Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F534ED8DA3411EFA981F997762E951A.roa
File: 8F534ED8DA3411EFA981F997762E951A.roa (raw, json)
Hash identifier: hnWUSnhx1X/61Y0KC28AAN8igbWeTn6YDo6EPWSLEoQ=
Subject key identifier: E4:A5:C1:C1:05:20:00:3F:C4:59:6F:E0:C0:9D:71:7B:D2:06:C0:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F534ED8DA3411EFA981F997762E951A.roa
Signing time: Fri 24 Jan 2025 09:21:15 +0000
ROA not before: Fri 24 Jan 2025 09:21:11 +0000
ROA not after: Tue 11 Mar 2025 09:21:11 +0000
asID: 138915
IP address blocks: 154.95.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83167 (0x144df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:21:11 2025 GMT
Not After : Mar 11 09:21:11 2025 GMT
Subject: CN=67935b8b-cc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:fb:3b:68:2a:a2:f9:e4:33:aa:61:e2:a0:
c9:69:e7:5d:ec:9e:91:ef:ab:c6:d7:f4:da:de:10:
e8:ea:04:46:9c:62:8f:18:6f:ec:eb:62:9c:16:88:
e7:30:41:57:17:2b:d5:79:4c:9b:76:f9:43:92:4a:
74:8f:1c:f6:1b:de:b5:a8:9d:b1:a1:e6:40:77:f0:
da:16:a7:39:da:77:05:f6:c7:8d:f9:5f:50:22:28:
05:17:ec:1d:09:d9:a4:5f:b6:01:44:9e:40:db:fb:
6b:b9:e0:63:e6:3e:f7:a1:9f:be:e0:d0:4f:7c:01:
cd:92:03:c5:ca:a1:1f:cd:70:2a:6e:18:0c:63:be:
33:c1:3f:82:fb:02:ce:ec:af:87:8f:78:55:c0:87:
15:51:d2:81:bb:73:f3:01:6d:7b:3c:51:3b:43:35:
da:b5:0f:44:f3:88:90:30:56:e0:39:3f:be:0c:6e:
00:38:1b:e4:97:95:91:eb:8c:59:16:28:09:f3:57:
ee:2f:51:fb:ae:c9:00:0b:c8:c0:ee:2d:f2:76:98:
a2:76:41:c3:66:be:44:79:9b:c4:6f:5f:4e:7b:12:
08:75:8f:60:1c:c7:de:6c:27:c0:a7:a5:1c:e6:13:
bd:03:8c:3a:77:70:c0:55:1d:b7:03:3c:21:cb:55:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A5:C1:C1:05:20:00:3F:C4:59:6F:E0:C0:9D:71:7B:D2:06:C0:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F534ED8DA3411EFA981F997762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.95.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e1:bf:30:0c:2b:56:5f:93:79:f8:24:72:02:3a:ae:21:34:
e3:5a:8e:59:78:8a:8e:29:7d:26:d6:3c:d4:04:6d:aa:af:76:
ea:5d:42:cc:c8:de:ed:b4:6d:54:57:f7:eb:e0:af:79:f1:96:
6e:82:dc:aa:ee:9e:4e:64:ab:c5:f1:94:ae:b6:85:84:17:fd:
96:cc:76:2a:a6:c6:d4:ef:06:3e:03:80:31:85:ad:81:b6:2e:
21:43:cd:17:70:87:1e:59:07:35:44:d8:0b:43:1c:59:f8:5b:
6d:ed:31:18:b0:f9:8c:89:89:4b:21:e1:10:ea:69:e7:f7:ac:
a0:98:f3:3c:f2:02:b1:2c:61:ef:65:24:59:bc:16:27:1a:96:
cf:e7:ee:26:41:0e:03:e9:62:1e:50:71:2e:18:3e:54:99:b6:
9b:90:f0:e0:23:f7:1c:62:aa:7d:72:49:87:2f:b3:47:84:4b:
9e:47:98:9c:57:25:6a:e1:15:06:26:fb:4e:07:45:42:0e:fb:
65:50:3a:79:ce:19:23:8d:f2:26:32:87:a4:64:b9:98:3b:18:
a9:86:a9:aa:a7:ef:cf:36:2d:b9:6f:30:0d:a7:4b:77:ac:13:
e0:8e:ab:99:19:90:96:4c:34:34:97:02:87:53:b0:a2:ea:7c:
be:ec:9c:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUTfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MDkyMTExWhcNMjUwMzExMDkyMTExWjAYMRYw
FAYDVQQDEw02NzkzNWI4Yi1jYzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1HT7O2gqovnkM6ph4qDJaedd7J6R76vG1/Ta3hDo6gRGnGKPGG/s62Kc
FojnMEFXFyvVeUybdvlDkkp0jxz2G961qJ2xoeZAd/DaFqc52ncF9seN+V9QIigF
F+wdCdmkX7YBRJ5A2/trueBj5j73oZ++4NBPfAHNkgPFyqEfzXAqbhgMY74zwT+C
+wLO7K+Hj3hVwIcVUdKBu3PzAW17PFE7QzXatQ9E84iQMFbgOT++DG4AOBvkl5WR
64xZFigJ81fuL1H7rskAC8jA7i3ydpiidkHDZr5EeZvEb19OexIIdY9gHMfebCfA
p6Uc5hO9A4w6d3DAVR23Azwhy1VbYwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOSl
wcEFIAA/xFlv4MCdcXvSBsBpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RjUzNEVEOERBMzQxMUVGQTk4MUY5OTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml9fMA0GCSqGSIb3DQEB
CwUAA4IBAQB34b8wDCtWX5N5+CRyAjquITTjWo5ZeIqOKX0m1jzUBG2qr3bqXULM
yN7ttG1UV/fr4K958ZZugtyq7p5OZKvF8ZSutoWEF/2WzHYqpsbU7wY+A4Axha2B
ti4hQ80XcIceWQc1RNgLQxxZ+Ftt7TEYsPmMiYlLIeEQ6mnn96ygmPM88gKxLGHv
ZSRZvBYnGpbP5+4mQQ4D6WIeUHEuGD5UmbabkPDgI/ccYqp9ckmHL7NHhEueR5ic
VyVq4RUGJvtOB0VCDvtlUDp5zhkjjfImMoekZLmYOxiphqmqp+/PNi25bzANp0t3
rBPgjquZGZCWTDQ0lwKHU7Ci6ny+7JyP
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:52:31 2025 by rpki-client