Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/232F4D30DA5011EF9C0E4E55762E951A.roa
File: 232F4D30DA5011EF9C0E4E55762E951A.roa (raw, json)
Hash identifier: C1Azt+dyOCnIMm99nIpNvpZxgNotQCP1qowE9yGox+w=
Subject key identifier: 5D:B8:98:0F:7F:FC:D7:60:77:22:63:8F:81:D1:97:64:73:94:15:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/232F4D30DA5011EF9C0E4E55762E951A.roa
Signing time: Fri 24 Jan 2025 12:38:39 +0000
ROA not before: Fri 24 Jan 2025 12:38:36 +0000
ROA not after: Sat 01 Mar 2025 12:38:36 +0000
asID: 44559
IP address blocks: 154.205.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83690 (0x146ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:38:36 2025 GMT
Not After : Mar 1 12:38:36 2025 GMT
Subject: CN=679389cf-1eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:9a:be:8e:6b:21:fe:62:b8:13:45:f0:d1:
48:04:2d:26:ed:c0:50:65:d5:76:c0:84:e5:2d:39:
e2:fb:75:c3:6e:97:37:48:aa:a1:38:c0:ec:15:2c:
10:fd:d2:f1:0e:57:71:82:15:85:99:60:cf:e5:11:
dc:36:dd:09:32:ce:86:86:fb:da:31:6a:41:31:49:
00:de:e2:64:6c:a9:27:44:ba:a4:2b:dd:8b:91:79:
34:5e:4e:a8:31:a6:f6:aa:2d:41:32:6a:a9:f9:57:
d1:87:e0:79:4d:64:62:c4:a6:3d:fc:bf:d8:a7:90:
4f:53:79:3e:b9:cd:ba:d8:cf:37:68:27:fc:16:76:
d5:8e:26:71:27:41:ab:12:ab:00:8d:52:ee:60:7f:
db:eb:ab:18:07:44:1a:34:f4:78:54:31:f2:34:0e:
18:4b:38:71:2f:fd:aa:bd:a0:18:84:7b:37:d0:96:
50:9e:dc:ac:bf:7d:d7:f3:c3:45:64:45:9a:9d:33:
bb:b1:55:19:02:da:f0:1e:23:1e:db:e9:16:3c:61:
55:16:8f:6e:67:f6:a1:49:c5:9e:ea:a2:a9:34:45:
fb:5f:8c:4e:ae:16:0d:2a:03:f9:8d:6f:14:f2:b7:
4f:d8:6f:cb:99:69:82:0b:42:77:59:0a:89:6e:ce:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B8:98:0F:7F:FC:D7:60:77:22:63:8F:81:D1:97:64:73:94:15:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/232F4D30DA5011EF9C0E4E55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ea:f2:ac:22:c3:e0:54:b2:3b:11:2a:a1:71:b0:25:c0:dc:
7c:31:44:82:4e:c2:69:db:a6:bb:fa:08:fd:62:e9:8e:4f:03:
8f:43:7a:d3:0d:2d:ad:67:b9:10:26:e2:ab:6a:ae:e9:22:59:
53:b3:25:0d:28:2f:24:b3:4a:37:5c:d8:1c:e0:71:58:ea:b4:
83:47:cd:eb:de:22:38:ec:b6:75:ee:50:e8:2d:bd:c6:e1:8e:
cb:b9:4a:57:f7:98:7a:4f:60:32:80:9d:0d:4e:a4:9e:e9:98:
0b:c9:ed:91:39:44:2b:b2:85:19:e2:7f:4d:6b:dd:3e:b0:53:
c5:f6:b3:15:2c:6f:b5:cb:27:57:f2:e9:19:5c:a2:71:92:c5:
18:29:c2:48:3c:6e:96:55:9a:64:6d:49:00:3b:94:ef:98:10:
14:86:79:5b:52:fe:3a:7e:b6:02:d2:24:13:8c:18:e7:60:04:
61:05:b7:b2:ab:af:aa:ae:88:0e:29:61:fe:80:43:80:ab:30:
14:2b:b1:51:33:92:b3:b1:46:39:9e:ae:7b:9c:90:c2:0c:93:
fb:ed:0d:8d:b1:f0:59:b5:7a:fb:c5:37:87:0f:bc:16:e8:65:
7c:b6:cb:4d:61:bd:2d:fd:5b:cf:3f:4c:59:fc:9b:fe:d1:1b:
8c:4d:f3:29
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUbqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTIzODM2WhcNMjUwMzAxMTIzODM2WjAYMRYw
FAYDVQQDEw02NzkzODljZi0xZWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0XKavo5rIf5iuBNF8NFIBC0m7cBQZdV2wITlLTni+3XDbpc3SKqhOMDs
FSwQ/dLxDldxghWFmWDP5RHcNt0JMs6GhvvaMWpBMUkA3uJkbKknRLqkK92LkXk0
Xk6oMab2qi1BMmqp+VfRh+B5TWRixKY9/L/Yp5BPU3k+uc262M83aCf8FnbVjiZx
J0GrEqsAjVLuYH/b66sYB0QaNPR4VDHyNA4YSzhxL/2qvaAYhHs30JZQntysv33X
88NFZEWanTO7sVUZAtrwHiMe2+kWPGFVFo9uZ/ahScWe6qKpNEX7X4xOrhYNKgP5
jW8U8rdP2G/LmWmCC0J3WQqJbs4nswIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF24
mA9//NdgdyJjj4HRl2RzlBVsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMzJGNEQzMERBNTAxMUVGOUMwRTRFNTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms3rMA0GCSqGSIb3DQEB
CwUAA4IBAQCc6vKsIsPgVLI7ESqhcbAlwNx8MUSCTsJp26a7+gj9YumOTwOPQ3rT
DS2tZ7kQJuKraq7pIllTsyUNKC8ks0o3XNgc4HFY6rSDR83r3iI47LZ17lDoLb3G
4Y7LuUpX95h6T2AygJ0NTqSe6ZgLye2ROUQrsoUZ4n9Na90+sFPF9rMVLG+1yydX
8ukZXKJxksUYKcJIPG6WVZpkbUkAO5TvmBAUhnlbUv46frYC0iQTjBjnYARhBbey
q6+qrogOKWH+gEOAqzAUK7FRM5KzsUY5nq57nJDCDJP77Q2NsfBZtXr7xTeHD7wW
6GV8tstNYb0t/VvPP0xZ/Jv+0RuMTfMp
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:06:29 2025 by rpki-client