Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60472738DA5A11EF8DD0DD99762E951A.roa
File: 60472738DA5A11EF8DD0DD99762E951A.roa (raw, json)
Hash identifier: oo/hQEPPHu5SKbLAWDgzLTmAWJAiyeFM9T0gnGRDiwI=
Subject key identifier: C5:95:7A:0B:0C:9B:D5:2F:D5:4A:D5:69:7A:E4:C8:CE:F3:4E:FD:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60472738DA5A11EF8DD0DD99762E951A.roa
Signing time: Fri 24 Jan 2025 13:51:57 +0000
ROA not before: Fri 24 Jan 2025 13:51:53 +0000
ROA not after: Wed 05 Mar 2025 13:51:53 +0000
asID: 48031
IP address blocks: 154.222.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83901 (0x147bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:51:53 2025 GMT
Not After : Mar 5 13:51:53 2025 GMT
Subject: CN=67939afd-8740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a8:52:7f:49:6f:b0:7e:7c:9f:be:f8:28:e3:
06:10:03:8c:de:59:61:09:cf:9e:43:12:40:10:32:
3f:ae:d9:e2:2d:48:f9:80:d7:ca:e7:7c:0f:f0:8e:
7c:27:bf:3c:a6:1a:ec:99:2b:f5:13:2f:87:fe:34:
b7:6f:c8:e1:21:b6:1e:c0:58:71:e8:72:f1:87:fd:
af:8e:33:fe:32:1c:1b:04:8b:23:6a:aa:65:67:08:
f5:34:26:97:0c:ba:60:33:f6:c9:06:6f:f9:26:99:
ee:e6:d1:73:60:a4:d1:e1:8b:e0:4a:a5:e1:ff:0e:
eb:b3:b4:22:95:9c:fc:5f:ab:28:fa:e0:a6:53:14:
22:1b:2e:1d:c5:5e:53:ba:41:42:46:b3:bb:71:5e:
58:ce:8c:d9:ad:fd:6b:30:eb:a3:52:61:fb:cb:48:
c7:ea:52:60:92:15:d7:bb:d3:8f:f4:de:17:e3:d4:
b9:a2:dc:23:87:be:af:75:4f:71:74:50:a7:2b:3b:
28:47:f4:c6:2f:03:ac:7f:72:d8:30:d0:fc:10:a2:
7b:c1:6c:44:ad:b6:2a:de:97:bd:1c:35:cc:c5:eb:
87:2d:6d:47:6a:a2:65:f7:7d:79:c6:78:a8:af:1a:
4d:a5:3e:ab:06:1c:a8:52:b5:98:ae:7b:78:1e:f3:
8a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:95:7A:0B:0C:9B:D5:2F:D5:4A:D5:69:7A:E4:C8:CE:F3:4E:FD:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60472738DA5A11EF8DD0DD99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.209.0/24
Signature Algorithm: sha256WithRSAEncryption
52:32:07:09:38:6a:ae:be:97:34:e4:af:f9:43:cb:5f:ba:ca:
a4:b0:e1:3b:96:83:37:97:cc:c0:55:85:4d:74:3f:50:7f:47:
f2:96:4f:97:df:35:d2:d0:2f:56:05:35:fe:a9:72:63:d7:48:
ed:78:d9:40:13:ef:c8:68:c6:ff:49:77:fa:bc:11:c1:4d:b8:
e7:23:43:a3:a3:29:f7:73:1f:3b:d2:9b:ee:a2:af:b6:39:08:
ac:30:40:9e:25:7b:47:c7:dc:8f:bc:6a:f6:b6:ab:3c:1c:69:
40:95:5d:72:79:b5:8e:d0:e9:b2:ca:2f:d8:08:0f:9e:3f:d7:
e6:3a:f8:b5:1a:aa:17:57:08:94:30:ad:ee:e3:e6:bc:80:e5:
25:3c:d8:03:01:3e:11:ff:99:08:e0:f2:d3:ed:08:de:12:1d:
3d:1d:30:6a:7f:5f:f4:d5:b4:67:f1:59:46:76:ca:b2:6d:7c:
19:e3:4f:26:10:b3:8b:bb:f1:58:1f:b7:4e:64:7c:0b:e3:63:
1c:e8:2f:61:05:3c:c9:32:37:61:0a:d1:e2:16:4a:9d:6d:dc:
60:31:f6:9c:56:3d:7c:f5:41:b1:13:17:4c:b3:af:c6:9c:0a:
17:40:00:0b:4d:13:e3:a0:2a:32:af:a0:c7:0f:9d:81:6b:18:
95:d5:7b:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUe9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTM1MTUzWhcNMjUwMzA1MTM1MTUzWjAYMRYw
FAYDVQQDEw02NzkzOWFmZC04NzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3ahSf0lvsH58n774KOMGEAOM3llhCc+eQxJAEDI/rtniLUj5gNfK53wP
8I58J788phrsmSv1Ey+H/jS3b8jhIbYewFhx6HLxh/2vjjP+MhwbBIsjaqplZwj1
NCaXDLpgM/bJBm/5Jpnu5tFzYKTR4YvgSqXh/w7rs7QilZz8X6so+uCmUxQiGy4d
xV5TukFCRrO7cV5YzozZrf1rMOujUmH7y0jH6lJgkhXXu9OP9N4X49S5otwjh76v
dU9xdFCnKzsoR/TGLwOsf3LYMND8EKJ7wWxErbYq3pe9HDXMxeuHLW1HaqJl9315
xniorxpNpT6rBhyoUrWYrnt4HvOKNwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMWV
egsMm9Uv1UrVaXrkyM7zTv3gMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MDQ3MjczOERBNUExMUVGOEREMEREOTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt7RMA0GCSqGSIb3DQEB
CwUAA4IBAQBSMgcJOGquvpc05K/5Q8tfusqksOE7loM3l8zAVYVNdD9Qf0fylk+X
3zXS0C9WBTX+qXJj10jteNlAE+/IaMb/SXf6vBHBTbjnI0Ojoyn3cx870pvuoq+2
OQisMECeJXtHx9yPvGr2tqs8HGlAlV1yebWO0Omyyi/YCA+eP9fmOvi1GqoXVwiU
MK3u4+a8gOUlPNgDAT4R/5kI4PLT7QjeEh09HTBqf1/01bRn8VlGdsqybXwZ408m
ELOLu/FYH7dOZHwL42Mc6C9hBTzJMjdhCtHiFkqdbdxgMfacVj189UGxExdMs6/G
nAoXQAALTRPjoCoyr6DHD52BaxiV1Xu2
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:06:35 2025 by rpki-client