Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91024D7CDA5411EFAAC4E872762E951A.roa
File: 91024D7CDA5411EFAAC4E872762E951A.roa (raw, json)
Hash identifier: e9XTDbnG5ARhARVnmxAHMp0va0XCxKedAD36s7xwHBM=
Subject key identifier: B7:25:AB:69:27:D1:83:DC:D7:BF:C1:0D:8A:AF:44:21:7C:76:BD:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014746
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91024D7CDA5411EFAAC4E872762E951A.roa
Signing time: Fri 24 Jan 2025 13:10:22 +0000
ROA not before: Fri 24 Jan 2025 13:10:18 +0000
ROA not after: Wed 05 Mar 2025 13:10:18 +0000
asID: 44559
IP address blocks: 154.209.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83782 (0x14746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:10:18 2025 GMT
Not After : Mar 5 13:10:18 2025 GMT
Subject: CN=6793913e-a22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:d1:ad:0d:86:4e:86:c8:de:bb:e8:ad:7d:
cd:79:3e:22:68:dc:66:80:a5:1b:56:14:a5:03:20:
08:e9:2a:58:85:b2:5e:12:47:3c:be:cc:ff:66:3a:
17:a5:a3:ec:7d:d5:b3:a0:11:d6:fe:09:ab:32:07:
45:cc:d2:e6:85:51:fc:7a:cc:f9:54:c3:4b:bf:09:
f6:d3:5d:0c:c8:45:58:25:90:77:b8:75:a1:48:69:
8f:1b:47:7e:65:08:48:4d:fb:c9:e4:85:a8:60:92:
ef:49:17:32:85:0a:81:a8:17:56:42:e9:d9:c9:5e:
96:86:54:fe:c7:3b:79:1c:68:57:fa:f9:01:38:6e:
72:03:3f:c9:23:ad:28:02:d7:55:17:21:67:ea:41:
f1:c3:1b:9a:c9:e7:60:43:ca:a4:04:f4:1c:6b:aa:
42:5c:4f:08:04:1d:32:20:62:39:8e:a7:d4:da:8d:
cb:34:2d:d0:4b:3a:80:bf:64:7f:98:11:bd:56:c1:
5c:b9:1b:51:bc:b3:fd:85:bb:c1:45:15:f0:58:75:
3a:68:96:3f:72:42:83:b9:e5:48:68:f6:1e:fd:54:
91:f0:68:09:b3:59:1c:99:54:89:fc:bc:ea:40:67:
7e:7e:a0:44:2f:3b:1d:3d:a3:f4:65:5d:8d:ec:e8:
df:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:25:AB:69:27:D1:83:DC:D7:BF:C1:0D:8A:AF:44:21:7C:76:BD:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91024D7CDA5411EFAAC4E872762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.139.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:71:46:e0:93:ae:60:0a:33:19:f0:2d:43:40:ac:bd:1c:91:
06:b9:11:96:23:93:e7:cf:0c:86:14:0e:22:b7:fe:d7:c2:74:
e4:fc:f4:5b:99:ae:68:92:a6:b6:0b:5d:67:31:ad:06:e7:d3:
03:6d:24:b6:ab:3e:ca:6e:39:a2:82:72:46:4d:dd:a9:eb:21:
1a:3d:35:62:09:33:df:9b:fc:36:61:e4:d7:82:94:90:e3:73:
5b:aa:52:45:59:ec:4e:5a:c6:30:24:ef:ff:2c:af:a3:e4:79:
69:6c:43:fd:33:6c:32:be:9e:74:c8:6f:f6:f7:e3:81:91:48:
be:d4:0e:c6:fa:68:70:14:7a:83:6b:d9:8b:d7:d9:f1:6b:60:
9b:3a:2a:31:7e:3b:b3:69:cf:44:2a:27:59:12:cf:ea:7d:56:
59:48:4b:56:31:c7:f9:77:e9:4a:0a:86:c4:e0:2f:15:84:92:
81:e1:ce:e1:5e:c8:f9:44:d9:6a:54:d8:7b:cf:40:c3:75:bb:
4c:65:ce:1b:d6:86:58:0b:39:4b:a7:a7:83:42:29:e8:e9:e4:
3f:87:15:3b:0e:7c:f7:0e:f2:53:ae:a2:ed:1f:17:95:75:8f:
15:bf:6a:c2:e4:f7:02:6c:1b:e5:fe:be:a8:eb:31:1c:0d:15:
18:87:45:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUdGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTMxMDE4WhcNMjUwMzA1MTMxMDE4WjAYMRYw
FAYDVQQDEw02NzkzOTEzZS1hMjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwRHRrQ2GTobI3rvorX3NeT4iaNxmgKUbVhSlAyAI6SpYhbJeEkc8vsz/
ZjoXpaPsfdWzoBHW/gmrMgdFzNLmhVH8esz5VMNLvwn2010MyEVYJZB3uHWhSGmP
G0d+ZQhITfvJ5IWoYJLvSRcyhQqBqBdWQunZyV6WhlT+xzt5HGhX+vkBOG5yAz/J
I60oAtdVFyFn6kHxwxuayedgQ8qkBPQca6pCXE8IBB0yIGI5jqfU2o3LNC3QSzqA
v2R/mBG9VsFcuRtRvLP9hbvBRRXwWHU6aJY/ckKDueVIaPYe/VSR8GgJs1kcmVSJ
/LzqQGd+fqBELzsdPaP0ZV2N7OjfZwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLcl
q2kn0YPc17/BDYqvRCF8dr0YMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MTAyNEQ3Q0RBNTQxMUVGQUFDNEU4NzI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtGLMA0GCSqGSIb3DQEB
CwUAA4IBAQCucUbgk65gCjMZ8C1DQKy9HJEGuRGWI5PnzwyGFA4it/7XwnTk/PRb
ma5okqa2C11nMa0G59MDbSS2qz7KbjmignJGTd2p6yEaPTViCTPfm/w2YeTXgpSQ
43NbqlJFWexOWsYwJO//LK+j5HlpbEP9M2wyvp50yG/29+OBkUi+1A7G+mhwFHqD
a9mL19nxa2CbOioxfjuzac9EKidZEs/qfVZZSEtWMcf5d+lKCobE4C8VhJKB4c7h
Xsj5RNlqVNh7z0DDdbtMZc4b1oZYCzlLp6eDQino6eQ/hxU7Dnz3DvJTrqLtHxeV
dY8Vv2rC5PcCbBvl/r6o6zEcDRUYh0XQ
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:28 2025 by rpki-client