Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/255374B4DA4C11EF9DC4C2B7762E951A.roa
File: 255374B4DA4C11EF9DC4C2B7762E951A.roa (raw, json)
Hash identifier: 9do4kn72LubQl3vPjd3oD6zDyr3TxzQx75NmdzLImOc=
Subject key identifier: 52:BB:AC:ED:E2:81:2E:FD:4B:E0:34:A5:17:DD:76:2D:48:D9:13:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014689
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/255374B4DA4C11EF9DC4C2B7762E951A.roa
Signing time: Fri 24 Jan 2025 12:10:05 +0000
ROA not before: Fri 24 Jan 2025 12:10:01 +0000
ROA not after: Fri 28 Feb 2025 12:10:01 +0000
asID: 62240
IP address blocks: 154.194.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83593 (0x14689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:10:01 2025 GMT
Not After : Feb 28 12:10:01 2025 GMT
Subject: CN=6793831d-9910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d1:18:0c:a6:de:74:52:65:6e:68:ea:65:6e:
11:39:df:66:d7:3e:d2:11:67:13:81:39:8a:73:ab:
5c:ed:d0:bd:85:20:54:ab:d4:8b:ec:ab:cf:7f:14:
8c:30:f7:f5:b7:c1:fd:20:7d:75:78:24:66:40:28:
ae:3c:1b:57:e6:89:0d:4e:26:2d:aa:86:5c:33:e2:
11:7d:b5:86:01:c6:fc:88:dd:02:f2:40:49:d9:a2:
e4:11:83:a6:e8:a0:f2:dd:61:a6:c1:2f:0a:6d:65:
a4:d3:33:e7:93:5b:2a:c4:c3:7e:9a:44:9f:bc:07:
3e:57:96:e2:74:f5:c2:f6:24:47:ba:62:93:5b:64:
b0:c5:de:78:76:0d:44:0f:cf:fb:fa:1a:e4:93:40:
1a:16:66:fc:eb:b0:08:5e:96:d1:73:52:80:f2:c0:
e1:6e:d7:ef:37:e5:04:1e:c4:a3:36:ce:75:16:0b:
86:e1:48:7c:f9:02:9c:b2:a9:6d:7b:7d:f5:b1:78:
21:ae:b4:7e:40:4b:92:be:93:70:1c:d8:60:c7:a5:
0c:ed:7f:2b:b5:88:a0:b0:4e:c5:a9:1d:97:cd:05:
e2:15:56:ac:1b:eb:7a:47:1f:32:08:ca:32:15:d0:
ef:dd:08:36:34:68:b6:d5:9a:0e:a5:64:b5:16:ff:
56:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BB:AC:ED:E2:81:2E:FD:4B:E0:34:A5:17:DD:76:2D:48:D9:13:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/255374B4DA4C11EF9DC4C2B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.87.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a0:6f:24:e8:c0:ab:5a:12:82:2b:5b:ce:96:7d:de:0a:04:
ad:8b:ec:c7:16:c7:15:56:23:48:00:72:bb:b4:84:c3:5e:0f:
57:aa:fc:74:49:f7:a0:a9:7a:e0:0a:85:8c:c6:95:af:c6:2a:
9e:7b:69:5b:ee:58:4d:9e:b1:49:06:32:09:43:ba:e6:39:ae:
94:55:7c:4d:7d:a0:ea:66:0e:a0:16:51:e1:5a:91:33:2e:5a:
8a:e2:d9:43:87:db:b7:40:b6:84:b2:59:6a:47:8a:35:9b:87:
fb:3d:8e:1f:b6:48:18:39:30:51:98:09:c7:ee:8e:17:2a:6f:
52:69:c2:61:1a:ce:cf:97:fc:a7:e1:d7:7e:65:88:25:18:35:
05:a4:49:31:5a:6a:a8:ee:39:c4:e1:1a:57:f4:b1:76:02:4a:
d0:05:fc:a6:83:4f:ba:e9:fc:39:a1:24:d6:3a:b6:8f:7d:9c:
91:13:db:e6:28:6e:3e:31:79:ab:d8:95:f2:c7:34:a4:c4:5a:
d8:e2:d0:57:5d:33:81:f1:ed:66:ad:e7:63:c5:20:49:e2:dd:
18:30:62:91:a0:26:86:03:4e:9d:5a:93:23:4c:f0:e4:62:ca:
a0:ae:4a:50:b9:c4:f4:35:8b:f7:bf:b0:5c:41:66:2c:be:38:
bd:3c:f0:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUaJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTIxMDAxWhcNMjUwMjI4MTIxMDAxWjAYMRYw
FAYDVQQDEw02NzkzODMxZC05OTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5NEYDKbedFJlbmjqZW4ROd9m1z7SEWcTgTmKc6tc7dC9hSBUq9SL7KvP
fxSMMPf1t8H9IH11eCRmQCiuPBtX5okNTiYtqoZcM+IRfbWGAcb8iN0C8kBJ2aLk
EYOm6KDy3WGmwS8KbWWk0zPnk1sqxMN+mkSfvAc+V5bidPXC9iRHumKTW2Swxd54
dg1ED8/7+hrkk0AaFmb867AIXpbRc1KA8sDhbtfvN+UEHsSjNs51FguG4Uh8+QKc
sqlte331sXghrrR+QEuSvpNwHNhgx6UM7X8rtYigsE7FqR2XzQXiFVasG+t6Rx8y
CMoyFdDv3Qg2NGi21ZoOpWS1Fv9WnQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFK7
rO3igS79S+A0pRfddi1I2RMJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNTUzNzRCNERBNEMxMUVGOURDNEMyQjc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJXMA0GCSqGSIb3DQEB
CwUAA4IBAQBMoG8k6MCrWhKCK1vOln3eCgSti+zHFscVViNIAHK7tITDXg9Xqvx0
SfegqXrgCoWMxpWvxiqee2lb7lhNnrFJBjIJQ7rmOa6UVXxNfaDqZg6gFlHhWpEz
LlqK4tlDh9u3QLaEsllqR4o1m4f7PY4ftkgYOTBRmAnH7o4XKm9SacJhGs7Pl/yn
4dd+ZYglGDUFpEkxWmqo7jnE4RpX9LF2AkrQBfymg0+66fw5oSTWOraPfZyRE9vm
KG4+MXmr2JXyxzSkxFrY4tBXXTOB8e1mredjxSBJ4t0YMGKRoCaGA06dWpMjTPDk
YsqgrkpQucT0NYv3v7BcQWYsvji9PPCV
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:33 2025 by rpki-client