Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/786CEA58DA5211EF91EFD963762E951A.roa
File: 786CEA58DA5211EF91EFD963762E951A.roa (raw, json)
Hash identifier: Rk9TwgNm+OFp+15ihVmDL4MUywooa6FwScnQLxLZQyc=
Subject key identifier: 98:29:C0:D6:F3:0D:30:F3:97:81:74:92:DA:2B:F6:DF:4C:95:FA:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014721
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/786CEA58DA5211EF91EFD963762E951A.roa
Signing time: Fri 24 Jan 2025 12:55:21 +0000
ROA not before: Fri 24 Jan 2025 12:55:18 +0000
ROA not after: Sat 08 Feb 2025 12:55:18 +0000
asID: 139490
IP address blocks: 154.209.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83745 (0x14721)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:55:18 2025 GMT
Not After : Feb 8 12:55:18 2025 GMT
Subject: CN=67938db9-f158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:d2:90:dd:e9:a6:ca:41:7b:41:e9:01:dc:
40:2c:5e:14:e7:b7:a7:da:2b:46:8e:38:09:42:75:
8b:83:a3:55:a0:a0:ba:18:65:7f:36:09:de:00:8e:
2a:9e:bf:1b:39:1f:3a:8d:2c:87:e8:92:0b:a5:e8:
28:73:d2:87:06:ec:d2:6b:54:07:48:f4:7c:1c:a5:
d9:8e:18:9d:80:e9:0d:11:bd:b3:36:fa:d5:76:90:
72:01:03:69:68:b1:ef:f3:c5:ee:04:a4:ee:94:37:
12:ee:f6:86:2c:03:ef:f7:c9:06:0e:bc:fa:c8:97:
51:bc:8d:8a:6b:43:6b:e8:eb:dd:c3:d6:6f:ab:a9:
e8:75:66:da:cb:9d:e1:87:64:03:0b:c7:0d:b3:55:
78:80:c5:c9:e4:33:51:aa:ec:65:ee:25:ed:cc:a8:
88:f6:78:26:79:1a:56:3a:c6:72:20:3a:e9:33:5f:
b8:40:cb:61:32:43:fd:c2:98:54:13:f0:8c:40:1e:
0c:95:c2:e1:80:41:54:b2:20:cd:ff:09:f7:c5:3c:
e3:bc:44:26:a3:a8:57:7a:c0:f7:88:86:e5:ec:b0:
1c:cf:e5:f8:ec:ee:f0:fe:72:98:ed:11:2c:9f:92:
22:7d:a9:b4:f8:2e:3b:10:0b:5a:eb:ca:40:fc:f5:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:29:C0:D6:F3:0D:30:F3:97:81:74:92:DA:2B:F6:DF:4C:95:FA:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/786CEA58DA5211EF91EFD963762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.255.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:ea:f0:ce:7b:2d:5c:de:d6:5d:f0:30:fc:ef:2d:21:04:69:
77:96:62:e9:20:1c:ac:b4:7d:65:03:55:c3:ac:3f:1c:62:3c:
4c:79:69:ff:a4:f2:7d:8d:a8:6d:a3:ef:a1:aa:39:ae:ee:4e:
f3:8a:1b:e1:36:89:d2:7a:70:22:dc:7a:55:f3:5a:70:5b:80:
4c:4f:8b:fe:53:0b:2c:25:33:7d:09:71:a1:fe:6b:37:ed:85:
51:4e:5e:4a:71:e8:93:da:b4:6c:56:9c:f2:b3:f1:68:0e:75:
1e:58:fc:ca:94:a4:a8:70:c1:ae:56:22:a0:13:73:f3:d4:d5:
8e:aa:e6:59:24:a8:5f:55:71:8b:b1:34:40:d7:82:4c:58:ea:
50:cf:aa:05:0e:dc:87:10:47:39:bd:c6:2c:26:c3:40:6d:82:
74:af:5a:50:00:0a:af:48:77:84:69:22:ad:00:f0:40:3b:75:
55:97:eb:48:03:d9:93:3b:98:53:96:c6:e7:18:0d:f4:d8:e1:
9e:52:5f:24:58:ab:76:a6:61:4b:55:b5:4f:70:c7:b0:e5:cb:
48:bc:61:99:4e:2c:9c:1d:7a:fa:46:0a:d8:67:12:42:5b:80:
fe:eb:d1:f0:fb:21:e3:6b:05:b5:5f:33:93:2c:71:61:e1:bc:
fa:68:3f:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUchMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTI1NTE4WhcNMjUwMjA4MTI1NTE4WjAYMRYw
FAYDVQQDEw02NzkzOGRiOS1mMTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApsbSkN3ppspBe0HpAdxALF4U57en2itGjjgJQnWLg6NVoKC6GGV/Ngne
AI4qnr8bOR86jSyH6JILpegoc9KHBuzSa1QHSPR8HKXZjhidgOkNEb2zNvrVdpBy
AQNpaLHv88XuBKTulDcS7vaGLAPv98kGDrz6yJdRvI2Ka0Nr6Ovdw9Zvq6nodWba
y53hh2QDC8cNs1V4gMXJ5DNRquxl7iXtzKiI9ngmeRpWOsZyIDrpM1+4QMthMkP9
wphUE/CMQB4MlcLhgEFUsiDN/wn3xTzjvEQmo6hXesD3iIbl7LAcz+X47O7w/nKY
7REsn5Iifam0+C47EAta68pA/PVsJwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJgp
wNbzDTDzl4F0ktor9t9Mlfr0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83ODZDRUE1OERBNTIxMUVGOTFFRkQ5NjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtH/MA0GCSqGSIb3DQEB
CwUAA4IBAQDW6vDOey1c3tZd8DD87y0hBGl3lmLpIBystH1lA1XDrD8cYjxMeWn/
pPJ9jahto++hqjmu7k7zihvhNonSenAi3HpV81pwW4BMT4v+UwssJTN9CXGh/ms3
7YVRTl5KceiT2rRsVpzys/FoDnUeWPzKlKSocMGuViKgE3Pz1NWOquZZJKhfVXGL
sTRA14JMWOpQz6oFDtyHEEc5vcYsJsNAbYJ0r1pQAAqvSHeEaSKtAPBAO3VVl+tI
A9mTO5hTlsbnGA302OGeUl8kWKt2pmFLVbVPcMew5ctIvGGZTiycHXr6RgrYZxJC
W4D+69Hw+yHjawW1XzOTLHFh4bz6aD9N
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:12 2025 by rpki-client