Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CA2683CD51B11EFAC70DF5A762E951A.roa
File: 2CA2683CD51B11EFAC70DF5A762E951A.roa (raw, json)
Hash identifier: 72oQTzcaO3bUG8XswEzvwYZE2HffRDaxy+THeS6DRaQ=
Subject key identifier: 89:F9:C2:5E:45:52:90:9A:B6:47:36:AA:BB:BB:BA:6D:B9:63:B7:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D57
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CA2683CD51B11EFAC70DF5A762E951A.roa
Signing time: Fri 17 Jan 2025 21:36:56 +0000
ROA not before: Fri 17 Jan 2025 21:36:53 +0000
ROA not after: Sat 22 Feb 2025 21:36:53 +0000
asID: 141883
IP address blocks: 154.215.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81239 (0x13d57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 21:36:53 2025 GMT
Not After : Feb 22 21:36:53 2025 GMT
Subject: CN=678acd78-7c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:73:c0:f4:43:e8:71:b3:d3:86:13:1e:00:40:
53:0b:1b:d5:e3:d7:93:38:de:29:e5:db:58:f8:4f:
dd:fb:43:a6:81:20:95:6b:99:90:3d:f5:2c:35:54:
47:5c:45:95:fc:6a:71:3a:9c:1f:2b:08:58:5e:e2:
3f:18:7f:19:a9:eb:51:26:e1:7d:21:a8:86:53:6c:
15:c7:82:47:6e:66:02:f0:03:ab:66:b4:ad:0c:75:
2d:3e:d4:41:6d:70:db:2b:25:bc:2d:5c:56:47:7f:
5d:41:d6:72:03:ae:af:71:77:74:61:77:47:f8:58:
3a:72:f2:2b:dd:fc:02:06:2e:73:ca:cf:9d:e4:c9:
ae:81:23:08:c2:9c:22:bc:26:7a:7c:a5:87:52:2d:
bf:05:fb:17:68:3c:70:c9:1e:b7:93:ab:8d:fb:e4:
64:1f:ba:07:16:b2:4c:5f:08:6a:74:15:64:95:4f:
ee:26:19:9c:d7:5c:60:7c:2f:f9:56:2e:e7:ac:f4:
6f:ef:8a:d2:72:e3:56:b4:61:f3:a3:99:df:e9:0a:
b0:94:4c:62:38:0a:59:05:ff:8b:ba:59:0e:31:d1:
89:09:12:a5:b6:ab:4e:8b:7d:0e:32:3f:4b:8c:65:
f9:36:25:00:34:db:f1:76:5c:6e:c8:a0:37:1a:2d:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F9:C2:5E:45:52:90:9A:B6:47:36:AA:BB:BB:BA:6D:B9:63:B7:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CA2683CD51B11EFAC70DF5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:52:61:f7:d5:66:ba:29:2e:cf:a6:7f:a9:fe:ae:e1:95:3d:
17:9c:51:d1:d0:4e:5a:61:94:4c:5f:56:24:7c:bb:c0:df:a0:
b8:14:29:97:86:33:0a:95:79:af:35:d9:bd:be:50:5f:85:69:
a1:66:66:a0:88:cf:8b:6b:d8:04:c3:d2:8d:ac:06:ff:57:95:
9f:a5:88:ad:b5:8d:7f:00:38:1e:c4:3f:f2:84:60:18:21:0c:
d5:c5:f3:93:24:b5:c9:f7:c3:16:67:f6:bc:df:fd:d2:f7:cb:
f2:90:28:a4:3f:89:02:d6:18:42:66:1d:15:19:a9:f0:68:6b:
43:ba:65:ed:55:c2:1b:3d:d7:34:2f:af:8b:86:1d:8e:8b:e2:
7b:0a:18:40:cb:0a:e3:a4:87:3f:a0:d2:31:ff:3b:50:25:85:
68:0e:28:cf:49:93:55:4f:00:93:f3:92:4d:ff:ac:75:ff:0e:
0b:ed:ff:c9:8d:cc:4c:27:6a:cb:0c:2e:82:c1:65:fe:33:43:
06:40:1f:81:f2:d5:c1:e2:79:1a:bd:dc:08:94:9a:1e:a8:42:
b7:15:3a:d7:9e:b1:96:e3:5e:9d:55:19:15:54:15:b0:47:18:
32:7c:9f:d3:3b:65:ff:11:8a:db:38:9c:67:f1:01:dc:b4:1f:
45:c5:d2:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT1XMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE3MjEzNjUzWhcNMjUwMjIyMjEzNjUzWjAYMRYw
FAYDVQQDEw02NzhhY2Q3OC03YzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzXPA9EPocbPThhMeAEBTCxvV49eTON4p5dtY+E/d+0OmgSCVa5mQPfUs
NVRHXEWV/GpxOpwfKwhYXuI/GH8ZqetRJuF9IaiGU2wVx4JHbmYC8AOrZrStDHUt
PtRBbXDbKyW8LVxWR39dQdZyA66vcXd0YXdH+Fg6cvIr3fwCBi5zys+d5MmugSMI
wpwivCZ6fKWHUi2/BfsXaDxwyR63k6uN++RkH7oHFrJMXwhqdBVklU/uJhmc11xg
fC/5Vi7nrPRv74rScuNWtGHzo5nf6QqwlExiOApZBf+LulkOMdGJCRKltqtOi30O
Mj9LjGX5NiUANNvxdlxuyKA3Gi1pHwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIn5
wl5FUpCatkc2qru7um25Y7cCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQ0EyNjgzQ0Q1MUIxMUVGQUM3MERGNUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtcAMA0GCSqGSIb3DQEB
CwUAA4IBAQB6UmH31Wa6KS7Ppn+p/q7hlT0XnFHR0E5aYZRMX1YkfLvA36C4FCmX
hjMKlXmvNdm9vlBfhWmhZmagiM+La9gEw9KNrAb/V5WfpYittY1/ADgexD/yhGAY
IQzVxfOTJLXJ98MWZ/a83/3S98vykCikP4kC1hhCZh0VGanwaGtDumXtVcIbPdc0
L6+Lhh2Oi+J7ChhAywrjpIc/oNIx/ztQJYVoDijPSZNVTwCT85JN/6x1/w4L7f/J
jcxMJ2rLDC6CwWX+M0MGQB+B8tXB4nkavdwIlJoeqEK3FTrXnrGW416dVRkVVBWw
RxgyfJ/TO2X/EYrbOJxn8QHctB9FxdJH
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:15:09 2025 by rpki-client