Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/547CE704D96911EFBF8534BE762E951A.roa
File: 547CE704D96911EFBF8534BE762E951A.roa (raw, json)
Hash identifier: Tpf8nhNgYZ3DJeHhcSA0yqdoQBIFuiLG+kR6307fZok=
Subject key identifier: 12:63:90:0E:D4:12:8D:8D:A8:89:B3:BA:BD:C3:C2:69:32:E3:87:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/547CE704D96911EFBF8534BE762E951A.roa
Signing time: Thu 23 Jan 2025 09:06:28 +0000
ROA not before: Thu 23 Jan 2025 09:06:25 +0000
ROA not after: Fri 28 Feb 2025 09:06:25 +0000
asID: 62240
IP address blocks: 154.194.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82123 (0x140cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:06:25 2025 GMT
Not After : Feb 28 09:06:25 2025 GMT
Subject: CN=67920694-8135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:0f:00:a7:9e:7b:d5:50:28:d9:6c:ff:35:
ac:00:77:ae:26:bc:6c:b8:12:61:87:f0:ca:61:32:
58:7d:35:f8:7c:f0:62:78:7b:35:53:60:36:a0:5c:
6b:56:ab:c5:17:6a:dc:29:07:a9:b7:0b:22:9a:57:
f6:ed:85:e9:15:7e:42:d7:56:54:f4:64:f7:22:d1:
ea:1a:9b:99:3c:03:93:63:9a:5e:f0:12:4a:0a:9d:
d0:df:23:a7:32:45:97:20:9d:ee:2b:4c:a0:ce:26:
3a:1c:c8:f3:ab:7d:8f:4b:e0:8d:17:5a:ad:cf:9f:
75:5d:5b:17:eb:e4:42:b1:e0:b0:70:c0:53:aa:82:
7a:65:fb:64:46:79:71:56:a1:ab:be:42:8c:0a:b0:
05:2e:8f:12:29:e5:ae:20:6a:47:d3:98:97:db:a2:
90:c5:01:43:cc:16:3d:71:32:59:f0:5a:01:4d:45:
4e:70:53:5f:30:e8:36:4c:eb:17:9f:7e:69:a7:1e:
a8:47:4e:d0:21:ba:e9:5e:05:1f:78:7b:ca:53:26:
80:46:ac:b8:f7:63:98:e0:b2:68:d5:47:32:63:55:
9f:09:50:62:bd:24:00:1d:4d:58:4d:46:84:0f:c4:
18:8b:fb:74:4b:38:bf:9c:a1:e7:88:ee:40:33:0e:
8d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:63:90:0E:D4:12:8D:8D:A8:89:B3:BA:BD:C3:C2:69:32:E3:87:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/547CE704D96911EFBF8534BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.98.0/24
Signature Algorithm: sha256WithRSAEncryption
87:4e:51:3c:0a:07:84:ad:1c:d2:23:74:71:13:e1:d2:b4:c6:
09:05:d3:3d:64:11:6b:f3:d4:f6:dd:57:ad:46:af:5f:6a:28:
56:8e:e3:27:22:9e:ff:b0:9f:ee:33:25:97:47:e8:8b:8f:34:
dc:5a:51:53:69:dd:21:9a:44:0e:b7:59:50:f0:fd:0c:17:f1:
98:a0:76:1c:63:49:2f:bc:35:7f:fc:5b:19:d0:3d:65:5f:77:
b4:e3:d6:cd:35:7f:c3:ab:a4:4e:aa:2d:d5:e3:69:e3:d1:d7:
f3:88:ed:96:ce:b3:32:17:50:24:57:ce:f7:8b:5f:91:b8:c2:
dd:7f:16:8a:35:83:55:86:89:2b:f1:10:f2:ed:62:1e:ec:60:
2f:15:17:3b:b6:09:d6:1e:6b:9b:ca:e0:d2:d5:30:9f:2b:0d:
34:42:d0:02:5d:73:6e:ed:34:67:d2:43:6c:32:43:fc:f8:63:
f7:16:8d:94:26:bd:2d:49:e7:98:9b:6f:1f:e9:7d:53:c0:f5:
7b:6b:2b:77:40:e9:a5:94:66:ab:b2:cf:cb:31:f3:a3:ca:69:
34:0c:14:a3:92:13:ab:6a:72:26:60:41:ce:8a:97:f2:d8:b0:
09:0a:d8:f5:4f:8f:5b:94:b0:14:27:13:16:91:75:d7:74:84:
3a:03:ad:d2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUDLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMDkwNjI1WhcNMjUwMjI4MDkwNjI1WjAYMRYw
FAYDVQQDEw02NzkyMDY5NC04MTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzg4PAKeee9VQKNls/zWsAHeuJrxsuBJhh/DKYTJYfTX4fPBieHs1U2A2
oFxrVqvFF2rcKQeptwsimlf27YXpFX5C11ZU9GT3ItHqGpuZPAOTY5pe8BJKCp3Q
3yOnMkWXIJ3uK0ygziY6HMjzq32PS+CNF1qtz591XVsX6+RCseCwcMBTqoJ6Zftk
RnlxVqGrvkKMCrAFLo8SKeWuIGpH05iX26KQxQFDzBY9cTJZ8FoBTUVOcFNfMOg2
TOsXn35ppx6oR07QIbrpXgUfeHvKUyaARqy492OY4LJo1UcyY1WfCVBivSQAHU1Y
TUaED8QYi/t0Szi/nKHniO5AMw6NpQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBJj
kA7UEo2NqImzur3Dwmky44e2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NDdDRTcwNEQ5NjkxMUVGQkY4NTM0QkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJiMA0GCSqGSIb3DQEB
CwUAA4IBAQCHTlE8CgeErRzSI3RxE+HStMYJBdM9ZBFr89T23VetRq9faihWjuMn
Ip7/sJ/uMyWXR+iLjzTcWlFTad0hmkQOt1lQ8P0MF/GYoHYcY0kvvDV//FsZ0D1l
X3e049bNNX/Dq6ROqi3V42nj0dfziO2WzrMyF1AkV873i1+RuMLdfxaKNYNVhokr
8RDy7WIe7GAvFRc7tgnWHmubyuDS1TCfKw00QtACXXNu7TRn0kNsMkP8+GP3Fo2U
Jr0tSeeYm28f6X1TwPV7ayt3QOmllGarss/LMfOjymk0DBSjkhOranImYEHOipfy
2LAJCtj1T49blLAUJxMWkXXXdIQ6A63S
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:15 2025 by rpki-client