Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33AAC7F6DA3811EFBA3C85B2762E951A.roa
File: 33AAC7F6DA3811EFBA3C85B2762E951A.roa (raw, json)
Hash identifier: 26XskwGB+sPSOUa1vl6ZHJvHKdKU15OZ445l6I1hSzI=
Subject key identifier: D2:06:36:EE:FE:ED:AB:8B:9C:E3:C3:BF:1C:5E:1B:6A:56:12:40:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01451D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33AAC7F6DA3811EFBA3C85B2762E951A.roa
Signing time: Fri 24 Jan 2025 09:47:19 +0000
ROA not before: Fri 24 Jan 2025 09:47:15 +0000
ROA not after: Tue 11 Mar 2025 09:47:15 +0000
asID: 138915
IP address blocks: 154.95.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83229 (0x1451d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:47:15 2025 GMT
Not After : Mar 11 09:47:15 2025 GMT
Subject: CN=679361a7-237f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:2d:90:54:3d:e3:13:86:a1:72:90:7f:7c:
3a:77:05:fe:ec:3c:33:f2:3a:58:ee:f1:78:a2:9c:
51:65:78:e5:3b:ed:03:17:3f:26:3e:7a:be:e1:91:
cf:26:b8:73:42:25:e5:93:1c:34:13:0b:d0:c2:42:
6e:91:42:c9:df:90:11:eb:4c:9f:4d:1f:90:fd:b5:
e5:c9:12:c0:99:84:9e:0f:39:b2:2a:7f:6d:93:f5:
96:71:c5:3b:a6:d3:6b:2e:8e:79:8c:9e:ab:3c:93:
e0:ef:1d:8e:26:64:b5:9f:3c:49:18:f9:89:de:01:
2a:84:1b:b9:67:06:71:4b:e1:37:3c:94:e3:b1:08:
c8:e0:88:c9:da:b5:00:ca:52:8a:af:1f:5a:48:03:
fb:65:db:1f:ad:2b:6d:8d:2d:ba:53:39:4f:4f:ff:
26:fa:67:64:15:c1:26:5f:36:d2:64:74:ac:c0:96:
01:c5:a2:fb:bf:bd:03:33:85:16:2b:54:8c:82:54:
6c:62:b4:f7:e5:cb:e3:a3:e9:ad:e6:f6:47:81:d3:
07:22:c8:29:32:b3:77:3e:67:06:64:d0:93:f6:d4:
ef:5c:5b:f4:d3:fc:ff:dd:7b:71:16:6e:3a:c6:2b:
39:e5:f4:62:df:a4:3a:a2:de:38:71:31:aa:2b:37:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:06:36:EE:FE:ED:AB:8B:9C:E3:C3:BF:1C:5E:1B:6A:56:12:40:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33AAC7F6DA3811EFBA3C85B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.91.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e6:ee:e1:7a:d1:2d:18:c5:97:cc:c6:23:20:c4:fa:40:7f:
02:a4:b7:ac:79:8d:be:bb:90:8c:01:9b:e7:64:75:50:03:1d:
04:82:42:ef:31:0e:7c:f1:82:d1:59:08:58:ba:00:3c:9a:24:
47:3e:f8:d3:0b:0b:f8:23:92:2f:c1:b1:38:27:5d:47:8b:da:
60:ee:5b:a7:39:73:1e:7c:6d:8c:3e:0d:2d:5b:07:55:9c:4e:
85:c5:d4:de:a1:12:1f:4e:75:18:60:e5:9b:1c:c8:91:d9:16:
39:33:be:3c:f4:ad:ba:71:3a:15:ae:bd:f9:18:69:18:b4:6b:
0a:4d:7b:21:f3:2b:b5:53:1a:ef:53:ba:08:3d:93:92:8a:21:
54:69:86:71:f3:09:9f:95:a7:b2:94:80:1e:57:f9:2a:88:00:
1f:68:0e:82:fd:f8:0e:1b:60:1b:c5:01:ce:3f:62:bc:19:01:
89:f0:90:57:fd:19:49:0e:f2:92:97:ed:75:8b:ab:71:66:73:
7c:ef:d4:23:49:44:e4:8b:48:08:00:91:2c:6e:13:34:ff:4f:
2e:77:18:ee:48:57:73:74:b8:ff:a0:b0:a9:c5:eb:39:e4:a7:
6a:a2:10:80:bc:dd:de:a0:55:c9:38:b9:51:60:83:6b:50:ef:
43:68:27:f3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUUdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MDk0NzE1WhcNMjUwMzExMDk0NzE1WjAYMRYw
FAYDVQQDEw02NzkzNjFhNy0yMzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtw8tkFQ94xOGoXKQf3w6dwX+7Dwz8jpY7vF4opxRZXjlO+0DFz8mPnq+
4ZHPJrhzQiXlkxw0EwvQwkJukULJ35AR60yfTR+Q/bXlyRLAmYSeDzmyKn9tk/WW
ccU7ptNrLo55jJ6rPJPg7x2OJmS1nzxJGPmJ3gEqhBu5ZwZxS+E3PJTjsQjI4IjJ
2rUAylKKrx9aSAP7ZdsfrSttjS26UzlPT/8m+mdkFcEmXzbSZHSswJYBxaL7v70D
M4UWK1SMglRsYrT35cvjo+mt5vZHgdMHIsgpMrN3PmcGZNCT9tTvXFv00/z/3Xtx
Fm46xis55fRi36Q6ot44cTGqKzdRNwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNIG
Nu7+7auLnOPDvxxeG2pWEkBOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zM0FBQzdGNkRBMzgxMUVGQkEzQzg1QjI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml9bMA0GCSqGSIb3DQEB
CwUAA4IBAQBN5u7hetEtGMWXzMYjIMT6QH8CpLeseY2+u5CMAZvnZHVQAx0EgkLv
MQ588YLRWQhYugA8miRHPvjTCwv4I5IvwbE4J11Hi9pg7lunOXMefG2MPg0tWwdV
nE6FxdTeoRIfTnUYYOWbHMiR2RY5M7489K26cToVrr35GGkYtGsKTXsh8yu1Uxrv
U7oIPZOSiiFUaYZx8wmflaeylIAeV/kqiAAfaA6C/fgOG2AbxQHOP2K8GQGJ8JBX
/RlJDvKSl+11i6txZnN879QjSUTki0gIAJEsbhM0/08udxjuSFdzdLj/oLCpxes5
5KdqohCAvN3eoFXJOLlRYINrUO9DaCfz
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:46:10 2025 by rpki-client