Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42528D60DA6B11EFA32AB48D762E951A.roa
File: 42528D60DA6B11EFA32AB48D762E951A.roa (raw, json)
Hash identifier: B009rdFns1HKN42DJGv3hh4hEEMzo71MQLWiWrtBzs8=
Subject key identifier: 85:F6:CE:CC:81:AA:E8:D9:C2:C5:EB:A1:DA:3A:94:38:BF:11:CA:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42528D60DA6B11EFA32AB48D762E951A.roa
Signing time: Fri 24 Jan 2025 15:52:48 +0000
ROA not before: Fri 24 Jan 2025 15:52:45 +0000
ROA not after: Mon 03 Mar 2025 15:52:45 +0000
asID: 203020
IP address blocks: 154.223.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84174 (0x148ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 15:52:45 2025 GMT
Not After : Mar 3 15:52:45 2025 GMT
Subject: CN=6793b750-c6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:46:0a:3e:f0:d1:ec:32:b6:7e:0a:41:81:
69:e3:8d:88:01:ad:33:dc:c9:de:a0:cd:f7:71:36:
51:04:88:5b:29:25:91:5a:05:15:11:b9:60:b0:3a:
06:da:7c:a5:cf:95:05:16:ae:dc:86:8f:dd:60:d2:
e2:05:c7:4e:52:a8:f5:eb:30:17:79:af:5d:7d:db:
96:05:02:2f:07:f9:d3:26:7d:1d:b0:5d:77:1b:d7:
25:16:a6:ed:10:5b:4f:8d:e1:38:86:9f:48:e6:2b:
6a:d4:fc:7a:fb:3c:f7:6a:6a:a7:13:ac:e4:20:65:
d5:77:b0:d2:0b:7b:39:51:7b:f0:8e:04:b6:ca:61:
0e:69:d9:20:fe:cc:52:a4:9a:f9:29:60:f2:ed:7f:
3d:86:87:20:6a:a8:2a:63:ac:8c:2b:f5:bc:59:6f:
96:39:fc:00:ec:62:26:c1:80:45:04:23:c3:f0:61:
3f:e8:24:c2:0b:fb:55:7d:b8:9b:02:ad:58:7e:d8:
9b:6d:ce:01:0c:aa:e0:ea:be:db:38:1c:0a:e8:d1:
da:ed:52:47:81:90:be:c7:c1:c3:89:a4:0e:a1:b1:
41:30:73:71:7a:96:f8:2c:ff:fb:84:75:22:0a:bb:
3b:f5:24:db:bc:3e:da:db:2d:c7:73:b4:57:79:d9:
eb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F6:CE:CC:81:AA:E8:D9:C2:C5:EB:A1:DA:3A:94:38:BF:11:CA:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42528D60DA6B11EFA32AB48D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.160.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:96:46:d9:ef:e3:61:4c:4c:4b:6c:3f:1c:49:8d:9b:92:30:
83:98:37:02:da:d3:fb:de:75:08:bc:4f:ab:eb:12:9b:dd:80:
ec:02:23:fa:5b:9f:7f:b7:04:ea:56:4b:6f:2f:4a:38:65:14:
33:8e:4f:84:2c:dc:fc:d4:99:e0:db:da:9f:35:46:de:c8:ad:
a1:88:7a:46:57:6f:07:79:e8:f3:ba:8b:c4:0d:43:3e:58:f4:
4a:5e:6d:f7:87:9d:92:b3:de:0e:d7:e2:4a:d0:93:82:87:a0:
b8:65:84:f7:7d:9f:dd:73:e7:70:f0:d4:09:14:fb:73:3c:b0:
cf:d6:91:b7:b0:42:56:98:1f:c3:29:fd:74:94:c4:d3:55:aa:
e3:c9:6d:e6:68:45:76:a7:28:68:95:be:48:95:56:e0:f8:21:
1f:ad:71:06:57:48:81:d5:43:34:52:7a:f7:d0:f2:e8:e6:72:
60:4a:99:2d:1b:ab:0f:c8:76:6a:45:35:e5:c0:f2:6b:f7:82:
44:5b:7f:c2:02:04:ef:97:01:66:5e:3a:a5:5b:fb:77:96:60:
a1:81:2e:28:4b:9a:34:a2:e1:84:71:b9:11:13:45:88:65:2d:
2a:79:75:00:45:9d:6a:46:30:ce:c0:e4:9f:9e:3f:ff:53:5a:
a2:fb:32:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUjOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTU1MjQ1WhcNMjUwMzAzMTU1MjQ1WjAYMRYw
FAYDVQQDEw02NzkzYjc1MC1jNmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArNBGCj7w0ewytn4KQYFp442IAa0z3MneoM33cTZRBIhbKSWRWgUVEblg
sDoG2nylz5UFFq7cho/dYNLiBcdOUqj16zAXea9dfduWBQIvB/nTJn0dsF13G9cl
FqbtEFtPjeE4hp9I5itq1Px6+zz3amqnE6zkIGXVd7DSC3s5UXvwjgS2ymEOadkg
/sxSpJr5KWDy7X89hocgaqgqY6yMK/W8WW+WOfwA7GImwYBFBCPD8GE/6CTCC/tV
fbibAq1Yftibbc4BDKrg6r7bOBwK6NHa7VJHgZC+x8HDiaQOobFBMHNxepb4LP/7
hHUiCrs79STbvD7a2y3Hc7RXednrdQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIX2
zsyBqujZwsXrodo6lDi/EcpHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MjUyOEQ2MERBNkIxMUVGQTMyQUI0OEQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt+gMA0GCSqGSIb3DQEB
CwUAA4IBAQDHlkbZ7+NhTExLbD8cSY2bkjCDmDcC2tP73nUIvE+r6xKb3YDsAiP6
W59/twTqVktvL0o4ZRQzjk+ELNz81Jng29qfNUbeyK2hiHpGV28HeejzuovEDUM+
WPRKXm33h52Ss94O1+JK0JOCh6C4ZYT3fZ/dc+dw8NQJFPtzPLDP1pG3sEJWmB/D
Kf10lMTTVarjyW3maEV2pyholb5IlVbg+CEfrXEGV0iB1UM0Unr30PLo5nJgSpkt
G6sPyHZqRTXlwPJr94JEW3/CAgTvlwFmXjqlW/t3lmChgS4oS5o0ouGEcbkRE0WI
ZS0qeXUARZ1qRjDOwOSfnj//U1qi+zJl
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:28:45 2025 by rpki-client