Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D0BA858D8AE11EF884ACA51762E951A.roa
File: 0D0BA858D8AE11EF884ACA51762E951A.roa (raw, json)
Hash identifier: h9zODKmg86nF8vOlZI/UFKjgfjIG2vUhFcVE7mb9l90=
Subject key identifier: 0E:C2:D2:BB:F2:ED:49:3F:1E:FC:5F:35:22:EF:B8:B8:32:9D:60:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013ED4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D0BA858D8AE11EF884ACA51762E951A.roa
Signing time: Wed 22 Jan 2025 10:45:53 +0000
ROA not before: Wed 22 Jan 2025 10:45:49 +0000
ROA not after: Sat 08 Feb 2025 10:45:49 +0000
asID: 150008
IP address blocks: 154.210.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81620 (0x13ed4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 10:45:49 2025 GMT
Not After : Feb 8 10:45:49 2025 GMT
Subject: CN=6790cc61-f287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:fc:c6:0b:8a:f0:65:b3:9c:5b:b6:be:56:
70:d3:c8:64:6f:97:44:f6:a9:68:c8:2b:4d:d6:cb:
d3:ca:f7:22:df:c8:1f:97:07:89:3b:ef:94:50:d5:
4c:b9:ef:f5:b7:b3:9e:31:e7:18:c8:37:be:7a:b4:
c2:2c:58:3c:27:f4:0f:e6:20:a8:3a:19:0f:47:06:
28:56:05:df:18:1b:ea:b4:af:3c:88:01:2a:4b:d8:
cc:f7:83:55:af:d2:72:a8:bf:d4:02:da:dc:55:e3:
88:ae:8f:02:28:c4:58:2e:87:d9:17:21:1b:13:e5:
25:e1:35:e6:08:3c:73:e5:8f:8d:d4:1d:a0:4d:06:
c6:37:cf:67:b8:2f:64:bd:20:3d:c3:62:65:3b:fc:
43:4f:a9:57:66:a2:35:f4:38:7b:65:01:03:dc:4f:
8c:98:f6:ea:71:53:58:2d:29:98:24:b5:56:d6:0b:
24:8a:a2:ed:cf:75:5e:65:ac:71:e2:08:9a:c7:e7:
1b:93:45:13:91:a0:a8:d1:47:80:4d:c8:09:1e:0c:
90:d2:68:5f:34:37:fd:de:70:ba:41:46:b8:57:ee:
56:3a:ae:f5:84:3a:49:ca:ca:c9:31:0b:11:d0:b3:
83:bc:6f:0e:fc:a5:f4:80:c3:85:15:77:b0:a8:f8:
a8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C2:D2:BB:F2:ED:49:3F:1E:FC:5F:35:22:EF:B8:B8:32:9D:60:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D0BA858D8AE11EF884ACA51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.227.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:4b:a6:4d:ff:05:db:43:41:9e:31:7e:bb:d4:7e:f9:4a:4e:
dd:13:9c:34:61:f0:56:69:e9:46:b5:04:84:fd:71:81:6f:8c:
a9:de:d4:28:10:57:43:32:84:93:e1:1d:db:d1:4d:cc:e8:f8:
af:aa:60:57:9e:9e:16:50:9f:0c:fd:96:9e:e0:bd:91:d4:0d:
de:ca:f1:9a:20:38:7a:bc:04:2d:e4:45:a0:50:20:88:ec:10:
5e:4f:94:07:81:8d:cb:04:f7:ac:04:5d:8c:41:28:f7:77:41:
ee:96:f5:36:2c:5e:bb:ff:69:c3:2b:67:5d:51:79:84:f1:a2:
04:22:94:97:c7:4c:97:70:4f:31:99:bd:d3:48:ab:0e:09:38:
42:e8:8c:01:c2:ee:d2:11:50:86:89:b8:17:71:95:3c:66:72:
86:ac:88:50:00:de:aa:0a:0d:7f:33:44:62:0d:41:92:27:a4:
0c:da:e4:af:91:9d:dc:6b:7e:59:7c:39:6f:69:c6:06:b8:13:
38:ad:57:01:94:e2:5f:f1:22:1d:d2:ed:15:4b:1f:b8:4a:b1:
99:84:9a:1b:f9:28:8e:90:ce:81:c1:b7:79:55:4b:32:31:85:
7a:09:e6:5c:5c:46:d2:51:65:0d:37:38:2b:08:9b:1c:16:5e:
57:34:1a:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT7UMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMTA0NTQ5WhcNMjUwMjA4MTA0NTQ5WjAYMRYw
FAYDVQQDEw02NzkwY2M2MS1mMjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAm3f8xguK8GWznFu2vlZw08hkb5dE9qloyCtN1svTyvci38gflweJO++U
UNVMue/1t7OeMecYyDe+erTCLFg8J/QP5iCoOhkPRwYoVgXfGBvqtK88iAEqS9jM
94NVr9JyqL/UAtrcVeOIro8CKMRYLofZFyEbE+Ul4TXmCDxz5Y+N1B2gTQbGN89n
uC9kvSA9w2JlO/xDT6lXZqI19Dh7ZQED3E+MmPbqcVNYLSmYJLVW1gskiqLtz3Ve
Zaxx4giax+cbk0UTkaCo0UeATcgJHgyQ0mhfNDf93nC6QUa4V+5WOq71hDpJysrJ
MQsR0LODvG8O/KX0gMOFFXewqPiorwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFA7C
0rvy7Uk/HvxfNSLvuLgynWCaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wRDBCQTg1OEQ4QUUxMUVGODg0QUNBNTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtLjMA0GCSqGSIb3DQEB
CwUAA4IBAQDUS6ZN/wXbQ0GeMX671H75Sk7dE5w0YfBWaelGtQSE/XGBb4yp3tQo
EFdDMoST4R3b0U3M6PivqmBXnp4WUJ8M/Zae4L2R1A3eyvGaIDh6vAQt5EWgUCCI
7BBeT5QHgY3LBPesBF2MQSj3d0HulvU2LF67/2nDK2ddUXmE8aIEIpSXx0yXcE8x
mb3TSKsOCThC6IwBwu7SEVCGibgXcZU8ZnKGrIhQAN6qCg1/M0RiDUGSJ6QM2uSv
kZ3ca35ZfDlvacYGuBM4rVcBlOJf8SId0u0VSx+4SrGZhJob+SiOkM6Bwbd5VUsy
MYV6CeZcXEbSUWUNNzgrCJscFl5XNBp7
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:46:02 2025 by rpki-client