Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E867498DCA411EFAE09D28B762E951A.roa
File: 0E867498DCA411EFAE09D28B762E951A.roa (raw, json)
Hash identifier: Nu4xP3X0sDmGNMz4ZSYqog8TYkuLz/znq1pvVi5oDtU=
Subject key identifier: 15:BC:E2:A6:01:81:08:E6:86:D0:15:20:4B:DE:E9:C7:21:52:5B:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BE1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E867498DCA411EFAE09D28B762E951A.roa
Signing time: Mon 27 Jan 2025 11:44:25 +0000
ROA not before: Mon 27 Jan 2025 11:44:20 +0000
ROA not after: Sat 08 Feb 2025 11:44:20 +0000
asID: 212238
IP address blocks: 154.198.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84961 (0x14be1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 11:44:20 2025 GMT
Not After : Feb 8 11:44:20 2025 GMT
Subject: CN=67977199-5a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:d7:45:e1:f6:b3:62:0b:48:13:3d:9a:19:
be:e0:8b:b1:80:b0:7b:ea:54:cb:4d:f8:8e:d4:4b:
2f:2e:a3:1a:ba:ae:b0:58:6a:37:8a:58:ce:94:fa:
23:0b:04:4a:51:58:68:14:60:f8:63:b1:2e:80:e8:
c8:26:9a:c7:5a:ec:7a:84:51:21:8d:f0:d6:05:fd:
4a:d5:46:a6:90:37:82:48:ad:a0:07:38:99:bd:95:
a9:fa:41:78:e3:9d:fc:96:55:b8:65:1b:46:7a:c7:
c5:f9:b0:90:e6:19:3b:c9:61:7b:e0:0d:7a:5a:9f:
74:92:4b:cf:7a:ba:b6:8d:b6:88:e1:7c:dc:6e:c1:
27:d6:d2:40:d0:94:09:f4:01:2b:32:aa:b9:85:e5:
db:1e:a4:c9:b2:62:24:77:4b:e5:e3:10:4e:32:c1:
be:f1:83:3c:c0:f4:4a:ff:01:f3:e7:05:85:b2:cb:
a4:1a:e8:b3:4a:2f:b9:c5:0c:dc:02:c3:eb:0f:62:
73:02:20:f2:5c:f7:f2:c5:b4:b4:4c:90:bd:48:25:
82:45:e4:bb:f7:87:15:68:c4:a7:01:cc:d1:a8:b5:
95:75:31:07:f0:80:c9:d6:96:cf:d8:6e:01:1f:35:
b4:30:f4:27:ed:b5:c4:9e:8d:6a:72:dd:71:5f:dd:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BC:E2:A6:01:81:08:E6:86:D0:15:20:4B:DE:E9:C7:21:52:5B:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E867498DCA411EFAE09D28B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:95:2c:db:24:bf:13:b5:6d:67:4c:5f:83:e2:d8:8e:c8:a1:
24:48:c2:dd:e0:23:70:f0:af:22:9f:25:e9:9c:f7:3e:c6:4e:
06:51:f6:26:c1:15:95:ab:9f:76:22:6e:1a:d4:fe:de:56:23:
aa:6c:00:44:f7:b6:68:12:49:68:31:74:ed:06:8e:7b:21:6d:
84:13:6b:89:fe:25:49:15:5a:3a:85:72:bb:e9:fb:f1:0c:d8:
01:e9:67:e7:2a:8c:a7:bb:3d:e6:2b:9e:25:64:1e:a9:90:60:
a2:cd:54:69:5d:a6:f6:1f:4e:dd:b3:8c:15:03:1f:b4:69:31:
1c:fb:97:4d:3e:04:d4:34:07:f6:d4:88:e2:f9:4e:2e:0b:fd:
01:03:a4:ed:45:23:5d:e4:1e:03:79:28:2d:ae:ee:9f:d3:11:
de:d8:18:14:6b:13:e6:69:c1:6e:35:9b:58:91:50:dd:3a:e3:
62:6e:7a:9d:67:ac:4d:a5:8f:dc:7c:da:eb:1f:3f:10:43:6c:
84:61:5b:ec:cc:f4:37:0a:6a:4c:54:10:15:59:7a:2b:ba:a1:
a1:9e:b8:aa:69:d5:5d:51:77:1f:23:69:43:47:c3:32:60:30:
03:4d:14:ab:1c:99:a2:1e:ed:f0:3c:8c:d6:24:18:ca:87:00:
d4:be:82:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUvhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI3MTE0NDIwWhcNMjUwMjA4MTE0NDIwWjAYMRYw
FAYDVQQDEw02Nzk3NzE5OS01YTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApJ3XReH2s2ILSBM9mhm+4IuxgLB76lTLTfiO1EsvLqMauq6wWGo3iljO
lPojCwRKUVhoFGD4Y7EugOjIJprHWux6hFEhjfDWBf1K1UamkDeCSK2gBziZvZWp
+kF44538llW4ZRtGesfF+bCQ5hk7yWF74A16Wp90kkvPerq2jbaI4XzcbsEn1tJA
0JQJ9AErMqq5heXbHqTJsmIkd0vl4xBOMsG+8YM8wPRK/wHz5wWFssukGuizSi+5
xQzcAsPrD2JzAiDyXPfyxbS0TJC9SCWCReS794cVaMSnAczRqLWVdTEH8IDJ1pbP
2G4BHzW0MPQn7bXEno1qct1xX929IQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBW8
4qYBgQjmhtAVIEve6cchUluEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wRTg2NzQ5OERDQTQxMUVGQUUwOUQyOEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsYQMA0GCSqGSIb3DQEB
CwUAA4IBAQB+lSzbJL8TtW1nTF+D4tiOyKEkSMLd4CNw8K8inyXpnPc+xk4GUfYm
wRWVq592Im4a1P7eViOqbABE97ZoEkloMXTtBo57IW2EE2uJ/iVJFVo6hXK76fvx
DNgB6WfnKoynuz3mK54lZB6pkGCizVRpXab2H07ds4wVAx+0aTEc+5dNPgTUNAf2
1Iji+U4uC/0BA6TtRSNd5B4DeSgtru6f0xHe2BgUaxPmacFuNZtYkVDdOuNibnqd
Z6xNpY/cfNrrHz8QQ2yEYVvszPQ3CmpMVBAVWXoruqGhnriqadVdUXcfI2lDR8My
YDADTRSrHJmiHu3wPIzWJBjKhwDUvoLI
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:43:34 2025 by rpki-client