Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C7E3FB6CAD211EF8974A84C762E951A.roa
File: 0C7E3FB6CAD211EF8974A84C762E951A.roa (raw, json)
Hash identifier: Eic6KNGwUyzuPHnceuFM5iz5I9+sox9NhaIwh6kuUQU=
Subject key identifier: 54:7F:78:72:F6:01:FE:85:BF:5F:6D:34:A5:CD:1B:F4:FB:24:B1:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01351B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C7E3FB6CAD211EF8974A84C762E951A.roa
Signing time: Sat 04 Jan 2025 19:28:17 +0000
ROA not before: Sun 05 Jan 2025 19:28:14 +0000
ROA not after: Sun 09 Feb 2025 19:28:14 +0000
asID: 203020
IP address blocks: 154.217.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79131 (0x1351b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 19:28:14 2025 GMT
Not After : Feb 9 19:28:14 2025 GMT
Subject: CN=67798bd1-4a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:c6:36:96:b9:c5:7f:92:74:1a:58:c6:18:
f5:ef:de:0c:6d:00:a8:ef:8b:79:80:98:20:7e:37:
68:e7:0c:f4:bc:17:2a:a5:1d:cb:1d:07:91:be:6c:
31:9d:a4:1e:92:83:56:06:6b:b1:ce:0f:8f:28:dc:
d4:09:38:b1:13:48:28:df:10:8f:68:92:95:6a:3b:
14:f9:71:fc:a3:44:5f:7c:57:5c:ea:61:70:e1:33:
58:d8:bf:4b:36:36:58:80:14:47:54:3f:5c:f0:ec:
74:0a:23:46:b2:f0:4c:53:5d:95:f4:04:02:9e:92:
5b:4f:53:ce:3c:4e:1b:97:4a:d2:73:e5:b3:25:87:
42:77:00:f2:d5:dc:2c:b2:1e:c9:f5:e6:96:a8:e0:
ef:d0:46:a3:54:08:51:6e:04:ca:21:3e:9b:b3:0c:
98:70:f4:72:58:8f:df:9d:9b:18:24:df:ae:56:04:
9a:8c:ae:c4:85:7d:7e:fd:19:02:31:cc:c9:dd:52:
32:c1:97:7e:9f:3a:63:ce:a5:39:00:7d:79:6f:a2:
a7:e5:a7:49:dd:36:e5:79:ec:cb:dd:99:cd:18:0c:
9a:aa:0e:16:87:65:14:50:b2:0b:24:6f:16:c2:fc:
a0:74:90:fd:0a:19:35:7d:a8:ca:74:a4:61:50:37:
8f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7F:78:72:F6:01:FE:85:BF:5F:6D:34:A5:CD:1B:F4:FB:24:B1:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C7E3FB6CAD211EF8974A84C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.228.0/22
Signature Algorithm: sha256WithRSAEncryption
33:56:49:7a:e3:15:14:84:7b:7f:f2:df:db:a7:66:e1:4a:30:
66:02:1a:e6:e3:53:8c:b3:ac:7e:d2:00:9f:45:98:ee:6f:89:
1c:3a:1b:85:d1:74:07:95:e1:2f:17:49:67:e3:94:69:c8:9b:
fc:4f:93:9f:02:b6:56:8a:73:d6:3f:08:93:31:c3:09:aa:33:
ff:71:d4:d6:4a:f2:83:1b:ae:24:b2:bd:8c:d6:3b:8b:dc:fa:
0c:ba:b5:50:c2:2c:1d:a4:25:fe:2e:eb:61:5d:b9:6c:7e:c7:
4c:b6:c0:ed:de:ca:7c:c0:c0:94:12:a9:ed:30:6c:b8:7b:79:
7d:af:84:56:14:84:49:23:e6:07:7f:7f:05:16:a2:90:49:4e:
24:e8:4f:7c:e1:d2:85:23:bd:0d:65:1f:ac:60:ab:fb:0e:6c:
8b:dd:50:fb:b2:1b:6e:6c:ac:b5:92:67:f2:fa:16:63:2a:dc:
4f:db:9b:6f:69:1f:db:4a:9a:60:a4:62:1e:b5:16:82:c9:61:
04:f2:1f:1a:0f:3e:06:c7:bc:93:b5:4f:53:97:2f:cb:41:41:
2c:49:01:5f:dd:85:29:6b:57:24:51:ca:3f:eb:64:e8:f1:fe:
53:38:19:5f:13:50:27:14:90:38:d0:71:a4:29:36:1a:fe:77:
88:24:40:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATUbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA1MTkyODE0WhcNMjUwMjA5MTkyODE0WjAYMRYw
FAYDVQQDEw02Nzc5OGJkMS00YTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2ejGNpa5xX+SdBpYxhj1794MbQCo74t5gJggfjdo5wz0vBcqpR3LHQeR
vmwxnaQekoNWBmuxzg+PKNzUCTixE0go3xCPaJKVajsU+XH8o0RffFdc6mFw4TNY
2L9LNjZYgBRHVD9c8Ox0CiNGsvBMU12V9AQCnpJbT1POPE4bl0rSc+WzJYdCdwDy
1dwssh7J9eaWqODv0EajVAhRbgTKIT6bswyYcPRyWI/fnZsYJN+uVgSajK7EhX1+
/RkCMczJ3VIywZd+nzpjzqU5AH15b6Kn5adJ3TbleezL3ZnNGAyaqg4Wh2UUULIL
JG8WwvygdJD9Chk1fajKdKRhUDePWQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFR/
eHL2Af6Fv19tNKXNG/T7JLFYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQzdFM0ZCNkNBRDIxMUVGODk3NEE4NEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmtnkMA0GCSqGSIb3DQEB
CwUAA4IBAQAzVkl64xUUhHt/8t/bp2bhSjBmAhrm41OMs6x+0gCfRZjub4kcOhuF
0XQHleEvF0ln45RpyJv8T5OfArZWinPWPwiTMcMJqjP/cdTWSvKDG64ksr2M1juL
3PoMurVQwiwdpCX+LuthXblsfsdMtsDt3sp8wMCUEqntMGy4e3l9r4RWFIRJI+YH
f38FFqKQSU4k6E984dKFI70NZR+sYKv7DmyL3VD7shtubKy1kmfy+hZjKtxP25tv
aR/bSppgpGIetRaCyWEE8h8aDz4Gx7yTtU9Tly/LQUEsSQFf3YUpa1ckUco/62To
8f5TOBlfE1AnFJA40HGkKTYa/neIJECn
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:43:18 2025 by rpki-client