Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/529B0C08CCC711EF84A78E43762E951A.roa
File: 529B0C08CCC711EF84A78E43762E951A.roa (raw, json)
Hash identifier: gDSKjlyL2RQsj8gnipaJwfxnpnHDjHFh4ilz+IBryro=
Subject key identifier: 2A:64:DB:AD:02:EE:D4:8C:ED:9A:34:5E:03:B8:28:A0:2A:65:BF:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013647
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/529B0C08CCC711EF84A78E43762E951A.roa
Signing time: Tue 07 Jan 2025 07:16:33 +0000
ROA not before: Tue 07 Jan 2025 07:16:29 +0000
ROA not after: Thu 13 Feb 2025 07:16:29 +0000
asID: 203020
IP address blocks: 154.209.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79431 (0x13647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 07:16:29 2025 GMT
Not After : Feb 13 07:16:29 2025 GMT
Subject: CN=677cd4d1-cd9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:af:f9:c7:15:8b:9c:d4:a4:7f:97:f2:0a:
a3:99:84:3c:66:1b:e6:79:2f:06:5a:0a:ff:a9:f1:
a7:7f:22:eb:8b:e1:7f:a3:9b:a7:09:cd:32:f9:7d:
e0:db:fc:51:29:13:7d:63:1b:86:6f:7f:82:20:ac:
b7:94:b4:16:24:91:e4:20:9e:5e:1d:b9:3f:f4:b9:
48:d0:38:54:24:c0:6b:62:57:da:3b:de:9d:cb:16:
d6:9a:90:59:b9:ec:f3:b5:e9:2a:b7:35:49:33:aa:
d7:c9:3d:a8:b3:e2:e0:bf:ae:52:92:57:b3:86:71:
b3:b7:95:fd:eb:72:3c:07:01:1f:dc:78:94:ff:4a:
44:29:de:c8:ba:74:50:75:fc:07:62:47:2f:62:de:
3b:23:f0:a9:bf:15:d9:8a:28:88:48:94:7e:c0:b1:
0b:18:03:02:a2:8d:91:9d:94:ed:c2:c9:76:cf:15:
27:3b:cb:72:19:5b:36:9b:11:43:ff:68:9f:65:bc:
3e:49:3a:a3:98:4b:21:76:7c:1f:32:59:4a:0b:82:
6e:2c:74:e2:17:9e:9e:97:0d:1e:4b:96:42:a3:be:
03:d1:89:88:dd:21:bc:6e:ce:9c:dc:6d:92:5a:27:
ba:b3:3f:90:11:0c:e2:df:1b:ea:56:51:e4:d6:0e:
35:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:64:DB:AD:02:EE:D4:8C:ED:9A:34:5E:03:B8:28:A0:2A:65:BF:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/529B0C08CCC711EF84A78E43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:e5:8e:a6:cd:87:60:45:6b:80:b7:3c:84:d6:9d:5b:3e:a0:
bf:07:06:34:8a:07:e7:c8:53:26:75:ae:43:22:4a:e4:f5:19:
c8:47:37:03:e9:fa:56:af:eb:7e:98:56:a2:5a:23:e3:26:11:
07:a5:dc:77:a0:f8:32:42:b4:55:c2:f9:31:6e:a1:56:d2:06:
26:3e:cc:a7:f2:e7:5e:83:f9:ae:8a:a4:65:ac:b5:78:09:06:
8c:a4:1a:44:d7:19:5c:1c:8f:9c:6e:76:df:da:39:4c:75:12:
8c:3d:04:5f:56:ff:b7:7f:22:3e:d8:2c:86:b8:a0:ae:f0:39:
ec:6a:86:8b:2c:e5:de:15:64:13:e6:be:fc:0b:45:1a:ec:75:
9c:7a:04:56:28:cd:da:72:a8:96:09:0d:68:26:7b:ca:22:6f:
22:83:bc:5b:56:36:23:01:08:3b:5a:19:8f:a0:bf:a5:5e:e9:
eb:93:ea:26:8e:21:0b:65:19:97:59:91:a5:f4:23:42:40:04:
df:7d:d2:d9:b8:ee:97:36:39:85:d0:be:88:1b:a4:db:3f:a1:
25:71:5d:c1:6c:0f:03:33:6d:46:3d:5f:cd:67:f5:b3:0b:91:
29:4b:91:ac:9d:39:54:e0:08:a7:2a:50:e9:a7:50:37:fe:d0:
81:19:d2:51
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATZHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA3MDcxNjI5WhcNMjUwMjEzMDcxNjI5WjAYMRYw
FAYDVQQDEw02NzdjZDRkMS1jZDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsQqv+ccVi5zUpH+X8gqjmYQ8ZhvmeS8GWgr/qfGnfyLri+F/o5unCc0y
+X3g2/xRKRN9YxuGb3+CIKy3lLQWJJHkIJ5eHbk/9LlI0DhUJMBrYlfaO96dyxbW
mpBZuezztekqtzVJM6rXyT2os+Lgv65SklezhnGzt5X963I8BwEf3HiU/0pEKd7I
unRQdfwHYkcvYt47I/CpvxXZiiiISJR+wLELGAMCoo2RnZTtwsl2zxUnO8tyGVs2
mxFD/2ifZbw+STqjmEshdnwfMllKC4JuLHTiF56elw0eS5ZCo74D0YmI3SG8bs6c
3G2SWie6sz+QEQzi3xvqVlHk1g41OwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCpk
260C7tSM7Zo0XgO4KKAqZb/pMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MjlCMEMwOENDQzcxMUVGODRBNzhFNDM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmtHgMA0GCSqGSIb3DQEB
CwUAA4IBAQCh5Y6mzYdgRWuAtzyE1p1bPqC/BwY0igfnyFMmda5DIkrk9RnIRzcD
6fpWr+t+mFaiWiPjJhEHpdx3oPgyQrRVwvkxbqFW0gYmPsyn8udeg/muiqRlrLV4
CQaMpBpE1xlcHI+cbnbf2jlMdRKMPQRfVv+3fyI+2CyGuKCu8DnsaoaLLOXeFWQT
5r78C0Ua7HWcegRWKM3acqiWCQ1oJnvKIm8ig7xbVjYjAQg7WhmPoL+lXunrk+om
jiELZRmXWZGl9CNCQATffdLZuO6XNjmF0L6IG6TbP6ElcV3BbA8DM21GPV/NZ/Wz
C5EpS5GsnTlU4AinKlDpp1A3/tCBGdJR
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:04:26 2025 by rpki-client