Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59948420DA3311EF9EBD4C92762E951A.roa
File: 59948420DA3311EF9EBD4C92762E951A.roa (raw, json)
Hash identifier: 33+uZqhI/qH9UTOdo4YEMYMwQ77d2Ochq7ysD/xcoOo=
Subject key identifier: F4:9B:13:26:AB:19:BE:AC:5B:3B:1D:B1:70:BB:D4:6C:FC:6D:D1:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59948420DA3311EF9EBD4C92762E951A.roa
Signing time: Fri 24 Jan 2025 09:12:35 +0000
ROA not before: Fri 24 Jan 2025 09:12:32 +0000
ROA not after: Wed 05 Mar 2025 09:12:32 +0000
asID: 202656
IP address blocks: 154.219.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83144 (0x144c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:12:32 2025 GMT
Not After : Mar 5 09:12:32 2025 GMT
Subject: CN=67935983-056b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:f8:4c:5e:1c:11:02:09:98:d0:73:e2:f5:
46:84:75:98:8e:6a:f7:66:8f:12:fd:f1:41:75:81:
ae:ee:89:21:c6:53:16:6c:e1:2b:2b:a5:87:7c:25:
1e:c8:b5:10:67:ed:10:83:e0:7b:6f:49:3e:34:6f:
d4:6b:e2:03:c0:d4:ce:99:b1:30:48:f3:30:15:56:
5e:13:96:ec:31:0e:4d:2f:7c:58:ec:d7:ae:b6:96:
e7:97:ca:c6:af:53:b8:a7:03:cf:6c:ee:fb:f8:1e:
81:d7:74:d4:34:3a:ce:5d:63:b9:64:a0:f4:88:33:
8e:f2:27:19:b2:86:e9:2d:34:6d:d9:1c:e0:cc:11:
57:66:d8:4c:72:a3:e4:30:a6:f1:8a:9f:a8:a4:63:
7a:b8:30:fb:03:5c:c6:26:bd:2f:f5:c7:6a:b4:e5:
f5:ca:76:c3:dd:0f:22:87:d8:4d:47:e7:0a:5a:96:
61:98:9e:99:49:58:41:59:18:24:0b:b2:b8:07:0c:
aa:ce:c8:57:6a:53:57:2c:08:13:93:a3:ba:b8:64:
6a:06:76:d3:a7:98:fc:e1:e8:2e:92:ce:c2:16:4a:
c7:0b:4a:77:3f:e1:85:81:fd:e3:15:9a:66:ac:b2:
35:9e:6f:a9:d7:e1:29:95:71:a0:25:25:ba:7e:a8:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9B:13:26:AB:19:BE:AC:5B:3B:1D:B1:70:BB:D4:6C:FC:6D:D1:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59948420DA3311EF9EBD4C92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.208.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:41:ce:f4:55:e3:83:3b:92:17:32:f5:f9:79:87:d2:12:52:
5c:87:14:e3:91:53:6b:e4:fe:23:33:8e:86:43:ae:8a:5a:5b:
a3:60:bd:cf:c6:7d:34:2a:b8:27:ce:68:89:a7:6e:50:64:e1:
4b:cb:2b:99:b3:16:43:4a:5f:ec:c6:ac:1c:a7:f6:33:5c:57:
7d:fa:ea:16:8d:a0:98:e4:6d:0b:d9:71:08:ad:85:bb:c4:2b:
e6:32:0b:7d:71:98:56:6b:43:c2:f2:12:3d:e8:a8:83:3a:e1:
42:fc:f3:ab:92:b4:d3:54:80:2a:89:10:a7:5b:c6:4b:33:5f:
f3:ae:d2:8f:da:fb:95:ff:8d:79:93:4d:42:46:66:f1:bd:8a:
5c:c7:46:19:6a:e1:8f:da:12:e1:5d:44:3e:20:f9:08:57:a6:
30:ae:84:23:f0:48:bf:21:7c:b1:da:b0:1c:8f:c4:68:77:70:
80:17:cd:a9:0c:35:2b:25:71:c2:0c:70:78:ba:43:2a:21:55:
67:dc:5f:be:f4:23:d9:1a:d1:0b:82:d6:31:e6:81:a0:c5:1b:
95:53:71:8e:71:10:ea:66:9b:10:f8:ef:df:d3:02:52:b6:65:
71:1f:80:35:06:17:ea:47:89:9c:80:b3:e6:ea:f4:c5:aa:84:
79:fe:a7:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUTIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MDkxMjMyWhcNMjUwMzA1MDkxMjMyWjAYMRYw
FAYDVQQDEw02NzkzNTk4My0wNTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0a34TF4cEQIJmNBz4vVGhHWYjmr3Zo8S/fFBdYGu7okhxlMWbOErK6WH
fCUeyLUQZ+0Qg+B7b0k+NG/Ua+IDwNTOmbEwSPMwFVZeE5bsMQ5NL3xY7Neutpbn
l8rGr1O4pwPPbO77+B6B13TUNDrOXWO5ZKD0iDOO8icZsobpLTRt2RzgzBFXZthM
cqPkMKbxip+opGN6uDD7A1zGJr0v9cdqtOX1ynbD3Q8ih9hNR+cKWpZhmJ6ZSVhB
WRgkC7K4BwyqzshXalNXLAgTk6O6uGRqBnbTp5j84eguks7CFkrHC0p3P+GFgf3j
FZpmrLI1nm+p1+EplXGgJSW6fqhY6QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPSb
EyarGb6sWzsdsXC71Gz8bdG7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81OTk0ODQyMERBMzMxMUVGOUVCRDRDOTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtvQMA0GCSqGSIb3DQEB
CwUAA4IBAQC5Qc70VeODO5IXMvX5eYfSElJchxTjkVNr5P4jM46GQ66KWlujYL3P
xn00KrgnzmiJp25QZOFLyyuZsxZDSl/sxqwcp/YzXFd9+uoWjaCY5G0L2XEIrYW7
xCvmMgt9cZhWa0PC8hI96KiDOuFC/POrkrTTVIAqiRCnW8ZLM1/zrtKP2vuV/415
k01CRmbxvYpcx0YZauGP2hLhXUQ+IPkIV6YwroQj8Ei/IXyx2rAcj8Rod3CAF82p
DDUrJXHCDHB4ukMqIVVn3F++9CPZGtELgtYx5oGgxRuVU3GOcRDqZpsQ+O/f0wJS
tmVxH4A1BhfqR4mcgLPm6vTFqoR5/qc2
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:06:17 2025 by rpki-client