Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/204AEA42DA0611EFA767E364762E951A.roa
File: 204AEA42DA0611EFA767E364762E951A.roa (raw, json)
Hash identifier: 3osBXeA3XBMyVZJ+aw013TCTN+q3aVMbfRiylj20SGU=
Subject key identifier: 8D:11:BE:5F:A8:8B:14:AE:23:ED:68:3E:A8:6A:FA:62:0F:15:6E:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/204AEA42DA0611EFA767E364762E951A.roa
Signing time: Fri 24 Jan 2025 03:48:52 +0000
ROA not before: Fri 24 Jan 2025 03:48:48 +0000
ROA not after: Sat 01 Mar 2025 03:48:48 +0000
asID: 44559
IP address blocks: 154.198.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82852 (0x143a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 03:48:48 2025 GMT
Not After : Mar 1 03:48:48 2025 GMT
Subject: CN=67930da4-8095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b8:68:35:bd:64:19:68:f1:f2:06:9d:01:e4:
d1:d4:5c:44:3a:2e:6d:53:0b:a8:2b:3d:73:e4:3e:
33:63:cc:bf:36:e7:ca:4b:6a:b9:f0:1a:8e:fe:0f:
ec:43:c4:6d:ce:fa:4e:01:71:82:49:5c:4c:5d:cd:
79:38:51:ab:43:2c:8b:e0:09:7d:a5:28:a9:87:7c:
d4:b0:e6:6a:dd:30:d0:6f:4e:21:d3:f2:8c:fd:e4:
94:bd:73:c6:67:b8:0e:13:42:22:75:e4:a6:fd:bb:
72:b4:98:68:59:75:50:a8:4e:be:2a:ff:5e:06:28:
e3:a3:2d:15:40:63:33:39:2c:32:fd:0d:1f:3d:97:
8f:8c:dc:0f:55:28:5b:97:eb:ab:2a:f2:d0:00:76:
c2:40:a8:0b:6d:71:6c:1b:46:f0:b9:21:cb:cb:aa:
8f:64:c0:1d:fb:4d:99:fa:0b:a3:72:8a:48:99:3d:
05:78:35:ff:c3:5d:41:1b:db:72:3e:98:1f:95:3d:
2a:c4:d6:6e:32:a8:89:fe:ed:8b:a7:0d:9c:a8:8c:
76:63:db:50:0e:dd:94:28:3b:83:42:47:57:e3:a2:
3f:f5:06:12:44:38:10:00:2d:43:17:17:a2:36:80:
3a:62:c3:63:f6:e6:8a:b9:4a:a8:0c:10:ae:1d:03:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:11:BE:5F:A8:8B:14:AE:23:ED:68:3E:A8:6A:FA:62:0F:15:6E:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/204AEA42DA0611EFA767E364762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.37.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:a2:b9:a7:55:ba:f2:d2:78:63:41:f1:4f:85:02:6e:e2:1b:
ef:46:99:28:50:36:1b:23:b9:54:f1:fd:5c:ad:68:3f:aa:5b:
7f:4f:24:05:0d:86:e5:2b:d2:a8:c1:c4:25:a3:86:69:de:42:
ed:a5:9b:2c:da:da:54:f2:7a:4b:8f:69:0f:3b:fe:de:1d:2e:
75:93:8f:20:58:10:d9:b2:72:a2:77:9b:83:79:82:9d:02:ac:
52:e8:44:a7:dd:04:41:a1:fc:dc:c7:26:26:16:52:00:f8:2b:
36:90:c0:bb:a5:99:07:ee:0b:68:6b:16:db:4c:94:d7:9e:61:
65:1e:8b:21:57:6a:29:9a:c8:64:e4:9f:b2:b1:ff:d8:8c:7d:
73:3e:50:e8:8e:13:28:27:80:b5:41:20:1a:b9:92:76:da:3f:
20:2f:aa:8d:e9:48:67:54:d9:83:0a:7f:44:1c:e5:d7:e1:43:
5a:43:62:b6:33:87:d4:e7:71:67:6c:c2:89:3e:cb:c5:7b:dd:
03:78:64:a3:a6:4b:65:c0:15:76:56:1f:43:f0:19:2a:ef:cc:
a3:a2:2e:06:ea:03:b5:0a:b6:03:6a:ad:69:3d:6b:4e:25:10:
7e:c2:bc:84:5b:a5:1f:c0:a6:9d:35:1d:36:4e:75:42:9c:a8:
fb:9c:85:d9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUOkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MDM0ODQ4WhcNMjUwMzAxMDM0ODQ4WjAYMRYw
FAYDVQQDEw02NzkzMGRhNC04MDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1LhoNb1kGWjx8gadAeTR1FxEOi5tUwuoKz1z5D4zY8y/NufKS2q58BqO
/g/sQ8RtzvpOAXGCSVxMXc15OFGrQyyL4Al9pSiph3zUsOZq3TDQb04h0/KM/eSU
vXPGZ7gOE0IideSm/btytJhoWXVQqE6+Kv9eBijjoy0VQGMzOSwy/Q0fPZePjNwP
VShbl+urKvLQAHbCQKgLbXFsG0bwuSHLy6qPZMAd+02Z+gujcopImT0FeDX/w11B
G9tyPpgflT0qxNZuMqiJ/u2Lpw2cqIx2Y9tQDt2UKDuDQkdX46I/9QYSRDgQAC1D
FxeiNoA6YsNj9uaKuUqoDBCuHQOS0wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFI0R
vl+oixSuI+1oPqhq+mIPFW4QMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMDRBRUE0MkRBMDYxMUVGQTc2N0UzNjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsYlMA0GCSqGSIb3DQEB
CwUAA4IBAQDWormnVbry0nhjQfFPhQJu4hvvRpkoUDYbI7lU8f1crWg/qlt/TyQF
DYblK9KowcQlo4Zp3kLtpZss2tpU8npLj2kPO/7eHS51k48gWBDZsnKid5uDeYKd
AqxS6ESn3QRBofzcxyYmFlIA+Cs2kMC7pZkH7gtoaxbbTJTXnmFlHoshV2opmshk
5J+ysf/YjH1zPlDojhMoJ4C1QSAauZJ22j8gL6qN6UhnVNmDCn9EHOXX4UNaQ2K2
M4fU53FnbMKJPsvFe90DeGSjpktlwBV2Vh9D8Bkq78yjoi4G6gO1CrYDaq1pPWtO
JRB+wryEW6UfwKadNR02TnVCnKj7nIXZ
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:14:54 2025 by rpki-client