Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/808551D2D9D811EFB23CBBA0762E951A.roa
File: 808551D2D9D811EFB23CBBA0762E951A.roa (raw, json)
Hash identifier: I3fZdbGM1fuIMC7WwICvj/FHaPhl3vB0tmDwL94xHLQ=
Subject key identifier: 8B:45:A0:FF:86:A0:76:7A:87:37:90:91:16:EF:AC:B3:17:3B:AF:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014347
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/808551D2D9D811EFB23CBBA0762E951A.roa
Signing time: Thu 23 Jan 2025 22:22:16 +0000
ROA not before: Fri 24 Jan 2025 22:22:12 +0000
ROA not after: Sat 01 Mar 2025 22:22:12 +0000
asID: 44559
IP address blocks: 154.205.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82759 (0x14347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 22:22:12 2025 GMT
Not After : Mar 1 22:22:12 2025 GMT
Subject: CN=6792c118-f7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c3:5c:15:06:a3:7a:da:4f:c5:85:72:26:32:
4e:2d:e0:ab:a8:10:fb:8a:c4:8d:2d:98:63:75:8e:
05:06:41:0f:26:28:b5:fd:f8:86:cf:81:64:c3:17:
f6:9a:76:47:5e:fd:7f:de:87:af:1d:57:4d:a5:8c:
a7:57:e8:2f:4f:a8:a2:f7:e8:45:ff:27:88:48:ed:
a9:91:86:25:8b:cf:75:2a:13:37:c0:e1:af:b7:71:
56:f9:82:f1:7e:fe:19:8b:72:d4:91:88:2e:49:25:
7f:d1:5b:ba:92:d8:49:f9:ae:b9:0d:b8:46:2d:02:
39:27:55:b6:8f:61:af:28:02:16:4b:18:10:68:06:
c0:f0:44:fb:80:5b:c1:79:15:b4:d1:94:57:0d:de:
5b:f7:c8:be:79:f9:54:27:2f:a8:e9:ee:e8:d6:f9:
f3:ec:f7:94:71:15:06:0f:7a:58:a3:0e:6f:71:56:
b9:23:f2:7d:74:52:86:a3:be:45:3c:f4:57:39:14:
11:e8:bd:f8:c1:10:b0:cc:3c:dc:aa:c7:91:7f:6d:
e6:e4:81:07:12:5e:79:25:a4:52:8f:6c:87:be:d1:
71:e4:f1:6c:2a:f7:29:f4:35:0d:d5:07:9e:e0:6c:
29:da:ff:17:74:98:3b:88:6e:59:a6:cb:a8:69:8c:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:45:A0:FF:86:A0:76:7A:87:37:90:91:16:EF:AC:B3:17:3B:AF:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/808551D2D9D811EFB23CBBA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.234.0/24
Signature Algorithm: sha256WithRSAEncryption
36:bc:1d:75:da:83:52:34:f8:a0:d3:2e:08:66:ec:0e:ea:11:
97:2a:1e:7c:5e:93:3a:62:a4:b7:65:f6:dc:7b:d4:fd:36:97:
34:8e:e3:d3:08:cd:ab:b7:a3:c7:6e:46:ca:cc:6e:90:c1:75:
74:e2:41:03:f1:43:da:e0:8c:9e:f7:18:17:57:14:e2:e3:fb:
3e:63:92:8a:3f:b3:82:39:d9:5b:8c:8b:0e:ce:03:67:51:f9:
90:93:5e:a2:d7:3b:47:04:b2:c1:3f:07:2c:83:1e:56:3b:5d:
0a:46:b0:5a:27:e0:08:b8:22:bf:db:00:06:e7:18:e2:5b:a4:
7e:12:1c:b4:0b:3e:57:44:bd:3f:8c:21:03:85:50:75:a6:61:
c6:05:7f:9b:b4:42:e9:bf:ba:9b:33:66:97:af:ba:4b:1b:b6:
b3:bb:e4:73:b6:d7:aa:aa:58:98:13:53:df:b4:4f:0b:34:b3:
31:20:a3:3d:21:cb:36:5c:c9:17:c0:c9:27:f9:e6:d3:4c:29:
50:45:1c:a1:c9:64:c0:94:3d:9c:4d:bb:df:cb:da:83:c9:8b:
c1:8b:37:19:ea:3b:b5:0a:77:e0:53:48:d2:1c:65:4d:6c:4f:
f9:f4:3d:44:74:08:92:f3:3b:36:58:db:07:7d:87:36:0c:ca:
0c:ea:48:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUNHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MjIyMjEyWhcNMjUwMzAxMjIyMjEyWjAYMRYw
FAYDVQQDEw02NzkyYzExOC1mN2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9cNcFQajetpPxYVyJjJOLeCrqBD7isSNLZhjdY4FBkEPJii1/fiGz4Fk
wxf2mnZHXv1/3oevHVdNpYynV+gvT6ii9+hF/yeISO2pkYYli891KhM3wOGvt3FW
+YLxfv4Zi3LUkYguSSV/0Vu6kthJ+a65DbhGLQI5J1W2j2GvKAIWSxgQaAbA8ET7
gFvBeRW00ZRXDd5b98i+eflUJy+o6e7o1vnz7PeUcRUGD3pYow5vcVa5I/J9dFKG
o75FPPRXORQR6L34wRCwzDzcqseRf23m5IEHEl55JaRSj2yHvtFx5PFsKvcp9DUN
1Qee4Gwp2v8XdJg7iG5ZpsuoaYxkSwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFItF
oP+GoHZ6hzeQkRbvrLMXO6+gMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MDg1NTFEMkQ5RDgxMUVGQjIzQ0JCQTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms3qMA0GCSqGSIb3DQEB
CwUAA4IBAQA2vB112oNSNPig0y4IZuwO6hGXKh58XpM6YqS3Zfbce9T9Npc0juPT
CM2rt6PHbkbKzG6QwXV04kED8UPa4Iye9xgXVxTi4/s+Y5KKP7OCOdlbjIsOzgNn
UfmQk16i1ztHBLLBPwcsgx5WO10KRrBaJ+AIuCK/2wAG5xjiW6R+Ehy0Cz5XRL0/
jCEDhVB1pmHGBX+btELpv7qbM2aXr7pLG7azu+RztteqqliYE1PftE8LNLMxIKM9
Ics2XMkXwMkn+ebTTClQRRyhyWTAlD2cTbvfy9qDyYvBizcZ6ju1CnfgU0jSHGVN
bE/59D1EdAiS8zs2WNsHfYc2DMoM6kjR
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:01:50 2025 by rpki-client