Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/718154B0DA5011EFAD85D755762E951A.roa
File: 718154B0DA5011EFAD85D755762E951A.roa (raw, json)
Hash identifier: nWHoNo8anTMVZ0a5Ce7buKKZZ4iYglCH9UYtusaIY0o=
Subject key identifier: 9E:EC:69:A4:B4:38:EB:5F:8F:18:2F:13:EF:49:F9:39:77:33:EA:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/718154B0DA5011EFAD85D755762E951A.roa
Signing time: Fri 24 Jan 2025 12:40:51 +0000
ROA not before: Fri 24 Jan 2025 12:40:47 +0000
ROA not after: Sat 01 Mar 2025 12:40:47 +0000
asID: 44559
IP address blocks: 154.205.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83697 (0x146f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:40:47 2025 GMT
Not After : Mar 1 12:40:47 2025 GMT
Subject: CN=67938a53-edf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:b0:75:a0:22:c7:cb:15:3e:8b:ce:12:63:
05:30:9c:a2:a5:fd:df:e1:79:30:77:25:89:08:21:
ef:60:8d:87:dd:5e:b1:18:40:2f:04:4e:e3:80:8c:
b5:7f:82:17:3c:f2:1b:17:3a:30:78:71:13:b7:93:
d7:08:13:71:3a:54:8f:94:a5:37:e7:50:84:b6:b0:
30:a6:01:29:63:f3:73:7c:ad:2d:9e:d0:f2:b2:cf:
31:8e:a2:d1:28:0d:91:94:e1:d4:83:41:2b:5d:fb:
8c:88:c8:a2:e0:74:57:a8:55:2b:18:e8:b7:70:64:
9b:34:4f:7f:77:88:f6:6b:90:3e:2c:fb:62:78:4d:
7b:b8:c3:59:a2:23:9d:e7:90:8b:57:6e:e3:0e:bf:
d3:24:b5:6f:59:ac:68:bc:e7:37:68:bb:cc:4d:50:
81:1a:66:a9:c5:b1:32:3f:f5:50:cf:f9:b0:ee:6a:
90:1c:2d:8c:a9:ec:c7:23:24:3a:53:57:ab:b3:97:
5d:af:71:2f:21:b4:3e:dc:f3:cc:70:b1:af:e7:d1:
57:c7:69:b1:0e:b6:68:46:e5:d0:01:a9:8a:50:9e:
10:d7:43:15:49:38:8e:9b:c1:52:f0:32:d4:a2:00:
11:19:e9:c4:d1:7d:f7:e7:ac:e2:46:94:b1:f4:15:
f3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EC:69:A4:B4:38:EB:5F:8F:18:2F:13:EF:49:F9:39:77:33:EA:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/718154B0DA5011EFAD85D755762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.236.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e1:79:59:36:81:5e:65:8c:b2:03:04:2d:49:fd:90:a9:5c:
a5:c0:ac:ea:fb:f5:80:81:16:13:9c:cc:de:2f:09:ab:fd:69:
a8:1a:a3:28:9f:a5:60:68:17:6c:be:91:80:b6:c0:1e:e2:58:
54:70:75:9f:9f:04:6e:11:63:d3:dd:68:67:4d:46:79:09:c1:
f6:27:5e:13:c9:4f:f7:fe:7d:15:e3:f4:ee:d7:d8:92:ae:92:
5c:43:2e:51:01:dd:7d:77:ac:86:93:01:df:79:75:5d:94:e0:
9e:ca:54:7e:15:27:b6:14:9d:4c:a2:46:43:fb:a2:dc:37:54:
95:71:63:32:f8:e2:74:16:54:6b:10:dd:5f:d2:8c:82:38:d3:
29:62:cc:db:00:c3:56:a9:fb:48:dd:5a:26:30:f3:df:d3:e3:
2b:5b:f8:50:77:83:2c:e3:87:ec:3d:4d:f3:7c:1b:cc:86:ac:
58:e4:70:a3:3e:a3:cd:4e:20:62:63:14:dc:79:45:74:36:75:
7f:54:1b:7e:a2:7d:51:d5:22:0b:fc:2a:99:bb:73:55:2d:54:
e7:da:9a:92:8d:06:5a:43:86:77:e5:ef:ef:95:ff:d7:ff:ec:
d6:da:c5:9b:e0:e9:51:d8:ac:0a:99:92:d5:ed:77:f6:ed:71:
11:b5:33:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUbxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTI0MDQ3WhcNMjUwMzAxMTI0MDQ3WjAYMRYw
FAYDVQQDEw02NzkzOGE1My1lZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAng6wdaAix8sVPovOEmMFMJyipf3f4XkwdyWJCCHvYI2H3V6xGEAvBE7j
gIy1f4IXPPIbFzoweHETt5PXCBNxOlSPlKU351CEtrAwpgEpY/NzfK0tntDyss8x
jqLRKA2RlOHUg0ErXfuMiMii4HRXqFUrGOi3cGSbNE9/d4j2a5A+LPtieE17uMNZ
oiOd55CLV27jDr/TJLVvWaxovOc3aLvMTVCBGmapxbEyP/VQz/mw7mqQHC2MqezH
IyQ6U1ers5ddr3EvIbQ+3PPMcLGv59FXx2mxDrZoRuXQAamKUJ4Q10MVSTiOm8FS
8DLUogARGenE0X3356ziRpSx9BXzPQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ7s
aaS0OOtfjxgvE+9J+Tl3M+pbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MTgxNTRCMERBNTAxMUVGQUQ4NUQ3NTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms3sMA0GCSqGSIb3DQEB
CwUAA4IBAQCS4XlZNoFeZYyyAwQtSf2QqVylwKzq+/WAgRYTnMzeLwmr/WmoGqMo
n6VgaBdsvpGAtsAe4lhUcHWfnwRuEWPT3WhnTUZ5CcH2J14TyU/3/n0V4/Tu19iS
rpJcQy5RAd19d6yGkwHfeXVdlOCeylR+FSe2FJ1MokZD+6LcN1SVcWMy+OJ0FlRr
EN1f0oyCONMpYszbAMNWqftI3VomMPPf0+MrW/hQd4Ms44fsPU3zfBvMhqxY5HCj
PqPNTiBiYxTceUV0NnV/VBt+on1R1SIL/CqZu3NVLVTn2pqSjQZaQ4Z35e/vlf/X
/+zW2sWb4OlR2KwKmZLV7Xf27XERtTMP
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:35:52 2025 by rpki-client