Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2115DD98DA3211EFB6DC7089762E951A.roa
File: 2115DD98DA3211EFB6DC7089762E951A.roa (raw, json)
Hash identifier: jkL/4Cilabkxh7cHajvgMqYER3K9oCFwvw5Cqz5HFPY=
Subject key identifier: 5C:01:9F:D7:62:7F:38:07:49:2A:03:B1:52:05:21:94:0D:CB:C0:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2115DD98DA3211EFB6DC7089762E951A.roa
Signing time: Fri 24 Jan 2025 09:03:51 +0000
ROA not before: Fri 24 Jan 2025 09:03:47 +0000
ROA not after: Thu 13 Mar 2025 09:03:47 +0000
asID: 63139
IP address blocks: 154.203.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83121 (0x144b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:03:47 2025 GMT
Not After : Mar 13 09:03:47 2025 GMT
Subject: CN=67935777-403a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7f:1e:4a:19:fb:72:da:71:0b:70:9e:91:a4:
24:76:46:ba:fd:8e:96:a9:2b:9c:c2:62:d6:d3:be:
4a:58:73:65:ec:ec:1a:b7:0c:4c:69:55:eb:5f:55:
88:47:f9:35:d4:5e:85:0d:7f:ab:87:49:66:6f:c0:
bd:54:f0:a7:21:8f:9d:34:df:02:38:14:9d:24:56:
b5:2a:cd:76:b7:91:5d:27:68:28:01:00:8d:cd:2c:
c3:1f:5e:dd:3e:6a:1c:7a:17:08:ef:45:51:67:ad:
dd:f0:9e:d8:84:3e:9a:c0:04:05:a7:01:19:92:7c:
71:08:d8:70:31:b0:9f:38:97:cc:2d:56:89:ce:04:
15:ac:e5:98:65:82:25:7a:11:28:7e:b6:5f:de:a2:
3e:00:2a:d0:b2:a4:2b:47:79:c3:ba:86:5e:34:d1:
95:e4:f5:62:40:a0:1d:04:f0:7e:c2:fe:5a:67:9a:
53:28:a2:87:52:fb:11:04:a9:61:9c:3d:d6:af:fc:
b2:5c:4f:35:2f:5f:c2:27:c5:1f:57:0f:2c:5b:39:
75:08:65:4e:8b:c7:c9:8d:c1:16:2a:64:ef:28:e6:
9a:f8:28:25:ab:e9:7b:63:57:68:c9:09:53:3c:0d:
4f:3a:a7:df:f8:1e:f3:d2:4c:b2:4a:e5:67:19:57:
94:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:01:9F:D7:62:7F:38:07:49:2A:03:B1:52:05:21:94:0D:CB:C0:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2115DD98DA3211EFB6DC7089762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.179.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:ce:87:0c:5c:4b:61:a2:a0:9f:d8:2f:d4:68:ae:35:07:c4:
9f:17:8b:c6:7b:b8:33:2b:26:d7:8d:80:38:08:d4:15:86:a4:
88:85:43:ff:c8:f9:d1:17:d0:7f:83:dd:5e:80:bf:62:d6:a5:
91:99:56:48:59:e4:17:ea:a7:37:98:92:d3:c1:a3:b1:94:4f:
68:da:fd:4a:ed:6b:2c:49:d9:d2:53:c0:0a:b6:d9:e2:74:fd:
2d:7e:69:7a:87:c5:12:54:4b:d0:8c:ed:60:c4:b0:4f:e1:b1:
57:94:5f:19:69:d3:aa:b3:6a:ce:65:3d:92:b6:db:20:63:c7:
62:d9:56:dc:dd:0d:b8:b6:df:09:01:0b:bb:bf:26:c0:53:a7:
54:5e:8c:84:c8:a3:cf:04:46:f5:97:98:6f:1e:51:b5:5a:3c:
49:d4:99:4a:7f:4f:cd:8b:ce:13:11:20:5e:50:22:31:27:53:
c0:94:39:16:66:68:3c:61:e0:bd:38:83:e8:c3:25:24:38:aa:
94:ad:61:ac:56:1b:04:9c:e2:f4:8d:85:4a:f7:21:31:42:98:
a2:07:c5:f9:a0:92:f5:e8:f1:37:58:fb:7b:55:2b:b7:c7:b7:
e7:dc:b1:75:31:52:a5:b9:3e:6a:3b:c3:72:3b:29:15:22:ba:
c1:19:a8:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUSxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MDkwMzQ3WhcNMjUwMzEzMDkwMzQ3WjAYMRYw
FAYDVQQDEw02NzkzNTc3Ny00MDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2n8eShn7ctpxC3CekaQkdka6/Y6WqSucwmLW075KWHNl7OwatwxMaVXr
X1WIR/k11F6FDX+rh0lmb8C9VPCnIY+dNN8COBSdJFa1Ks12t5FdJ2goAQCNzSzD
H17dPmocehcI70VRZ63d8J7YhD6awAQFpwEZknxxCNhwMbCfOJfMLVaJzgQVrOWY
ZYIlehEofrZf3qI+ACrQsqQrR3nDuoZeNNGV5PViQKAdBPB+wv5aZ5pTKKKHUvsR
BKlhnD3Wr/yyXE81L1/CJ8UfVw8sWzl1CGVOi8fJjcEWKmTvKOaa+Cglq+l7Y1do
yQlTPA1POqff+B7z0kyySuVnGVeUYQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFwB
n9difzgHSSoDsVIFIZQNy8ASMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMTE1REQ5OERBMzIxMUVGQjZEQzcwODk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsuzMA0GCSqGSIb3DQEB
CwUAA4IBAQDGzocMXEthoqCf2C/UaK41B8SfF4vGe7gzKybXjYA4CNQVhqSIhUP/
yPnRF9B/g91egL9i1qWRmVZIWeQX6qc3mJLTwaOxlE9o2v1K7WssSdnSU8AKttni
dP0tfml6h8USVEvQjO1gxLBP4bFXlF8ZadOqs2rOZT2SttsgY8di2Vbc3Q24tt8J
AQu7vybAU6dUXoyEyKPPBEb1l5hvHlG1WjxJ1JlKf0/Ni84TESBeUCIxJ1PAlDkW
Zmg8YeC9OIPowyUkOKqUrWGsVhsEnOL0jYVK9yExQpiiB8X5oJL16PE3WPt7VSu3
x7fn3LF1MVKluT5qO8NyOykVIrrBGagB
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:26:47 2025 by rpki-client