Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C7AC9A4DA4E11EFAA672647762E951A.roa
File: 0C7AC9A4DA4E11EFAA672647762E951A.roa (raw, json)
Hash identifier: Na+Sh5WvbIBwSVwzXJzAmPE91EXihiyAhhyh5/wvT4c=
Subject key identifier: 6D:85:64:FC:DF:56:92:D6:3E:5C:70:79:AB:F7:C7:F4:BA:F5:15:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C7AC9A4DA4E11EFAA672647762E951A.roa
Signing time: Fri 24 Jan 2025 12:23:43 +0000
ROA not before: Fri 24 Jan 2025 12:23:39 +0000
ROA not after: Sat 01 Mar 2025 12:23:39 +0000
asID: 44559
IP address blocks: 154.205.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83641 (0x146b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:23:39 2025 GMT
Not After : Mar 1 12:23:39 2025 GMT
Subject: CN=6793864e-c4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:26:5a:ba:d3:da:c0:de:1c:40:e0:39:e2:
5c:6b:8b:67:6a:b1:c9:f1:77:d3:c3:c0:96:72:a9:
c1:e8:14:dc:22:aa:ec:1d:b2:bc:fb:63:e1:c2:b0:
7d:2c:aa:2b:8c:f5:c8:9e:04:83:bd:8f:60:00:36:
cf:b5:2b:f8:11:f8:f3:f8:b3:c3:b9:46:4b:1b:8c:
dd:88:09:19:53:d4:48:f0:e8:e4:63:e5:28:94:2a:
14:82:5b:cb:c8:1f:6b:9a:1b:d0:32:b6:f8:cb:9e:
03:94:8f:35:84:0d:b9:08:21:88:c8:00:db:c0:27:
03:8b:80:67:f1:ea:9e:e0:c0:b3:67:70:74:53:d8:
43:cb:92:e9:39:eb:57:e5:fd:ed:73:ed:7b:59:73:
2c:0d:07:9b:a7:c3:07:46:0f:c5:cd:a8:1c:3a:2a:
84:37:a5:98:87:84:04:06:58:68:bd:72:01:ef:68:
a5:a2:b5:88:0e:e3:cd:54:ce:07:53:ee:83:a8:0d:
55:a1:b1:ce:16:5c:75:ff:0c:74:4a:d4:15:98:90:
ec:34:af:66:c1:a1:a0:0f:fa:b5:c3:0c:bd:87:96:
71:4b:57:ee:18:a5:f4:c1:b9:e5:34:c0:76:c0:12:
4e:36:34:9a:fa:07:e3:14:18:54:15:5b:e4:9a:74:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:85:64:FC:DF:56:92:D6:3E:5C:70:79:AB:F7:C7:F4:BA:F5:15:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C7AC9A4DA4E11EFAA672647762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.228.0/24
Signature Algorithm: sha256WithRSAEncryption
96:7d:0d:f0:b8:f2:24:6a:6d:65:97:91:ce:3b:de:5c:65:b6:
ae:2d:94:4d:99:c7:7a:d1:a2:2e:e0:db:42:77:03:11:b5:87:
da:8b:b9:c4:68:fd:10:35:d7:bc:2e:9d:3e:d1:19:ba:85:13:
70:ce:cc:e1:f5:24:93:74:73:10:1c:7b:8b:84:eb:14:c5:ea:
94:a4:cf:f1:ee:9b:27:a5:6e:b9:f6:9b:75:06:05:c3:b8:38:
be:95:5a:92:a1:c2:b4:bd:c2:25:3a:d0:3b:73:a9:6f:5c:f1:
70:3f:1a:30:fc:e8:9b:c3:a3:60:e3:90:fd:53:5d:0f:81:37:
20:fb:2f:5b:be:8f:34:2e:29:83:bf:2d:0c:38:4a:81:71:cb:
ed:f7:83:ed:12:8d:af:e0:45:54:43:c5:ae:36:72:f8:a9:ae:
8f:f9:93:de:af:1e:6f:39:9e:3c:65:4d:4c:ff:de:5a:52:a7:
64:6c:37:29:85:02:d8:c2:71:35:d9:34:b0:16:1f:a8:58:a2:
8c:89:5d:c6:0d:21:39:b6:8f:fb:18:c3:a4:f3:d3:9b:84:92:
82:b2:e3:6f:98:fa:55:c9:8c:dd:5d:b5:73:2a:e7:ad:4b:73:
fb:7f:be:a0:f9:8c:b2:13:75:ec:c5:69:23:4e:1e:a5:07:26:
6e:a3:06:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUa5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTIyMzM5WhcNMjUwMzAxMTIyMzM5WjAYMRYw
FAYDVQQDEw02NzkzODY0ZS1jNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwMcmWrrT2sDeHEDgOeJca4tnarHJ8XfTw8CWcqnB6BTcIqrsHbK8+2Ph
wrB9LKorjPXIngSDvY9gADbPtSv4Efjz+LPDuUZLG4zdiAkZU9RI8OjkY+UolCoU
glvLyB9rmhvQMrb4y54DlI81hA25CCGIyADbwCcDi4Bn8eqe4MCzZ3B0U9hDy5Lp
OetX5f3tc+17WXMsDQebp8MHRg/FzagcOiqEN6WYh4QEBlhovXIB72ilorWIDuPN
VM4HU+6DqA1VobHOFlx1/wx0StQVmJDsNK9mwaGgD/q1wwy9h5ZxS1fuGKX0wbnl
NMB2wBJONjSa+gfjFBhUFVvkmnSaQwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFG2F
ZPzfVpLWPlxweav3x/S69RU9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQzdBQzlBNERBNEUxMUVGQUE2NzI2NDc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms3kMA0GCSqGSIb3DQEB
CwUAA4IBAQCWfQ3wuPIkam1ll5HOO95cZbauLZRNmcd60aIu4NtCdwMRtYfai7nE
aP0QNde8Lp0+0Rm6hRNwzszh9SSTdHMQHHuLhOsUxeqUpM/x7psnpW659pt1BgXD
uDi+lVqSocK0vcIlOtA7c6lvXPFwPxow/Oibw6Ng45D9U10PgTcg+y9bvo80LimD
vy0MOEqBccvt94PtEo2v4EVUQ8WuNnL4qa6P+ZPerx5vOZ48ZU1M/95aUqdkbDcp
hQLYwnE12TSwFh+oWKKMiV3GDSE5to/7GMOk89ObhJKCsuNvmPpVyYzdXbVzKuet
S3P7f76g+YyyE3XsxWkjTh6lByZuowYY
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:06:27 2025 by rpki-client