Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E15D09EDA5211EF98976A63762E951A.roa
File: 4E15D09EDA5211EF98976A63762E951A.roa (raw, json)
Hash identifier: fZ4DLztC2Rru2BbEL+vRH8EwvPTdsWEHCTPWIcnjfsk=
Subject key identifier: C8:2E:E3:E3:B8:83:CC:AF:9F:9D:A6:74:C1:08:8A:4A:6E:41:38:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01471F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E15D09EDA5211EF98976A63762E951A.roa
Signing time: Fri 24 Jan 2025 12:54:10 +0000
ROA not before: Fri 24 Jan 2025 12:54:07 +0000
ROA not after: Sat 01 Mar 2025 12:54:07 +0000
asID: 62240
IP address blocks: 154.223.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83743 (0x1471f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:54:07 2025 GMT
Not After : Mar 1 12:54:07 2025 GMT
Subject: CN=67938d72-57ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:6a:4f:38:d4:fd:f3:fb:b1:33:ef:ff:7c:
d1:05:29:10:de:36:1c:5c:df:dc:47:ac:b2:b5:66:
45:cb:ac:f2:b2:b6:5d:74:99:88:33:b3:28:c1:a7:
e5:c5:b0:57:38:b2:4c:6b:18:f5:c7:ef:a4:24:ca:
b3:da:f9:21:c6:76:62:3b:98:92:bc:8a:b7:9f:53:
b2:4d:2e:f8:0c:58:73:56:16:cd:80:c1:1d:e9:dd:
da:f9:67:6e:f9:2b:d9:b0:89:79:84:f2:56:52:26:
54:28:06:99:d7:20:9a:df:9a:4e:f3:22:fe:3f:f2:
50:d2:ed:02:21:2b:ac:56:39:43:5e:1c:22:a7:f7:
f4:6f:7f:80:65:75:5d:08:a6:29:2e:5a:51:e8:ff:
cb:4e:c4:76:28:95:78:fe:ce:0c:bb:77:62:8a:32:
a2:72:76:e4:67:b9:03:f7:95:73:3d:47:0b:ba:7a:
26:8b:ec:bd:61:f4:12:c8:1f:3d:a4:f3:71:50:af:
75:84:c0:dc:9c:45:57:94:0d:c0:69:32:1d:17:f8:
95:3f:63:13:77:ca:9c:44:3f:fd:ab:0a:a0:88:c7:
d6:8e:20:dc:15:83:09:4e:bb:6d:71:23:a1:bf:af:
c2:47:7f:17:16:2d:be:78:81:46:25:f7:15:db:2d:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2E:E3:E3:B8:83:CC:AF:9F:9D:A6:74:C1:08:8A:4A:6E:41:38:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E15D09EDA5211EF98976A63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.212.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:db:36:70:23:f9:03:ba:f8:05:f5:4c:29:2e:9a:56:db:67:
80:7c:60:9d:bf:bb:e5:be:be:07:55:cb:97:c4:6b:b2:22:5d:
ea:95:7f:19:ff:cd:5c:24:9d:8c:f1:cc:41:96:12:82:1e:0d:
58:28:46:d9:01:05:ad:67:3c:f5:18:e5:3e:40:af:71:a7:08:
d2:e9:b4:e9:b8:c3:c9:09:49:58:1c:03:1b:a9:05:25:d0:51:
58:28:10:82:5f:be:13:a8:37:58:13:4a:3c:f8:31:e0:fe:41:
6a:3e:53:59:58:1d:20:f9:74:b2:80:26:88:b3:07:17:18:c8:
72:9f:b3:9d:cd:15:a8:0e:80:47:c0:a9:3d:af:f6:4c:ec:93:
c7:44:29:61:b2:4a:3c:20:ad:f3:d9:57:69:ee:95:d1:8b:a4:
a0:5c:09:2e:0e:2e:1f:52:72:c9:61:52:71:e0:17:01:08:31:
5e:2c:b9:0a:ff:99:e7:d3:8e:fb:44:bd:5e:04:63:29:87:c6:
e6:17:40:9d:5a:15:db:95:89:f5:b9:16:4f:b7:0a:c2:c0:55:
d3:03:1c:50:43:bb:a8:85:62:40:83:d7:89:a9:ac:e3:25:11:
5f:57:21:16:bc:cf:2b:3e:11:ad:2f:42:5e:f7:ae:d0:fb:d3:
b9:33:75:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUcfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTI1NDA3WhcNMjUwMzAxMTI1NDA3WjAYMRYw
FAYDVQQDEw02NzkzOGQ3Mi01N2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxpdqTzjU/fP7sTPv/3zRBSkQ3jYcXN/cR6yytWZFy6zysrZddJmIM7Mo
waflxbBXOLJMaxj1x++kJMqz2vkhxnZiO5iSvIq3n1OyTS74DFhzVhbNgMEd6d3a
+Wdu+SvZsIl5hPJWUiZUKAaZ1yCa35pO8yL+P/JQ0u0CISusVjlDXhwip/f0b3+A
ZXVdCKYpLlpR6P/LTsR2KJV4/s4Mu3diijKicnbkZ7kD95VzPUcLunomi+y9YfQS
yB89pPNxUK91hMDcnEVXlA3AaTIdF/iVP2MTd8qcRD/9qwqgiMfWjiDcFYMJTrtt
cSOhv6/CR38XFi2+eIFGJfcV2y1DVQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMgu
4+O4g8yvn52mdMEIikpuQTiyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RTE1RDA5RURBNTIxMUVGOTg5NzZBNjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt/UMA0GCSqGSIb3DQEB
CwUAA4IBAQDB2zZwI/kDuvgF9UwpLppW22eAfGCdv7vlvr4HVcuXxGuyIl3qlX8Z
/81cJJ2M8cxBlhKCHg1YKEbZAQWtZzz1GOU+QK9xpwjS6bTpuMPJCUlYHAMbqQUl
0FFYKBCCX74TqDdYE0o8+DHg/kFqPlNZWB0g+XSygCaIswcXGMhyn7OdzRWoDoBH
wKk9r/ZM7JPHRClhsko8IK3z2Vdp7pXRi6SgXAkuDi4fUnLJYVJx4BcBCDFeLLkK
/5nn0477RL1eBGMph8bmF0CdWhXblYn1uRZPtwrCwFXTAxxQQ7uohWJAg9eJqazj
JRFfVyEWvM8rPhGtL0Je967Q+9O5M3V+
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:40 2025 by rpki-client