5vzcMMN8MWGSAFTV2R30KM5eYx44uAjeT+hDI3l
XFpvsz1rv/O1DNZWxlz4Va4N3KGqmUeR
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:44:01 2025 by rpki-client