Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/532947F8DA4A11EFBCADEFAB762E951A.roa
File: 532947F8DA4A11EFBCADEFAB762E951A.roa (raw, json)
Hash identifier: grEBV2C9I58QjBZFipUG8H46SQUaMOrgIZ0vqIqGuFs=
Subject key identifier: F1:7F:A9:71:5F:EB:5E:88:18:ED:FB:85:4F:AC:74:BA:18:7D:8F:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01465F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/532947F8DA4A11EFBCADEFAB762E951A.roa
Signing time: Fri 24 Jan 2025 11:57:03 +0000
ROA not before: Fri 24 Jan 2025 11:56:53 +0000
ROA not after: Fri 28 Feb 2025 11:56:53 +0000
asID: 62240
IP address blocks: 154.195.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83551 (0x1465f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:56:53 2025 GMT
Not After : Feb 28 11:56:53 2025 GMT
Subject: CN=6793800f-8db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f0:15:ed:7e:1f:1e:1e:85:21:9b:c0:d3:c3:
ea:5a:ff:34:88:b4:87:11:b6:24:05:f0:44:66:4b:
6c:68:6e:29:f5:44:7f:be:da:cf:87:fe:6e:48:63:
e9:f7:f5:92:3c:3e:d8:bf:6f:f4:25:08:33:7d:a8:
63:47:b4:2c:82:05:93:c4:4b:e0:e6:68:02:e4:18:
c9:ed:a4:d2:31:53:ef:09:4b:87:f6:12:96:2a:6f:
d7:ed:6f:38:6b:7a:d7:04:f4:ac:2a:03:8f:5f:b8:
07:97:47:f9:74:23:65:2f:71:48:3d:91:05:a2:29:
40:d4:9f:d8:b7:38:30:49:38:dd:ea:44:f9:82:44:
4d:db:a2:6e:fb:3f:59:06:21:43:f8:c0:df:de:b8:
29:6a:6e:2a:45:84:8b:b1:4c:4d:cc:58:1e:93:a5:
75:b3:6c:ce:de:5b:7e:6c:2a:f4:47:d0:c7:4e:74:
1e:de:58:5a:74:6b:03:23:e5:09:78:db:4f:8e:ad:
b9:17:1d:0a:98:4e:d2:a6:5e:58:22:39:68:11:2a:
f7:dc:60:bd:41:51:93:cd:42:3f:b5:21:a5:a9:13:
6b:ea:17:21:32:c4:b6:0c:d7:23:43:69:be:0d:6a:
9e:26:93:86:a4:de:8a:28:47:23:2d:39:f9:3e:4e:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7F:A9:71:5F:EB:5E:88:18:ED:FB:85:4F:AC:74:BA:18:7D:8F:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/532947F8DA4A11EFBCADEFAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.115.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:ed:f7:9d:61:d2:e4:49:03:bf:75:5b:e7:fa:44:e5:01:a8:
e0:57:c2:6b:9a:40:b3:f1:8f:1c:9e:2f:ba:f1:bf:5c:12:b6:
c1:23:8e:cf:f7:df:89:8c:3a:cc:1c:da:9d:1d:f8:76:ac:32:
71:43:f8:96:a2:49:ca:cc:04:18:1a:3e:dc:23:53:81:0f:a3:
9c:20:db:cf:b6:d7:ad:d3:ba:7d:27:37:4a:2f:0c:87:94:91:
82:79:6f:36:f4:1f:97:2d:a3:6a:29:31:dd:ea:38:aa:2c:5a:
10:52:7a:21:ed:a6:b9:83:76:25:cd:eb:1e:15:66:9a:76:14:
20:59:af:7c:63:a2:95:66:68:96:76:2e:d4:bf:8d:3d:61:8e:
9f:5c:a5:79:64:75:49:45:a6:c3:17:a8:d3:8e:c2:71:80:40:
40:fa:87:61:54:23:09:b2:58:26:c1:7d:50:c2:7d:56:a8:ab:
93:15:25:76:3e:db:dc:6f:07:e6:5a:82:45:ce:2c:b8:a4:a7:
a1:f7:6e:a2:6a:5f:89:17:4e:57:29:f1:52:07:5f:d8:9a:f7:
b4:e0:36:27:fb:75:ce:79:f7:07:52:24:67:dd:d8:08:19:59:
29:0f:d0:86:b4:70:46:2d:97:2f:7a:2d:66:0c:67:2a:d4:d5:
40:a8:36:ae
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUZfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTE1NjUzWhcNMjUwMjI4MTE1NjUzWjAYMRYw
FAYDVQQDEw02NzkzODAwZi04ZGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0vAV7X4fHh6FIZvA08PqWv80iLSHEbYkBfBEZktsaG4p9UR/vtrPh/5u
SGPp9/WSPD7Yv2/0JQgzfahjR7QsggWTxEvg5mgC5BjJ7aTSMVPvCUuH9hKWKm/X
7W84a3rXBPSsKgOPX7gHl0f5dCNlL3FIPZEFoilA1J/YtzgwSTjd6kT5gkRN26Ju
+z9ZBiFD+MDf3rgpam4qRYSLsUxNzFgek6V1s2zO3lt+bCr0R9DHTnQe3lhadGsD
I+UJeNtPjq25Fx0KmE7Spl5YIjloESr33GC9QVGTzUI/tSGlqRNr6hchMsS2DNcj
Q2m+DWqeJpOGpN6KKEcjLTn5Pk6awQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPF/
qXFf616IGO37hU+sdLoYfY8bMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MzI5NDdGOERBNEExMUVGQkNBREVGQUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsNzMA0GCSqGSIb3DQEB
CwUAA4IBAQDN7fedYdLkSQO/dVvn+kTlAajgV8JrmkCz8Y8cni+68b9cErbBI47P
99+JjDrMHNqdHfh2rDJxQ/iWoknKzAQYGj7cI1OBD6OcINvPttet07p9JzdKLwyH
lJGCeW829B+XLaNqKTHd6jiqLFoQUnoh7aa5g3YlzeseFWaadhQgWa98Y6KVZmiW
di7Uv409YY6fXKV5ZHVJRabDF6jTjsJxgEBA+odhVCMJslgmwX1Qwn1WqKuTFSV2
PtvcbwfmWoJFziy4pKeh926ial+JF05XKfFSB1/Ymve04DYn+3XOefcHUiRn3dgI
GVkpD9CGtHBGLZcvei1mDGcq1NVAqDau
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:19 2025 by rpki-client