Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/239565D8D97011EFBB93186D762E951A.roa
File: 239565D8D97011EFBB93186D762E951A.roa (raw, json)
Hash identifier: kDSC3mKrBBo7HCjN746sN6r1isTA5JDLw3YChuOHY70=
Subject key identifier: DC:68:59:3B:81:08:5C:D5:9E:94:96:7F:EF:82:1B:06:38:64:D1:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014106
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/239565D8D97011EFBB93186D762E951A.roa
Signing time: Thu 23 Jan 2025 09:55:13 +0000
ROA not before: Thu 23 Jan 2025 09:55:09 +0000
ROA not after: Fri 28 Feb 2025 09:55:09 +0000
asID: 62240
IP address blocks: 154.194.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82182 (0x14106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:55:09 2025 GMT
Not After : Feb 28 09:55:09 2025 GMT
Subject: CN=67921201-982f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:f6:c9:85:05:be:f7:6d:26:aa:bb:30:ca:
8f:16:5a:46:44:9c:1b:8e:17:9e:b6:46:ae:ff:8a:
be:aa:d3:ae:24:c9:27:b8:42:08:27:9c:af:9b:e3:
02:b9:9c:85:23:9b:dd:86:41:69:56:f8:4b:46:18:
e7:0b:14:80:f0:b7:8e:a9:81:40:5b:37:09:5d:2a:
8f:3a:cc:f6:eb:f2:f0:0a:81:69:27:de:28:f2:c2:
08:56:a4:a9:aa:9b:6d:f9:60:f6:17:86:f6:b9:e7:
ab:8d:58:17:a0:7a:c7:cc:93:cf:bf:7d:0a:17:0e:
eb:b1:f2:23:d9:a7:2a:b5:da:df:cc:61:84:d7:22:
3d:d4:30:51:10:e2:b4:e1:ae:27:71:e6:bf:de:88:
9f:c9:4c:50:ff:a6:fe:e4:10:b3:fb:06:5c:83:04:
2f:dd:16:f2:84:c9:e3:a6:f8:3a:17:1c:71:f4:94:
88:93:4e:06:3e:01:39:2e:86:e3:ee:e0:69:9e:69:
8b:cd:80:91:3e:04:71:68:78:6b:bc:e8:89:64:bf:
b2:e6:36:99:74:4b:c7:20:09:a0:1e:64:bd:b3:d1:
c0:76:96:71:0c:c9:81:34:96:c3:08:48:79:7b:de:
ca:4d:d5:dd:53:e8:0d:32:00:77:61:5d:01:62:09:
32:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:68:59:3B:81:08:5C:D5:9E:94:96:7F:EF:82:1B:06:38:64:D1:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/239565D8D97011EFBB93186D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.125.0/24
Signature Algorithm: sha256WithRSAEncryption
94:d5:be:37:65:c8:48:fc:a6:4a:0e:f1:c5:0c:c7:ee:ae:a7:
03:6a:d8:7b:b9:f9:e2:d0:da:93:fb:4b:08:7e:fa:0f:5c:d7:
37:e0:84:30:ea:71:64:ca:49:2f:47:a8:1d:db:f1:df:43:68:
2f:cc:7a:50:e9:75:4f:e2:ea:94:dc:63:57:54:2a:12:27:4b:
88:1a:4c:31:54:4f:b4:9d:4c:2e:97:ec:6b:5f:33:2b:e2:2a:
8a:4a:fa:61:ae:f7:d1:e7:ed:86:40:1b:6c:11:36:12:9f:31:
e1:68:b7:ba:e6:57:fa:8c:e9:5b:f6:4a:b2:aa:da:60:dd:77:
ac:49:85:1b:89:27:a5:92:b6:21:47:f5:bd:ac:c5:3f:47:ec:
91:61:7d:1d:ad:3c:54:dc:3b:88:cf:10:f0:11:aa:49:2a:36:
32:0c:86:4c:6c:a9:63:10:b6:4e:85:3d:5d:17:bc:12:ba:1a:
80:6f:e2:d9:36:26:6b:07:8e:9c:60:54:9e:c8:57:06:86:04:
57:70:80:1d:dc:12:11:6a:93:18:00:f0:af:36:5a:b6:05:df:
12:bc:00:fa:c0:82:87:9a:f6:93:84:cd:5c:1c:11:78:b5:e8:
4b:70:3e:00:88:4e:9f:98:47:cf:ea:40:ef:cf:d9:a2:87:53:
4a:ff:41:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUEGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMDk1NTA5WhcNMjUwMjI4MDk1NTA5WjAYMRYw
FAYDVQQDEw02NzkyMTIwMS05ODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvn/2yYUFvvdtJqq7MMqPFlpGRJwbjheetkau/4q+qtOuJMknuEIIJ5yv
m+MCuZyFI5vdhkFpVvhLRhjnCxSA8LeOqYFAWzcJXSqPOsz26/LwCoFpJ94o8sII
VqSpqptt+WD2F4b2ueerjVgXoHrHzJPPv30KFw7rsfIj2acqtdrfzGGE1yI91DBR
EOK04a4ncea/3oifyUxQ/6b+5BCz+wZcgwQv3RbyhMnjpvg6Fxxx9JSIk04GPgE5
Lobj7uBpnmmLzYCRPgRxaHhrvOiJZL+y5jaZdEvHIAmgHmS9s9HAdpZxDMmBNJbD
CEh5e97KTdXdU+gNMgB3YV0BYgky1wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNxo
WTuBCFzVnpSWf++CGwY4ZNFRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMzk1NjVEOEQ5NzAxMUVGQkI5MzE4NkQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJ9MA0GCSqGSIb3DQEB
CwUAA4IBAQCU1b43ZchI/KZKDvHFDMfurqcDath7ufni0NqT+0sIfvoPXNc34IQw
6nFkykkvR6gd2/HfQ2gvzHpQ6XVP4uqU3GNXVCoSJ0uIGkwxVE+0nUwul+xrXzMr
4iqKSvphrvfR5+2GQBtsETYSnzHhaLe65lf6jOlb9kqyqtpg3XesSYUbiSelkrYh
R/W9rMU/R+yRYX0drTxU3DuIzxDwEapJKjYyDIZMbKljELZOhT1dF7wSuhqAb+LZ
NiZrB46cYFSeyFcGhgRXcIAd3BIRapMYAPCvNlq2Bd8SvAD6wIKHmvaThM1cHBF4
tehLcD4AiE6fmEfP6kDvz9mih1NK/0FI
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:06 2025 by rpki-client