Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F3D7B62DA3A11EFA4B9A3BE762E951A.roa
File: 2F3D7B62DA3A11EFA4B9A3BE762E951A.roa (raw, json)
Hash identifier: 8VFYZqKpVbr6GbVGmUL9278z+piBCHu5hqbqT3lNAS4=
Subject key identifier: DB:07:61:2D:31:5C:EE:75:5B:78:D4:66:AD:23:EA:6B:6D:19:73:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014543
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F3D7B62DA3A11EFA4B9A3BE762E951A.roa
Signing time: Fri 24 Jan 2025 10:01:31 +0000
ROA not before: Fri 24 Jan 2025 10:01:27 +0000
ROA not after: Wed 05 Mar 2025 10:01:27 +0000
asID: 202656
IP address blocks: 154.219.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83267 (0x14543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:01:27 2025 GMT
Not After : Mar 5 10:01:27 2025 GMT
Subject: CN=679364fb-52e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:60:b3:a8:80:03:61:7b:bf:69:03:78:ae:15:
88:2c:97:39:3d:5a:4d:7c:b7:de:e0:8f:04:ff:47:
7b:32:53:f9:18:15:66:a4:ea:78:0c:85:e8:47:dd:
b3:f5:05:bd:95:2c:ce:a4:98:bc:12:b9:dc:6a:d2:
58:1d:4f:f6:82:11:b0:fc:65:2c:11:57:d9:dd:99:
4e:4b:39:5f:ef:db:83:7d:6d:e3:bf:1f:5b:be:b0:
c0:1e:5c:0c:15:b6:08:d7:2f:ff:1b:15:78:6f:9a:
cc:53:92:33:e2:eb:b6:da:3a:11:fe:6d:1d:a2:8c:
4e:cc:3a:e4:e6:2f:c9:f2:80:47:29:0a:9a:50:a1:
58:a4:85:fb:7f:d5:91:77:b3:fd:ab:63:28:6e:c9:
2a:d6:c2:ea:0b:1c:63:b9:6f:0b:05:ff:59:bc:95:
70:55:b2:63:3b:49:10:b4:92:73:da:ae:d4:73:58:
89:ae:18:b7:4c:20:05:9c:71:f6:0a:ce:58:5d:b4:
ca:11:ca:1e:da:8d:9d:fe:6d:53:4b:7f:ee:fa:53:
52:e0:06:7c:0e:a7:47:1e:58:4c:d8:4a:af:ff:3d:
ac:25:6e:0b:35:08:ab:67:30:76:4c:d2:9c:ac:12:
fd:56:84:45:19:ad:08:64:ab:06:5d:84:69:d3:98:
e2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:07:61:2D:31:5C:EE:75:5B:78:D4:66:AD:23:EA:6B:6D:19:73:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F3D7B62DA3A11EFA4B9A3BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.236.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:62:f7:a7:0d:74:c8:8f:6b:81:69:d8:fc:94:69:fb:58:d7:
6e:94:6a:a8:36:be:ae:06:51:6c:c6:96:b1:43:fa:31:f6:4f:
b8:9b:48:49:58:11:f7:d5:2e:18:65:0b:7e:b0:70:67:97:1d:
5a:74:59:b4:60:43:ba:eb:0a:69:1b:37:19:b6:46:21:6c:f2:
d6:77:da:f0:2c:72:0b:f7:8e:52:88:0d:ac:b0:6d:ee:5c:dc:
50:7c:75:d3:17:aa:da:59:fb:01:a2:44:3a:29:3e:06:66:75:
0b:1f:64:40:b4:a2:f9:52:23:15:2d:76:c5:d7:9c:66:75:ef:
4e:71:b5:2e:94:8c:eb:e1:c2:13:bb:bd:bf:86:af:ba:36:8e:
00:29:79:00:78:a7:8b:e9:fb:eb:39:0c:af:2d:0e:57:f4:91:
e1:dd:e7:49:6b:a0:a7:27:0a:1b:62:bb:46:92:d7:2b:9e:72:
f4:b6:9d:f9:b6:0d:16:ba:d8:36:91:8f:cb:b5:b0:1b:d4:97:
14:32:72:e8:e3:74:ac:39:10:8f:e0:9b:71:02:72:85:c7:71:
c2:ff:93:de:24:ae:7d:c9:93:bb:14:cd:cd:d4:fb:75:c7:36:
91:6f:97:dc:77:f3:4b:c2:59:77:6c:cf:b4:43:78:25:1d:6c:
15:ec:02:38
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUVDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTAwMTI3WhcNMjUwMzA1MTAwMTI3WjAYMRYw
FAYDVQQDEw02NzkzNjRmYi01MmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA32CzqIADYXu/aQN4rhWILJc5PVpNfLfe4I8E/0d7MlP5GBVmpOp4DIXo
R92z9QW9lSzOpJi8ErncatJYHU/2ghGw/GUsEVfZ3ZlOSzlf79uDfW3jvx9bvrDA
HlwMFbYI1y//GxV4b5rMU5Iz4uu22joR/m0dooxOzDrk5i/J8oBHKQqaUKFYpIX7
f9WRd7P9q2Mobskq1sLqCxxjuW8LBf9ZvJVwVbJjO0kQtJJz2q7Uc1iJrhi3TCAF
nHH2Cs5YXbTKEcoe2o2d/m1TS3/u+lNS4AZ8DqdHHlhM2Eqv/z2sJW4LNQirZzB2
TNKcrBL9VoRFGa0IZKsGXYRp05ji7wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNsH
YS0xXO51W3jUZq0j6mttGXMkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRjNEN0I2MkRBM0ExMUVGQTRCOUEzQkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtvsMA0GCSqGSIb3DQEB
CwUAA4IBAQC9YvenDXTIj2uBadj8lGn7WNdulGqoNr6uBlFsxpaxQ/ox9k+4m0hJ
WBH31S4YZQt+sHBnlx1adFm0YEO66wppGzcZtkYhbPLWd9rwLHIL945SiA2ssG3u
XNxQfHXTF6raWfsBokQ6KT4GZnULH2RAtKL5UiMVLXbF15xmde9OcbUulIzr4cIT
u72/hq+6No4AKXkAeKeL6fvrOQyvLQ5X9JHh3edJa6CnJwobYrtGktcrnnL0tp35
tg0Wutg2kY/LtbAb1JcUMnLo43SsORCP4JtxAnKFx3HC/5PeJK59yZO7FM3N1Pt1
xzaRb5fcd/NLwll3bM+0Q3glHWwV7AI4
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:01:46 2025 by rpki-client