Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E38037ADA6011EF9B1C9842762E951A.roa
File: 1E38037ADA6011EF9B1C9842762E951A.roa (raw, json)
Hash identifier: Ikh8P9KCMR5+z5fw5o2r/QQRC+4rG0yq4A6zM1A7xEc=
Subject key identifier: 73:04:17:76:9F:B2:5C:D7:06:DE:83:82:06:53:15:5C:BA:A7:CC:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014838
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E38037ADA6011EF9B1C9842762E951A.roa
Signing time: Fri 24 Jan 2025 14:33:03 +0000
ROA not before: Fri 24 Jan 2025 14:32:59 +0000
ROA not after: Sat 01 Mar 2025 14:32:59 +0000
asID: 44559
IP address blocks: 154.203.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84024 (0x14838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:32:59 2025 GMT
Not After : Mar 1 14:32:59 2025 GMT
Subject: CN=6793a49f-168a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:4d:98:01:ff:dd:c8:89:a4:37:da:80:16:70:
d9:ea:20:2e:ee:50:29:22:7d:15:45:55:db:f1:5d:
74:60:5b:fc:a2:5f:e6:1e:e0:e1:57:3f:a0:89:75:
29:82:95:ab:5d:75:19:7f:78:ef:fc:a0:14:6b:75:
44:f5:f8:36:7b:30:93:2b:82:9a:68:e3:ca:31:c4:
7c:8f:6c:c7:5b:7d:fc:46:f3:9e:cd:b7:65:85:49:
77:6a:61:da:1c:47:e5:b2:52:77:8b:22:83:ac:da:
cb:a1:0d:05:63:5e:11:e4:d0:62:5c:42:ff:49:44:
57:8e:06:a4:bc:86:7b:2c:4c:96:a0:a0:af:df:99:
ad:b4:5a:79:fb:ad:82:5f:34:8d:5b:87:e1:63:fe:
db:98:22:40:02:5f:d5:ba:cb:79:d8:34:cd:3e:bc:
27:27:6f:f9:48:5b:b0:6a:7a:24:ab:46:06:73:94:
65:a2:e9:46:a4:d5:31:94:7c:d9:18:b2:4f:3e:47:
6e:bb:fe:a2:01:a5:f9:23:5f:27:b2:08:23:69:ee:
68:3d:60:f9:8d:e5:8d:8f:65:5b:eb:ba:a9:bd:d9:
a8:c2:1e:25:b3:60:21:44:a9:2a:4d:d3:9a:44:69:
15:68:b6:91:9f:d9:a4:72:00:4c:74:4c:1c:59:46:
75:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:04:17:76:9F:B2:5C:D7:06:DE:83:82:06:53:15:5C:BA:A7:CC:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E38037ADA6011EF9B1C9842762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.212.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:e2:04:e0:f8:98:54:8d:4a:e1:98:c8:27:3d:f2:ac:20:af:
2d:f6:14:1f:f4:41:a6:55:5a:6b:23:2d:fe:7f:ec:e0:d4:17:
d1:b5:2f:42:f8:c3:34:af:71:ae:53:1d:99:73:10:5e:61:32:
aa:52:81:cd:63:6a:dc:45:b7:54:3b:d1:52:5c:44:c3:f1:f2:
6b:cd:e4:ea:00:d1:ac:5d:9e:1c:c9:b5:14:63:3a:64:4f:c5:
41:9e:53:29:e8:7d:00:7a:25:a7:8f:eb:d3:62:56:28:94:de:
2f:d8:00:4b:d4:b5:ac:61:e0:ba:76:db:c6:3a:bf:6b:05:62:
a3:f8:c5:ed:1c:34:26:8b:b6:63:01:da:d0:70:78:50:54:22:
bc:5e:c0:22:74:c4:a9:f7:67:f7:0a:b6:1f:dd:c3:6c:da:16:
a0:ee:13:a6:31:d3:d3:97:ae:7e:ed:a3:be:95:12:1b:94:22:
76:37:d7:09:0f:a0:a3:5b:46:82:e5:cb:6a:13:a3:c9:7b:c0:
98:6b:d2:ca:55:94:d9:84:57:d9:4b:68:81:84:3a:15:83:f0:
7a:32:d6:f8:58:6c:8c:f8:90:d8:60:9d:87:81:d4:74:be:d7:
5f:53:31:86:97:12:df:d8:81:33:0a:d5:04:d2:b4:b0:b0:b6:
a3:dc:de:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUg4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTQzMjU5WhcNMjUwMzAxMTQzMjU5WjAYMRYw
FAYDVQQDEw02NzkzYTQ5Zi0xNjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA/k2YAf/dyImkN9qAFnDZ6iAu7lApIn0VRVXb8V10YFv8ol/mHuDhVz+g
iXUpgpWrXXUZf3jv/KAUa3VE9fg2ezCTK4KaaOPKMcR8j2zHW338RvOezbdlhUl3
amHaHEflslJ3iyKDrNrLoQ0FY14R5NBiXEL/SURXjgakvIZ7LEyWoKCv35mttFp5
+62CXzSNW4fhY/7bmCJAAl/Vust52DTNPrwnJ2/5SFuwanokq0YGc5RloulGpNUx
lHzZGLJPPkduu/6iAaX5I18nsggjae5oPWD5jeWNj2Vb67qpvdmowh4ls2AhRKkq
TdOaRGkVaLaRn9mkcgBMdEwcWUZ1BwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHME
F3afslzXBt6DggZTFVy6p8xiMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRTM4MDM3QURBNjAxMUVGOUIxQzk4NDI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsvUMA0GCSqGSIb3DQEB
CwUAA4IBAQC74gTg+JhUjUrhmMgnPfKsIK8t9hQf9EGmVVprIy3+f+zg1BfRtS9C
+MM0r3GuUx2ZcxBeYTKqUoHNY2rcRbdUO9FSXETD8fJrzeTqANGsXZ4cybUUYzpk
T8VBnlMp6H0AeiWnj+vTYlYolN4v2ABL1LWsYeC6dtvGOr9rBWKj+MXtHDQmi7Zj
AdrQcHhQVCK8XsAidMSp92f3CrYf3cNs2hag7hOmMdPTl65+7aO+lRIblCJ2N9cJ
D6CjW0aC5ctqE6PJe8CYa9LKVZTZhFfZS2iBhDoVg/B6Mtb4WGyM+JDYYJ2HgdR0
vtdfUzGGlxLf2IEzCtUE0rSwsLaj3N7d
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:19:28 2025 by rpki-client