Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38542796DFF811EF94DB407C762E951A.roa
File: 38542796DFF811EF94DB407C762E951A.roa (raw, json)
Hash identifier: uh+nGoQd47FHk8UTm8GHFCoPRa6fEDE2w90F5HEUGk8=
Subject key identifier: D2:DD:DD:E1:83:06:E0:BD:A5:0C:A6:01:60:6E:F9:C6:AE:AF:1B:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E2D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38542796DFF811EF94DB407C762E951A.roa
Signing time: Fri 31 Jan 2025 17:24:26 +0000
ROA not before: Fri 31 Jan 2025 17:24:23 +0000
ROA not after: Mon 03 Mar 2025 17:24:23 +0000
asID: 54600
IP address blocks: 154.202.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85549 (0x14e2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 17:24:23 2025 GMT
Not After : Mar 3 17:24:23 2025 GMT
Subject: CN=679d074a-23ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:62:27:21:a4:76:12:cb:bb:74:b8:02:a6:4d:
3c:e5:de:60:fd:7c:a2:f9:a7:11:58:6f:1b:57:e6:
b6:17:6f:19:81:38:0e:56:0a:66:96:9b:c6:fc:f4:
25:f1:e5:a6:4d:71:1e:52:c0:76:d9:75:00:26:8d:
be:6c:74:e8:0a:ef:db:20:f4:e4:5b:1b:3d:23:92:
2c:5f:e0:61:8b:b6:94:8d:00:de:54:f9:f2:8a:15:
7b:64:4e:47:43:67:d8:64:78:f0:fe:8e:84:49:58:
7b:2c:8a:0d:de:b4:89:70:98:65:64:a3:44:71:05:
e8:a5:fd:e0:52:2a:27:10:54:53:79:3c:09:a0:bb:
1d:4e:8f:82:e3:9a:43:04:06:28:f0:a7:52:ec:79:
68:cd:ec:db:3a:5c:ef:1c:84:4d:67:7a:70:79:11:
39:9b:ae:00:81:fe:fe:30:64:8a:53:87:4b:ba:0f:
f5:58:bf:e7:ff:fa:50:9c:98:6d:fa:01:0a:78:ab:
74:0e:21:50:33:0a:d2:83:d5:17:e5:f8:ca:24:67:
98:29:f8:14:17:ab:29:14:b0:e8:c7:52:46:49:03:
ef:af:07:63:57:b2:84:67:f0:e6:a3:3e:08:4e:36:
d7:da:cf:80:80:c7:23:de:75:01:d5:d5:44:ef:ca:
ed:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DD:DD:E1:83:06:E0:BD:A5:0C:A6:01:60:6E:F9:C6:AE:AF:1B:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38542796DFF811EF94DB407C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.144.0/20
Signature Algorithm: sha256WithRSAEncryption
7d:27:b4:e2:b0:fb:bb:a7:25:a0:20:be:de:74:d1:ec:22:31:
6f:62:bb:6b:ab:04:4a:06:3d:35:73:14:62:a2:f3:b7:3a:4d:
44:9b:0d:08:8f:af:99:7e:5f:7b:24:a1:d5:27:4b:c6:48:e2:
f9:f6:01:5f:1d:fe:64:4e:20:cd:87:99:01:1a:63:c6:eb:8d:
d1:e5:97:26:a7:bb:23:f1:f7:d3:da:02:49:4a:f9:09:61:4f:
1f:0a:88:61:3c:b8:cb:03:ee:bf:74:58:83:3a:85:e4:cb:2f:
00:86:ed:fd:18:a3:f9:30:d5:33:0f:6c:a4:cb:c9:2b:2b:ef:
6a:68:bb:8d:e6:ed:90:07:60:37:5f:95:80:5c:c3:c2:5e:e7:
67:08:17:02:59:ab:09:bb:73:36:68:ec:f7:d3:9c:83:5f:f5:
d2:cf:fb:fc:ce:07:5e:64:44:0b:6b:6c:6f:de:9e:e0:eb:2c:
c0:bc:c8:be:c5:16:71:e6:7d:44:b3:2f:c5:cc:87:f8:d6:63:
8d:16:a8:36:07:0c:7c:b7:f7:60:cb:52:f9:6f:d5:e4:4d:41:
19:95:93:93:61:f1:3c:55:50:eb:5d:8f:e8:66:ca:ba:b3:6d:
86:ec:a3:54:fd:d9:a9:91:cf:8b:e9:8a:f7:85:ff:15:92:c1:
5c:4e:d2:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU4tMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTMxMTcyNDIzWhcNMjUwMzAzMTcyNDIzWjAYMRYw
FAYDVQQDEw02NzlkMDc0YS0yM2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA52InIaR2Esu7dLgCpk085d5g/Xyi+acRWG8bV+a2F28ZgTgOVgpmlpvG
/PQl8eWmTXEeUsB22XUAJo2+bHToCu/bIPTkWxs9I5IsX+Bhi7aUjQDeVPnyihV7
ZE5HQ2fYZHjw/o6ESVh7LIoN3rSJcJhlZKNEcQXopf3gUionEFRTeTwJoLsdTo+C
45pDBAYo8KdS7HlozezbOlzvHIRNZ3pweRE5m64Agf7+MGSKU4dLug/1WL/n//pQ
nJht+gEKeKt0DiFQMwrSg9UX5fjKJGeYKfgUF6spFLDox1JGSQPvrwdjV7KEZ/Dm
oz4ITjbX2s+AgMcj3nUB1dVE78rtOQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNLd
3eGDBuC9pQymAWBu+caurxtcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zODU0Mjc5NkRGRjgxMUVGOTREQjQwN0M3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmsqQMA0GCSqGSIb3DQEB
CwUAA4IBAQB9J7TisPu7pyWgIL7edNHsIjFvYrtrqwRKBj01cxRiovO3Ok1Emw0I
j6+Zfl97JKHVJ0vGSOL59gFfHf5kTiDNh5kBGmPG643R5Zcmp7sj8ffT2gJJSvkJ
YU8fCohhPLjLA+6/dFiDOoXkyy8Ahu39GKP5MNUzD2yky8krK+9qaLuN5u2QB2A3
X5WAXMPCXudnCBcCWasJu3M2aOz305yDX/XSz/v8zgdeZEQLa2xv3p7g6yzAvMi+
xRZx5n1Esy/FzIf41mONFqg2Bwx8t/dgy1L5b9XkTUEZlZOTYfE8VVDrXY/oZsq6
s22G7KNU/dmpkc+L6Yr3hf8VksFcTtLJ
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:04:33 2025 by rpki-client