Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5763FA24BEA311EFA76C4783762E951A.roa
File: 5763FA24BEA311EFA76C4783762E951A.roa (raw, json)
Hash identifier: kStjIphcOydB6DbtUC2CADGJqe7r9mNuflISp+zf9CE=
Subject key identifier: A3:27:03:A3:F5:B5:92:2A:C7:8B:DE:F7:55:F3:9A:A7:47:AE:9B:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C4C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5763FA24BEA311EFA76C4783762E951A.roa
Signing time: Fri 20 Dec 2024 07:23:43 +0000
ROA not before: Fri 20 Dec 2024 07:23:39 +0000
ROA not after: Thu 20 Mar 2025 07:23:39 +0000
asID: 47890
IP address blocks: 154.214.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72780 (0x11c4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 07:23:39 2024 GMT
Not After : Mar 20 07:23:39 2025 GMT
Subject: CN=67651b7f-437a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:cb:e3:8c:0e:b6:1a:41:fc:8e:ff:6e:e9:
8c:82:cd:89:78:e6:06:33:0d:bf:a6:ec:c5:75:10:
e2:31:0e:c0:fa:87:91:12:7f:ba:7f:0c:22:87:16:
b2:69:9d:fb:e2:2d:d9:d6:00:a1:d8:30:ea:85:19:
d7:cc:28:9d:ab:91:ad:2d:b7:d0:45:8b:f3:e6:ab:
57:8b:92:42:72:03:f4:0d:c7:2c:b0:24:97:05:fd:
e6:5c:29:e0:35:ef:5c:76:ac:dc:a7:ca:11:01:7d:
74:10:f1:f5:f5:42:06:2a:8d:bf:17:27:d5:f3:e9:
4f:55:62:ff:28:88:e9:75:50:30:cf:72:e3:b0:35:
5d:13:9f:55:1c:1f:fb:b5:17:80:a7:9c:39:0c:ed:
18:cd:2c:14:1e:de:60:f4:d8:fd:09:4f:a2:9e:e3:
af:56:3a:3a:32:10:b7:ce:62:df:0b:60:ab:8a:43:
ee:4a:fe:7d:6c:8d:c0:a0:cb:d2:7c:2d:62:57:6b:
3f:db:c9:6c:3d:c5:90:cd:c9:e1:ef:2a:2e:6c:43:
1e:23:4a:43:23:20:19:dc:83:05:d7:9f:da:17:8c:
9f:f6:2a:df:25:3b:f7:21:cf:bd:22:26:1b:a5:42:
12:b7:2b:27:a3:66:79:94:3a:22:fc:cd:b4:0d:50:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:27:03:A3:F5:B5:92:2A:C7:8B:DE:F7:55:F3:9A:A7:47:AE:9B:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5763FA24BEA311EFA76C4783762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.238.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:e3:d6:5e:a4:f0:75:c0:c4:38:5e:bc:3c:f8:6f:c5:0d:c9:
cf:19:03:4c:61:e9:a9:63:eb:b6:86:78:14:52:ab:2a:a3:29:
16:ee:cb:54:43:1a:fb:5e:2b:2d:16:2a:e7:72:45:2f:38:bb:
82:de:df:0e:72:4c:d4:b8:c4:ab:c1:f1:78:5f:02:a4:68:ec:
50:04:0a:cb:98:cd:10:13:6d:91:68:cf:a8:d4:d8:74:b2:f3:
b9:0b:9b:1d:6f:69:b6:2c:3c:a4:c2:c8:9e:99:f1:bd:d9:cf:
e3:5d:2f:7a:f6:b4:d0:cd:18:81:73:e7:89:0f:45:f7:60:f0:
1e:8f:0f:52:67:2a:65:26:5a:08:9b:19:13:5c:a6:81:03:eb:
d6:2a:f3:f0:90:4f:ba:6e:a6:8d:81:d9:6c:cb:2d:c1:7f:f7:
85:a3:09:de:ff:a8:02:37:9f:f6:5d:37:2c:4c:95:0f:81:94:
e3:53:fa:7b:b5:3a:f3:87:76:8a:1e:fc:d9:3a:b1:ea:7e:8e:
db:bd:4a:91:a1:cd:24:6c:b4:b4:ff:4d:d6:09:b3:ee:8c:04:
a9:8e:5f:62:86:50:ad:0b:3c:8f:6f:ba:b4:c0:93:a4:c9:5c:
f2:35:4f:d3:18:a2:ca:74:e8:54:ea:c8:b9:f1:5e:63:bf:cb:
2d:8c:bb:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARxMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIwMDcyMzM5WhcNMjUwMzIwMDcyMzM5WjAYMRYw
FAYDVQQDEw02NzY1MWI3Zi00MzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1MTL44wOthpB/I7/bumMgs2JeOYGMw2/puzFdRDiMQ7A+oeREn+6fwwi
hxayaZ374i3Z1gCh2DDqhRnXzCidq5GtLbfQRYvz5qtXi5JCcgP0DccssCSXBf3m
XCngNe9cdqzcp8oRAX10EPH19UIGKo2/FyfV8+lPVWL/KIjpdVAwz3LjsDVdE59V
HB/7tReAp5w5DO0YzSwUHt5g9Nj9CU+inuOvVjo6MhC3zmLfC2CrikPuSv59bI3A
oMvSfC1iV2s/28lsPcWQzcnh7youbEMeI0pDIyAZ3IMF15/aF4yf9irfJTv3Ic+9
IiYbpUIStysno2Z5lDoi/M20DVDD6QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKMn
A6P1tZIqx4ve91XzmqdHrptCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NzYzRkEyNEJFQTMxMUVGQTc2QzQ3ODM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmtbuMA0GCSqGSIb3DQEB
CwUAA4IBAQCy49ZepPB1wMQ4Xrw8+G/FDcnPGQNMYempY+u2hngUUqsqoykW7stU
Qxr7XistFirnckUvOLuC3t8OckzUuMSrwfF4XwKkaOxQBArLmM0QE22RaM+o1Nh0
svO5C5sdb2m2LDykwsiemfG92c/jXS969rTQzRiBc+eJD0X3YPAejw9SZyplJloI
mxkTXKaBA+vWKvPwkE+6bqaNgdlsyy3Bf/eFowne/6gCN5/2XTcsTJUPgZTjU/p7
tTrzh3aKHvzZOrHqfo7bvUqRoc0kbLS0/03WCbPujASpjl9ihlCtCzyPb7q0wJOk
yVzyNU/TGKLKdOhU6si58V5jv8stjLsx
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:56:43 2025 by rpki-client