Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/374D9A52DC9311EF890B0D9C762E951A.roa
File: 374D9A52DC9311EF890B0D9C762E951A.roa (raw, json)
Hash identifier: VZB0wS1DRWZRatSuQQPS76MDyplq9qzbv//lbMa8RW8=
Subject key identifier: 08:26:7B:2D:87:E7:D2:8E:04:F9:00:B9:6A:60:AA:22:5A:05:44:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B95
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/374D9A52DC9311EF890B0D9C762E951A.roa
Signing time: Mon 27 Jan 2025 09:43:52 +0000
ROA not before: Mon 27 Jan 2025 09:43:48 +0000
ROA not after: Sat 08 Feb 2025 09:43:48 +0000
asID: 5065
IP address blocks: 154.198.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84885 (0x14b95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 09:43:48 2025 GMT
Not After : Feb 8 09:43:48 2025 GMT
Subject: CN=67975558-a899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:6d:94:72:68:ac:a5:31:a9:01:9a:29:3b:
6e:91:41:d0:19:d0:4c:f9:d4:ca:19:c8:ac:a3:a7:
11:93:2a:bd:64:2b:8a:de:e5:32:0b:7c:c4:2d:5a:
81:a0:29:8d:d4:11:dc:de:b9:39:2d:cf:6d:31:a2:
3d:fc:c4:be:74:f3:b6:c9:4f:6f:0b:57:14:9b:39:
21:9e:50:9b:de:44:b9:52:82:9f:69:c0:0a:73:08:
3d:8c:21:c7:5b:00:6c:6f:ba:97:6d:8e:2e:9c:c3:
92:9a:d3:e9:55:9c:04:8b:5c:06:10:88:f3:8f:15:
3f:9f:87:f8:b8:1a:34:e2:21:95:bb:d3:91:8b:0c:
f3:4c:85:fe:44:39:39:1a:9f:1f:15:26:d6:d3:83:
97:7c:43:68:20:b4:46:46:b5:99:6e:9b:a2:da:ea:
0b:54:c0:a8:8d:97:aa:78:46:5f:1b:26:36:6e:5f:
1f:4e:f8:52:a7:51:4b:57:ea:05:45:03:25:1c:01:
a4:cc:18:e2:30:04:4b:d8:4d:46:17:cb:54:10:78:
f1:f2:62:9a:ed:6b:28:7b:7f:61:19:ab:22:91:06:
ef:7b:6a:09:d0:ca:18:f0:ff:24:21:23:cd:6d:66:
81:0c:6e:b2:0e:1a:b0:e5:9a:fb:ad:78:84:de:af:
d2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:26:7B:2D:87:E7:D2:8E:04:F9:00:B9:6A:60:AA:22:5A:05:44:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/374D9A52DC9311EF890B0D9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.22.0/24
Signature Algorithm: sha256WithRSAEncryption
59:81:2c:8f:6a:93:89:aa:ae:ab:f3:3a:9e:38:56:e1:ec:9d:
9e:cf:75:49:da:ed:3e:0b:10:45:14:f5:73:9f:10:a4:f3:47:
77:8f:79:4e:c5:4a:76:c8:f4:b0:e0:e4:c2:f0:a4:d0:14:dc:
cc:5b:71:25:c2:b8:2e:05:5a:ec:f4:a1:76:09:4d:14:17:f0:
cb:93:cd:a9:95:ff:48:e2:b2:7c:7a:17:e2:0b:f0:56:d6:6a:
ab:85:71:25:35:f5:75:34:f1:cf:e2:85:2f:e1:b1:96:2c:df:
9a:52:69:5c:33:4b:bc:06:71:ba:ae:cf:83:31:48:f6:fc:cb:
b1:5e:9f:c2:65:43:23:ac:da:4b:fd:2b:5c:c8:af:8a:83:a7:
15:ac:d7:97:58:c8:b3:66:41:a8:e3:1d:74:fd:10:86:ae:86:
59:2f:c0:7a:01:a8:a5:01:11:8a:2d:c7:27:50:a4:d4:ba:4c:
20:49:7f:1f:c0:fe:11:ee:d3:e9:d6:9c:7f:d6:07:38:b4:71:
88:b3:f8:45:aa:b7:bb:d4:21:c4:ea:29:29:b4:b6:28:ff:86:
e4:04:6c:86:ae:5a:bd:6e:9b:a1:a7:02:a0:aa:8f:b2:19:98:
2b:b8:f3:c8:be:0e:34:5e:05:cb:d4:5a:da:8d:7f:55:c8:24:
53:fb:0a:14
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUuVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI3MDk0MzQ4WhcNMjUwMjA4MDk0MzQ4WjAYMRYw
FAYDVQQDEw02Nzk3NTU1OC1hODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsdhtlHJorKUxqQGaKTtukUHQGdBM+dTKGciso6cRkyq9ZCuK3uUyC3zE
LVqBoCmN1BHc3rk5Lc9tMaI9/MS+dPO2yU9vC1cUmzkhnlCb3kS5UoKfacAKcwg9
jCHHWwBsb7qXbY4unMOSmtPpVZwEi1wGEIjzjxU/n4f4uBo04iGVu9ORiwzzTIX+
RDk5Gp8fFSbW04OXfENoILRGRrWZbpui2uoLVMCojZeqeEZfGyY2bl8fTvhSp1FL
V+oFRQMlHAGkzBjiMARL2E1GF8tUEHjx8mKa7Wsoe39hGasikQbve2oJ0MoY8P8k
ISPNbWaBDG6yDhqw5Zr7rXiE3q/SIQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAgm
ey2H59KOBPkAuWpgqiJaBUQSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNzREOUE1MkRDOTMxMUVGODkwQjBEOUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsYWMA0GCSqGSIb3DQEB
CwUAA4IBAQBZgSyPapOJqq6r8zqeOFbh7J2ez3VJ2u0+CxBFFPVznxCk80d3j3lO
xUp2yPSw4OTC8KTQFNzMW3ElwrguBVrs9KF2CU0UF/DLk82plf9I4rJ8ehfiC/BW
1mqrhXElNfV1NPHP4oUv4bGWLN+aUmlcM0u8BnG6rs+DMUj2/MuxXp/CZUMjrNpL
/StcyK+Kg6cVrNeXWMizZkGo4x10/RCGroZZL8B6AailARGKLccnUKTUukwgSX8f
wP4R7tPp1px/1gc4tHGIs/hFqre71CHE6ikptLYo/4bkBGyGrlq9bpuhpwKgqo+y
GZgruPPIvg40XgXL1FrajX9VyCRT+woU
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:04 2025 by rpki-client