Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8049D366D96311EFB7591C97762E951A.roa
File: 8049D366D96311EFB7591C97762E951A.roa (raw, json)
Hash identifier: 1jHD2WJ+lSxh3f8UsjKR13dgXmrYuYhFJL6+i98pu90=
Subject key identifier: 89:EB:8D:26:EE:2D:9D:0E:C0:CC:BD:39:6C:B0:B5:49:C0:BA:C0:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014081
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8049D366D96311EFB7591C97762E951A.roa
Signing time: Thu 23 Jan 2025 08:24:45 +0000
ROA not before: Thu 23 Jan 2025 08:24:41 +0000
ROA not after: Sat 08 Feb 2025 08:24:41 +0000
asID: 18229
IP address blocks: 154.210.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82049 (0x14081)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 08:24:41 2025 GMT
Not After : Feb 8 08:24:41 2025 GMT
Subject: CN=6791fccd-5e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:28:7b:6b:71:d6:74:e2:02:c4:2e:26:fa:28:
37:fe:fc:2f:a6:9f:fd:85:f1:cd:b2:29:cb:04:8d:
23:28:f5:c9:bb:13:7a:23:e8:5a:28:b6:de:be:9d:
29:fe:80:7e:88:e0:4f:72:70:01:e0:eb:f8:e4:cb:
9d:6b:9c:f7:e6:bc:95:c4:8f:62:f9:f2:a8:56:04:
6a:7b:26:52:d1:fb:ba:9f:65:55:e7:c5:7d:b8:8d:
19:2f:ec:b3:99:36:dc:49:4a:9e:d3:52:78:2b:66:
56:fb:77:05:19:50:b5:c8:87:4f:fd:be:3f:cc:a7:
d6:e5:2b:c0:bb:59:5c:2a:25:db:9c:92:aa:dc:b9:
99:52:20:cb:78:56:43:89:d4:ce:28:28:ad:59:5d:
99:f7:35:6e:ee:64:c1:6b:77:d9:62:c3:67:37:c9:
de:46:68:ae:35:1b:9f:c0:33:78:8d:08:07:e9:e5:
1b:c2:2f:86:ce:5b:51:fb:5d:33:7c:ee:f3:cc:76:
2b:38:3c:90:77:ae:0c:bf:50:c3:40:5b:cd:d7:10:
a7:9a:ec:c8:6e:0f:5b:93:1e:e9:f2:ed:cd:12:17:
c9:21:ff:a9:de:dd:fe:0e:ca:20:ea:6c:8d:6e:26:
a5:72:ab:fc:5f:ff:53:58:ad:27:bb:9e:0c:56:30:
06:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EB:8D:26:EE:2D:9D:0E:C0:CC:BD:39:6C:B0:B5:49:C0:BA:C0:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8049D366D96311EFB7591C97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:95:89:84:7d:66:08:63:e5:d6:23:72:48:be:29:23:ff:d4:
e1:2d:8b:14:f1:8b:f1:12:45:a4:8d:8b:f9:36:fd:fa:ba:61:
fa:2a:7a:34:63:3b:4c:3d:a4:3d:58:7d:83:0a:9c:e6:e1:4e:
e1:f7:59:12:69:0e:d4:50:59:bb:75:ba:29:7b:1d:aa:75:1f:
fb:6b:57:7f:ea:08:c4:71:f3:33:53:ee:a4:ad:c0:3b:10:6a:
d7:5a:cd:dd:e8:1e:2b:f7:70:14:1f:bf:b2:33:8c:ca:a3:69:
e7:f3:b7:c2:7a:c3:db:df:6f:d7:ac:50:c0:fa:db:36:83:e4:
31:8b:5a:02:b8:f5:8e:4b:fb:4a:39:6d:13:29:d5:40:c3:5c:
a3:d2:7b:db:7f:c5:07:03:8d:86:9b:8f:b7:6b:39:ef:0f:6b:
ab:c8:32:c6:b2:bf:e8:43:54:3c:1b:30:d7:e6:1e:3c:91:f1:
2a:04:e5:93:e0:63:50:46:99:52:22:d0:ac:14:b9:96:e5:1c:
58:ac:8b:85:0b:2e:c5:b9:4a:47:ef:cb:2d:f8:94:36:cd:72:
82:05:57:a2:37:0b:e4:24:20:2f:fc:ef:88:7e:29:1a:73:e7:
70:96:3c:3c:89:4f:37:97:24:32:f9:ce:0e:4b:16:a3:c7:1a:
0c:2c:a5:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUCBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMDgyNDQxWhcNMjUwMjA4MDgyNDQxWjAYMRYw
FAYDVQQDEw02NzkxZmNjZC01ZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0Ch7a3HWdOICxC4m+ig3/vwvpp/9hfHNsinLBI0jKPXJuxN6I+haKLbe
vp0p/oB+iOBPcnAB4Ov45Muda5z35ryVxI9i+fKoVgRqeyZS0fu6n2VV58V9uI0Z
L+yzmTbcSUqe01J4K2ZW+3cFGVC1yIdP/b4/zKfW5SvAu1lcKiXbnJKq3LmZUiDL
eFZDidTOKCitWV2Z9zVu7mTBa3fZYsNnN8neRmiuNRufwDN4jQgH6eUbwi+GzltR
+10zfO7zzHYrODyQd64Mv1DDQFvN1xCnmuzIbg9bkx7p8u3NEhfJIf+p3t3+Dsog
6myNbialcqv8X/9TWK0nu54MVjAGDwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFInr
jSbuLZ0OwMy9OWywtUnAusAyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MDQ5RDM2NkQ5NjMxMUVGQjc1OTFDOTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtK/MA0GCSqGSIb3DQEB
CwUAA4IBAQBOlYmEfWYIY+XWI3JIvikj/9ThLYsU8YvxEkWkjYv5Nv36umH6Kno0
YztMPaQ9WH2DCpzm4U7h91kSaQ7UUFm7dbopex2qdR/7a1d/6gjEcfMzU+6krcA7
EGrXWs3d6B4r93AUH7+yM4zKo2nn87fCesPb32/XrFDA+ts2g+Qxi1oCuPWOS/tK
OW0TKdVAw1yj0nvbf8UHA42Gm4+3aznvD2uryDLGsr/oQ1Q8GzDX5h48kfEqBOWT
4GNQRplSItCsFLmW5RxYrIuFCy7FuUpH78st+JQ2zXKCBVeiNwvkJCAv/O+Ifika
c+dwljw8iU83lyQy+c4OSxajxxoMLKXU
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:43:11 2025 by rpki-client