Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80EA26A8DA0411EF8DEE705B762E951A.roa
File: 80EA26A8DA0411EF8DEE705B762E951A.roa (raw, json)
Hash identifier: rdc2YNw/d4dERNIC9mKKbxerPCsVfJRoit3dAE2hPAU=
Subject key identifier: C1:65:0B:EF:1A:22:2F:A5:9D:CF:00:E2:34:6B:5B:1E:8D:76:49:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014396
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80EA26A8DA0411EF8DEE705B762E951A.roa
Signing time: Fri 24 Jan 2025 03:37:15 +0000
ROA not before: Fri 24 Jan 2025 03:37:11 +0000
ROA not after: Sat 01 Mar 2025 03:37:11 +0000
asID: 44559
IP address blocks: 154.203.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82838 (0x14396)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 03:37:11 2025 GMT
Not After : Mar 1 03:37:11 2025 GMT
Subject: CN=67930aeb-c505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f7:2d:db:cb:c6:01:ad:9d:28:c5:6e:6e:06:
ee:9b:90:7c:28:37:f3:eb:22:05:a0:af:93:00:48:
f4:38:dd:10:8f:4e:53:c2:9c:4b:85:1e:52:c7:05:
4a:a2:27:13:88:49:db:db:b3:53:fb:7e:81:76:1d:
3a:6e:ec:48:f6:e0:c5:f3:23:e6:e7:43:80:c9:89:
7f:74:6b:13:9d:d3:ea:61:08:9d:73:c1:9c:4e:c7:
9a:36:07:bc:21:d7:b2:6f:a8:32:bb:42:a5:2b:ca:
92:f5:e7:91:84:b2:3d:0a:cb:b8:d3:7d:c4:ae:41:
62:c9:ce:35:e7:ef:31:6d:e7:a2:85:e9:76:f1:34:
bf:72:17:95:06:b8:7e:c0:2e:4a:2f:01:3d:08:9d:
bd:69:fa:2d:84:56:dc:27:e4:07:02:e4:29:7f:fc:
a7:71:1b:34:4e:9b:3e:12:5c:77:3f:15:e7:df:88:
f7:66:ea:24:07:ef:e7:5d:ea:f7:8b:44:a2:54:f4:
9a:bd:3f:be:da:68:df:9a:aa:9f:93:6e:7f:f4:8f:
e2:45:26:85:af:82:3c:e6:e3:87:6f:19:ec:26:ac:
94:99:ba:a8:84:d5:24:e1:8e:44:23:45:a1:88:1f:
ad:14:ed:aa:5d:3f:76:7f:67:e1:60:bd:13:10:af:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:65:0B:EF:1A:22:2F:A5:9D:CF:00:E2:34:6B:5B:1E:8D:76:49:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80EA26A8DA0411EF8DEE705B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.212.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:f4:75:46:32:67:91:10:b2:d4:0c:54:63:af:4e:c4:9a:7c:
aa:4b:ad:e2:df:8e:52:33:e8:fa:60:81:97:66:e7:83:f7:6f:
52:7c:b2:f2:f2:16:76:e1:f9:62:0d:90:6c:47:25:f5:fc:8c:
c0:56:44:87:bc:05:6b:ae:8b:60:ba:d1:33:43:55:ef:c4:a8:
09:0f:b1:ce:1c:dd:a8:ed:1f:f7:cd:4c:9c:a2:96:b5:28:ae:
a7:15:c1:29:a7:56:da:ba:fb:70:d7:d5:1c:8a:69:ce:4f:37:
c5:41:a0:eb:ee:a9:ce:d0:5e:13:c5:e3:a2:26:48:36:06:c0:
07:35:1c:0f:89:f7:64:35:b2:5e:03:67:ba:9c:cc:3c:1d:7d:
34:c0:e9:08:2b:e7:03:d3:5e:d3:da:ef:a7:f4:de:86:11:91:
a5:80:84:a5:4e:9d:7f:b0:54:6d:a6:7e:ee:66:25:4a:f8:cc:
44:3f:ca:ee:61:ac:b3:b3:13:ad:d9:e9:92:18:9a:61:57:17:
d7:f1:f0:b9:49:ab:88:18:fd:10:e9:d9:03:48:ff:e1:e9:ad:
66:4e:be:27:47:8c:be:e9:e7:03:c5:f3:ba:6d:8d:eb:1c:f3:
35:af:a1:ba:91:59:ba:cd:66:1f:55:bc:ce:92:b1:88:76:60:
b6:46:78:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUOWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MDMzNzExWhcNMjUwMzAxMDMzNzExWjAYMRYw
FAYDVQQDEw02NzkzMGFlYi1jNTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy/ct28vGAa2dKMVubgbum5B8KDfz6yIFoK+TAEj0ON0Qj05TwpxLhR5S
xwVKoicTiEnb27NT+36Bdh06buxI9uDF8yPm50OAyYl/dGsTndPqYQidc8GcTsea
Nge8Ideyb6gyu0KlK8qS9eeRhLI9Csu4033ErkFiyc415+8xbeeihel28TS/cheV
Brh+wC5KLwE9CJ29afothFbcJ+QHAuQpf/yncRs0Tps+Elx3PxXn34j3ZuokB+/n
Xer3i0SiVPSavT++2mjfmqqfk25/9I/iRSaFr4I85uOHbxnsJqyUmbqohNUk4Y5E
I0WhiB+tFO2qXT92f2fhYL0TEK8OgQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMFl
C+8aIi+lnc8A4jRrWx6NdknYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MEVBMjZBOERBMDQxMUVGOERFRTcwNUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsvUMA0GCSqGSIb3DQEB
CwUAA4IBAQDW9HVGMmeRELLUDFRjr07EmnyqS63i345SM+j6YIGXZueD929SfLLy
8hZ24fliDZBsRyX1/IzAVkSHvAVrrotgutEzQ1XvxKgJD7HOHN2o7R/3zUycopa1
KK6nFcEpp1bauvtw19UcimnOTzfFQaDr7qnO0F4TxeOiJkg2BsAHNRwPifdkNbJe
A2e6nMw8HX00wOkIK+cD017T2u+n9N6GEZGlgISlTp1/sFRtpn7uZiVK+MxEP8ru
YayzsxOt2emSGJphVxfX8fC5SauIGP0Q6dkDSP/h6a1mTr4nR4y+6ecDxfO6bY3r
HPM1r6G6kVm6zWYfVbzOkrGIdmC2Rng7
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:51:50 2025 by rpki-client