Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16937056D97911EF949749A8762E951A.roa
File: 16937056D97911EF949749A8762E951A.roa (raw, json)
Hash identifier: 93XepKznGHCAYHC/zK5Eggze75bUs3i3BxKzIMJGAeU=
Subject key identifier: 57:C3:35:6E:85:16:57:9D:2F:09:D7:9B:C8:E8:F1:E2:84:65:4C:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014167
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16937056D97911EF949749A8762E951A.roa
Signing time: Thu 23 Jan 2025 10:59:16 +0000
ROA not before: Thu 23 Jan 2025 10:59:13 +0000
ROA not after: Fri 28 Feb 2025 10:59:13 +0000
asID: 62240
IP address blocks: 154.195.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82279 (0x14167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:59:13 2025 GMT
Not After : Feb 28 10:59:13 2025 GMT
Subject: CN=67922104-7323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f2:26:68:eb:74:96:e2:19:67:44:69:7c:5f:
ca:5e:ea:8c:38:d4:ef:6f:65:5e:7a:36:e0:84:7e:
5f:70:da:5f:f2:0b:94:2b:09:56:88:b8:e6:7d:c0:
e9:91:b0:09:4a:78:60:5a:96:af:c9:6e:9e:ec:58:
14:80:f7:25:ea:f7:4b:e1:6d:48:20:eb:c6:0f:0f:
26:86:fe:2a:f1:8c:e9:0a:84:da:51:6c:14:e8:8e:
f7:99:2d:10:c4:5b:69:89:04:39:a5:c2:f8:07:38:
55:30:56:eb:27:8d:6d:4c:e2:ce:33:5b:2b:45:a6:
09:f5:a4:c2:88:4b:fc:3a:36:c2:7c:21:2d:d3:99:
91:d7:d7:b5:b7:2c:4f:b4:9f:14:0f:4d:89:af:f8:
99:9f:85:1a:59:0a:fc:b3:86:e0:26:46:5d:5e:23:
2d:c3:1e:f2:bd:2d:15:85:58:e0:08:35:05:09:c5:
a7:6a:b3:a5:d9:0b:17:03:fe:e1:0f:4c:ce:27:d8:
2e:c8:b5:01:26:de:6a:75:ad:e2:d8:c2:95:62:ed:
e5:ce:c0:27:6e:31:e8:fd:c0:79:20:05:3d:de:eb:
e3:50:0e:20:96:cc:54:19:d2:5e:25:4e:5e:f4:08:
9b:d9:91:7c:aa:c3:1c:a9:c1:51:52:d8:41:98:b3:
37:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C3:35:6E:85:16:57:9D:2F:09:D7:9B:C8:E8:F1:E2:84:65:4C:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16937056D97911EF949749A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.143.0/24
Signature Algorithm: sha256WithRSAEncryption
34:78:0f:57:c2:0d:36:eb:cf:ba:5b:d0:f5:03:7d:4c:6f:b0:
da:9b:45:26:38:97:c8:a0:d1:25:9b:9f:9d:29:fb:ea:3d:35:
fc:e7:53:2d:41:2a:41:4a:9a:08:10:cf:5a:c8:45:38:33:97:
f2:39:b4:6f:75:a6:3b:39:f3:91:95:d3:7f:2a:3d:42:74:06:
d8:36:eb:80:b1:c7:53:4e:f3:92:01:b8:cb:21:d3:9e:2c:59:
40:eb:81:0a:ee:03:ee:b3:00:97:5e:7f:be:70:00:ee:9f:24:
5d:a0:89:75:5c:d5:7c:09:82:02:48:47:b0:8e:7b:11:04:01:
31:50:fc:c6:cf:89:33:b0:34:01:30:bc:5f:58:00:5c:31:a5:
2e:27:b4:bd:d7:78:c4:33:b3:89:db:7e:97:74:5e:b7:9d:bd:
cc:58:21:b1:de:58:4d:99:67:48:51:56:06:a1:09:22:6c:fe:
f6:21:e8:8b:b9:18:68:d8:d6:14:ff:07:4a:16:54:ff:6c:0e:
62:56:26:8a:e8:45:b9:9e:a6:03:4b:41:15:a3:26:56:69:60:
f1:d6:2b:18:54:e4:27:33:20:64:9d:b2:58:ec:5e:bf:99:05:
43:9d:53:af:35:55:6e:fb:71:ab:5b:a8:c4:66:8c:fe:c0:f2:
94:7d:6d:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUFnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTA1OTEzWhcNMjUwMjI4MTA1OTEzWjAYMRYw
FAYDVQQDEw02NzkyMjEwNC03MzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7vImaOt0luIZZ0RpfF/KXuqMONTvb2VeejbghH5fcNpf8guUKwlWiLjm
fcDpkbAJSnhgWpavyW6e7FgUgPcl6vdL4W1IIOvGDw8mhv4q8YzpCoTaUWwU6I73
mS0QxFtpiQQ5pcL4BzhVMFbrJ41tTOLOM1srRaYJ9aTCiEv8OjbCfCEt05mR19e1
tyxPtJ8UD02Jr/iZn4UaWQr8s4bgJkZdXiMtwx7yvS0VhVjgCDUFCcWnarOl2QsX
A/7hD0zOJ9guyLUBJt5qda3i2MKVYu3lzsAnbjHo/cB5IAU93uvjUA4glsxUGdJe
JU5e9Aib2ZF8qsMcqcFRUthBmLM3+QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFfD
NW6FFledLwnXm8jo8eKEZUxVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNjkzNzA1NkQ5NzkxMUVGOTQ5NzQ5QTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsOPMA0GCSqGSIb3DQEB
CwUAA4IBAQA0eA9Xwg0268+6W9D1A31Mb7Dam0UmOJfIoNElm5+dKfvqPTX851Mt
QSpBSpoIEM9ayEU4M5fyObRvdaY7OfORldN/Kj1CdAbYNuuAscdTTvOSAbjLIdOe
LFlA64EK7gPuswCXXn++cADunyRdoIl1XNV8CYICSEewjnsRBAExUPzGz4kzsDQB
MLxfWABcMaUuJ7S913jEM7OJ236XdF63nb3MWCGx3lhNmWdIUVYGoQkibP72IeiL
uRho2NYU/wdKFlT/bA5iViaK6EW5nqYDS0EVoyZWaWDx1isYVOQnMyBknbJY7F6/
mQVDnVOvNVVu+3GrW6jEZoz+wPKUfW0x
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:33 2025 by rpki-client