Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B185750DB2E11EFAD3538B3762E951A.roa
File: 3B185750DB2E11EFAD3538B3762E951A.roa (raw, json)
Hash identifier: epTgGcCc563nEfVS/+H8ylInf+mU12jIaA6rhKL6d4A=
Subject key identifier: C4:E8:92:8B:3F:AA:87:A5:B0:DF:8C:95:DA:EF:B7:88:28:8F:08:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B185750DB2E11EFAD3538B3762E951A.roa
Signing time: Sat 25 Jan 2025 15:08:28 +0000
ROA not before: Sat 25 Jan 2025 15:08:22 +0000
ROA not after: Fri 07 Mar 2025 15:08:22 +0000
asID: 138915
IP address blocks: 154.223.58.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84462 (0x149ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 15:08:22 2025 GMT
Not After : Mar 7 15:08:22 2025 GMT
Subject: CN=6794fe6c-33a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:ec:9f:31:51:50:0c:6b:e1:3c:69:4d:0b:
17:d5:31:b4:d6:94:26:8a:8e:38:b0:67:24:7d:31:
c4:14:4c:8d:cc:19:03:b5:20:73:ac:d6:53:52:ff:
ec:90:ee:fb:a8:4a:f7:d4:47:11:85:c0:06:e2:e0:
92:1a:6a:11:a8:1f:06:32:9c:83:aa:d9:e7:1e:d5:
f5:65:8a:f0:40:26:d5:1c:b4:f2:50:3a:56:dd:c8:
8b:b8:10:14:0f:ed:04:47:c1:f7:57:68:66:9e:d5:
82:4d:dc:cc:aa:bf:74:1e:96:97:87:fe:45:e8:d9:
1f:62:90:1f:4b:1c:e0:d2:5c:3e:cf:4b:e8:2a:9a:
a2:82:51:c8:ed:3e:34:41:7d:a9:c9:0c:32:d3:aa:
95:ce:69:bc:40:d1:2a:25:38:cd:46:9a:dc:29:5e:
c0:7d:c2:a3:0f:8e:ea:24:2c:8d:7a:ea:e5:d0:3e:
77:d9:ed:cf:5b:b1:ff:35:18:a9:37:b1:4c:f5:9c:
56:cc:a5:18:ea:e0:a1:fa:5f:e5:f3:c0:28:26:4f:
67:33:e8:cb:a7:0d:11:63:3f:fd:77:b4:ef:1a:34:
16:aa:8b:49:9e:c4:f4:dc:0c:67:a9:94:0f:b7:52:
c3:d4:e6:85:3c:6b:58:1e:ed:16:d3:b3:3a:89:3b:
d5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E8:92:8B:3F:AA:87:A5:B0:DF:8C:95:DA:EF:B7:88:28:8F:08:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B185750DB2E11EFAD3538B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.58.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:c5:7c:ad:f5:6d:97:62:ff:36:3e:42:b0:8f:1f:60:e4:ff:
ab:ba:3e:69:b7:c5:3b:75:32:ad:1c:d1:38:f0:2d:8a:40:07:
fe:6d:5b:9d:87:2f:74:50:c0:90:f4:12:db:93:3b:37:9f:f4:
37:bf:5b:ba:a6:22:4a:39:40:b8:9d:a7:d4:8a:da:27:3c:f2:
1e:9c:92:26:dc:ed:10:c8:9b:89:03:d9:7e:1c:fc:d6:f4:48:
90:0d:50:c7:b8:e7:06:57:71:cd:e3:a1:29:9c:67:db:b7:16:
4c:a1:dd:98:19:40:be:8c:5b:21:1e:9d:e4:0d:1e:cd:c6:38:
18:5f:d2:04:03:13:63:af:ba:41:64:a4:eb:db:2e:75:65:e5:
84:b8:eb:19:84:4c:cb:ff:75:2b:3a:ed:17:d0:74:8b:87:ec:
9d:fc:cf:d6:4c:2e:ec:a5:12:ee:4b:6f:fd:3f:7d:d0:66:ff:
58:fe:67:9d:e0:c6:63:77:2a:ed:24:c7:ca:ec:f6:dd:18:40:
d9:30:48:3d:d3:2d:65:22:8d:dc:89:d8:a0:08:9a:00:53:15:
9d:19:84:69:98:6d:aa:ab:66:3c:da:70:ff:26:f4:d9:6c:6f:
9e:b3:37:0f:fa:6e:90:21:a4:17:7f:1a:fa:8c:9c:ea:bc:dd:
48:57:52:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUnuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI1MTUwODIyWhcNMjUwMzA3MTUwODIyWjAYMRYw
FAYDVQQDEw02Nzk0ZmU2Yy0zM2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqo/snzFRUAxr4TxpTQsX1TG01pQmio44sGckfTHEFEyNzBkDtSBzrNZT
Uv/skO77qEr31EcRhcAG4uCSGmoRqB8GMpyDqtnnHtX1ZYrwQCbVHLTyUDpW3ciL
uBAUD+0ER8H3V2hmntWCTdzMqr90HpaXh/5F6NkfYpAfSxzg0lw+z0voKpqiglHI
7T40QX2pyQwy06qVzmm8QNEqJTjNRprcKV7AfcKjD47qJCyNeurl0D532e3PW7H/
NRipN7FM9ZxWzKUY6uCh+l/l88AoJk9nM+jLpw0RYz/9d7TvGjQWqotJnsT03Axn
qZQPt1LD1OaFPGtYHu0W07M6iTvVZwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMTo
kos/qoelsN+Mldrvt4gojwjzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQjE4NTc1MERCMkUxMUVGQUQzNTM4QjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt86MA0GCSqGSIb3DQEB
CwUAA4IBAQAaxXyt9W2XYv82PkKwjx9g5P+ruj5pt8U7dTKtHNE48C2KQAf+bVud
hy90UMCQ9BLbkzs3n/Q3v1u6piJKOUC4nafUitonPPIenJIm3O0QyJuJA9l+HPzW
9EiQDVDHuOcGV3HN46EpnGfbtxZMod2YGUC+jFshHp3kDR7NxjgYX9IEAxNjr7pB
ZKTr2y51ZeWEuOsZhEzL/3UrOu0X0HSLh+yd/M/WTC7spRLuS2/9P33QZv9Y/med
4MZjdyrtJMfK7PbdGEDZMEg90y1lIo3cidigCJoAUxWdGYRpmG2qq2Y82nD/JvTZ
bG+eszcP+m6QIaQXfxr6jJzqvN1IV1JU
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:07:30 2025 by rpki-client