Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/730E0228D96611EF98A2F3A9762E951A.roa
File: 730E0228D96611EF98A2F3A9762E951A.roa (raw, json)
Hash identifier: WawIT9f31JjL0oYHtIqDaHDRr59cRPjn3UTCA+vNGyQ=
Subject key identifier: AE:C3:B8:66:4F:05:16:9B:17:5E:20:92:81:46:D3:2F:61:C7:33:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01409D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/730E0228D96611EF98A2F3A9762E951A.roa
Signing time: Thu 23 Jan 2025 08:45:51 +0000
ROA not before: Thu 23 Jan 2025 08:45:48 +0000
ROA not after: Thu 27 Feb 2025 08:45:48 +0000
asID: 59187
IP address blocks: 154.221.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82077 (0x1409d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 08:45:48 2025 GMT
Not After : Feb 27 08:45:48 2025 GMT
Subject: CN=679201bf-76e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:35:f0:9d:7d:eb:ec:05:eb:11:10:3e:48:
93:9d:27:21:63:e1:47:d1:e2:ca:81:06:b4:f6:f8:
e5:63:96:7b:a2:50:cd:4d:b4:f4:9b:47:a4:f1:b5:
05:95:5a:75:78:4b:5d:62:98:cc:10:70:6e:05:9b:
dd:12:da:69:05:77:5a:44:1e:2b:21:21:98:08:1e:
5e:20:f9:ea:64:00:0b:13:f7:c1:ee:6c:cc:66:f0:
5d:d8:7a:2b:f9:72:c5:8e:79:1a:36:d1:6c:ac:77:
b0:72:0c:85:57:c3:ea:4f:d7:b2:88:da:4e:08:31:
4b:6c:cf:c3:cf:8b:e0:11:37:cd:d6:24:d7:f2:a7:
cf:4a:e8:c7:05:f6:47:5c:f9:a6:f8:c9:5e:d9:71:
6e:70:37:ab:f5:0e:1b:57:50:5d:3f:53:58:29:b7:
e1:c0:f3:b8:9a:49:d3:96:b2:19:e9:2c:bb:2b:a5:
38:bd:74:f3:76:d6:52:e6:d7:13:d0:81:a6:fc:f8:
c9:ed:84:ec:39:a5:19:6b:d0:a6:ca:c5:48:9a:9c:
db:cf:c9:4c:be:0c:92:d1:fa:66:ed:32:f6:42:16:
2a:20:5b:c3:92:58:d4:f7:df:10:13:61:e7:be:d0:
dc:87:40:e3:33:0f:d7:57:85:4c:75:11:4d:50:60:
b1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C3:B8:66:4F:05:16:9B:17:5E:20:92:81:46:D3:2F:61:C7:33:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/730E0228D96611EF98A2F3A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.33.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:80:e3:71:b7:b4:47:9e:08:ad:59:0a:b3:3b:00:e1:88:4a:
4e:46:41:3c:d5:13:ca:af:d5:6b:00:99:9b:19:f1:e1:01:52:
84:68:fe:ac:34:bc:da:52:f3:c4:f4:04:1e:97:ad:e0:30:5a:
4b:e9:c5:9f:39:41:13:56:7e:26:c2:5d:74:af:9f:7a:07:23:
43:7d:8a:9a:78:ed:32:55:53:45:72:d9:cb:fb:a3:6b:a6:4f:
f0:5f:67:c3:8f:d9:c8:5d:85:b6:72:53:56:72:b2:0e:96:86:
21:96:16:41:91:3c:e1:c8:03:f5:a1:40:78:e9:b8:83:f9:69:
37:ff:f2:8b:c2:78:98:f9:3c:42:07:68:d8:a4:3d:38:73:aa:
dc:90:a0:01:49:16:a8:75:98:7c:22:91:a5:23:56:a1:40:43:
fc:d3:97:df:4b:ad:c9:36:2f:32:dc:a9:71:7a:21:ba:b3:7d:
b2:39:c6:90:f1:ca:34:ca:e8:3e:9c:44:86:c3:b5:8e:a4:d6:
7e:80:c7:6e:10:77:5e:fd:80:69:d5:00:e2:c0:3c:bf:22:03:
ed:d5:28:3c:39:ee:b0:4f:74:af:2c:4b:03:14:e3:d8:c3:05:
0a:05:8a:79:d0:02:00:9e:ec:85:f4:bd:3b:e9:c7:64:63:7d:
75:5c:aa:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUCdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMDg0NTQ4WhcNMjUwMjI3MDg0NTQ4WjAYMRYw
FAYDVQQDEw02NzkyMDFiZi03NmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuFQ18J196+wF6xEQPkiTnSchY+FH0eLKgQa09vjlY5Z7olDNTbT0m0ek
8bUFlVp1eEtdYpjMEHBuBZvdEtppBXdaRB4rISGYCB5eIPnqZAALE/fB7mzMZvBd
2Hor+XLFjnkaNtFsrHewcgyFV8PqT9eyiNpOCDFLbM/Dz4vgETfN1iTX8qfPSujH
BfZHXPmm+Mle2XFucDer9Q4bV1BdP1NYKbfhwPO4mknTlrIZ6Sy7K6U4vXTzdtZS
5tcT0IGm/PjJ7YTsOaUZa9CmysVImpzbz8lMvgyS0fpm7TL2QhYqIFvDkljU998Q
E2HnvtDch0DjMw/XV4VMdRFNUGCxKQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK7D
uGZPBRabF14gkoFG0y9hxzNSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MzBFMDIyOEQ5NjYxMUVGOThBMkYzQTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt0hMA0GCSqGSIb3DQEB
CwUAA4IBAQDGgONxt7RHngitWQqzOwDhiEpORkE81RPKr9VrAJmbGfHhAVKEaP6s
NLzaUvPE9AQel63gMFpL6cWfOUETVn4mwl10r596ByNDfYqaeO0yVVNFctnL+6Nr
pk/wX2fDj9nIXYW2clNWcrIOloYhlhZBkTzhyAP1oUB46biD+Wk3//KLwniY+TxC
B2jYpD04c6rckKABSRaodZh8IpGlI1ahQEP805ffS63JNi8y3KlxeiG6s32yOcaQ
8co0yug+nESGw7WOpNZ+gMduEHde/YBp1QDiwDy/IgPt1Sg8Oe6wT3SvLEsDFOPY
wwUKBYp50AIAnuyF9L076cdkY311XKpE
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:55 2025 by rpki-client