Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1ED9D14ED97711EF9ED5F59A762E951A.roa
File: 1ED9D14ED97711EF9ED5F59A762E951A.roa (raw, json)
Hash identifier: U/8P2sCncp+m/bFQaWemjvg53nHskPRy4mzNftaJcw8=
Subject key identifier: C8:D8:2A:CE:70:76:9D:2C:33:80:32:82:B8:D5:13:BF:63:AC:BB:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014147
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1ED9D14ED97711EF9ED5F59A762E951A.roa
Signing time: Thu 23 Jan 2025 10:45:11 +0000
ROA not before: Thu 23 Jan 2025 10:45:08 +0000
ROA not after: Thu 13 Mar 2025 10:45:08 +0000
asID: 63139
IP address blocks: 154.203.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82247 (0x14147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:45:08 2025 GMT
Not After : Mar 13 10:45:08 2025 GMT
Subject: CN=67921db7-16ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2d:f6:2f:20:7c:15:82:52:37:fe:73:2a:5e:
36:21:5c:7e:99:01:d6:27:d7:7a:31:30:00:12:d3:
75:9b:e6:cc:51:2c:e9:98:7e:d4:55:b9:8b:22:4f:
76:e7:5f:3d:76:7f:45:e5:87:09:26:e2:35:7e:5c:
b3:9e:32:86:38:86:4c:88:19:e6:cb:b2:fe:89:42:
cc:ad:db:4d:ef:22:04:69:f8:3b:cb:eb:35:74:cb:
df:1a:91:f0:e6:0b:bb:59:ba:e9:54:76:d6:83:5b:
8b:76:ac:63:9e:58:fd:7d:0b:d7:e0:42:bf:a4:09:
54:c6:56:30:76:00:c9:2b:10:bf:17:eb:9f:3e:e3:
0f:d0:5e:01:f4:17:43:46:75:91:90:d0:58:1f:b7:
de:19:e8:62:92:c8:36:ce:97:78:29:dc:82:4c:90:
70:7f:62:89:91:31:e9:23:d7:83:b1:f6:20:85:cd:
49:02:54:e2:81:11:14:da:3a:05:96:71:f8:f8:9b:
5f:ca:48:a9:81:44:b0:4a:6e:4c:74:00:3c:a6:4a:
f8:8f:fa:93:4f:c1:89:c0:88:48:0c:7d:81:55:b2:
23:7c:bb:d1:b6:5c:80:98:69:88:00:fe:0f:10:a3:
63:16:87:f7:2f:5a:74:44:a9:f4:b5:5a:13:6f:94:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D8:2A:CE:70:76:9D:2C:33:80:32:82:B8:D5:13:BF:63:AC:BB:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1ED9D14ED97711EF9ED5F59A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.175.0/24
Signature Algorithm: sha256WithRSAEncryption
45:8b:84:35:91:f6:ef:fe:50:67:fe:52:94:58:8c:01:cb:2a:
d4:6f:12:00:69:92:9d:1c:87:77:44:22:ed:bf:48:a1:0b:fe:
95:07:50:ca:6c:94:41:b2:0c:b5:b9:71:3d:74:82:d3:90:1d:
8e:b8:08:e1:98:1c:e4:25:41:a3:fc:1b:8b:55:ac:4e:77:6d:
ab:49:2b:12:a5:43:00:88:88:0a:3d:11:0c:cb:c8:fe:00:1d:
69:34:3f:df:59:a0:7f:79:0c:8a:05:08:55:5a:49:e3:9e:34:
36:cf:69:af:15:7b:31:11:68:30:9a:fe:e6:f5:21:1e:47:66:
5e:91:c0:05:2b:7d:9e:4a:3d:8a:df:bb:de:c2:16:a8:88:ab:
9c:bc:1a:e3:2c:f7:c9:26:01:3f:fb:f5:84:bb:27:2e:5a:7a:
81:44:d0:9e:fa:3d:45:07:27:59:0b:88:41:bc:8c:8c:e2:b1:
1f:11:c9:bd:b6:37:7f:87:71:bf:55:37:45:a3:f6:15:93:71:
17:8f:85:08:f7:60:32:89:cf:6e:f9:3c:92:ab:d8:e7:53:63:
25:aa:a7:ec:41:be:f6:b0:e9:20:9f:3b:e4:99:7c:da:e7:9b:
f1:6d:c5:f7:c9:13:78:18:1a:bc:fe:66:ca:02:d4:02:77:65:
61:38:21:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUFHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTA0NTA4WhcNMjUwMzEzMTA0NTA4WjAYMRYw
FAYDVQQDEw02NzkyMWRiNy0xNmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzC32LyB8FYJSN/5zKl42IVx+mQHWJ9d6MTAAEtN1m+bMUSzpmH7UVbmL
Ik925189dn9F5YcJJuI1flyznjKGOIZMiBnmy7L+iULMrdtN7yIEafg7y+s1dMvf
GpHw5gu7WbrpVHbWg1uLdqxjnlj9fQvX4EK/pAlUxlYwdgDJKxC/F+ufPuMP0F4B
9BdDRnWRkNBYH7feGehiksg2zpd4KdyCTJBwf2KJkTHpI9eDsfYghc1JAlTigREU
2joFlnH4+JtfykipgUSwSm5MdAA8pkr4j/qTT8GJwIhIDH2BVbIjfLvRtlyAmGmI
AP4PEKNjFof3L1p0RKn0tVoTb5Q8AwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMjY
Ks5wdp0sM4AygrjVE79jrLsUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRUQ5RDE0RUQ5NzcxMUVGOUVENUY1OUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsuvMA0GCSqGSIb3DQEB
CwUAA4IBAQBFi4Q1kfbv/lBn/lKUWIwByyrUbxIAaZKdHId3RCLtv0ihC/6VB1DK
bJRBsgy1uXE9dILTkB2OuAjhmBzkJUGj/BuLVaxOd22rSSsSpUMAiIgKPREMy8j+
AB1pND/fWaB/eQyKBQhVWknjnjQ2z2mvFXsxEWgwmv7m9SEeR2ZekcAFK32eSj2K
37vewhaoiKucvBrjLPfJJgE/+/WEuycuWnqBRNCe+j1FBydZC4hBvIyM4rEfEcm9
tjd/h3G/VTdFo/YVk3EXj4UI92Ayic9u+TySq9jnU2MlqqfsQb72sOkgnzvkmXza
55vxbcX3yRN4GBq8/mbKAtQCd2VhOCED
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:35:56 2025 by rpki-client