Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/962BB8D6DA2911EFA23FA450762E951A.roa
File: 962BB8D6DA2911EFA23FA450762E951A.roa (raw, json)
Hash identifier: vkF0VCL8v4YSvOMyXtlyhmIFbL/vxDR9kM3AWXQiOOA=
Subject key identifier: 9C:C6:E5:14:27:91:6F:F4:7D:8A:3F:97:AD:C7:BC:F5:BD:64:17:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014442
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/962BB8D6DA2911EFA23FA450762E951A.roa
Signing time: Fri 24 Jan 2025 08:02:42 +0000
ROA not before: Fri 24 Jan 2025 08:02:38 +0000
ROA not after: Thu 13 Mar 2025 08:02:38 +0000
asID: 63139
IP address blocks: 154.203.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83010 (0x14442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:02:38 2025 GMT
Not After : Mar 13 08:02:38 2025 GMT
Subject: CN=67934922-51a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:53:d0:a0:c8:b2:e3:f0:b6:39:4d:89:96:df:
4f:99:20:26:ff:a3:d6:92:34:83:3e:2f:41:91:08:
b3:ad:4a:71:8d:81:de:f4:a8:bf:d5:9b:6c:84:6e:
9e:c6:02:22:80:cf:0e:0a:ec:5c:47:2e:05:40:77:
e0:bb:ea:61:7d:c3:91:4a:11:1c:c0:40:7b:53:0b:
de:08:a3:0e:24:1e:50:33:de:52:3a:fb:77:a9:cc:
9c:39:28:7e:20:08:05:d7:75:2c:62:2e:55:78:eb:
0a:06:07:c1:6b:af:ba:5e:43:6e:94:14:e6:73:c5:
4d:fd:de:8c:37:28:c4:54:9c:d8:77:8c:fd:bc:6a:
7b:6c:8b:3f:a9:d2:c0:ed:76:5e:77:ca:56:3d:93:
e9:de:00:df:01:ef:13:cd:ac:19:47:d3:4b:73:77:
55:c6:b1:bd:39:ca:ef:55:58:2d:38:0a:f8:bf:f0:
c8:5e:96:17:62:f1:cb:8e:16:d2:bf:42:32:dc:f3:
d3:91:76:44:dd:07:7b:39:16:9a:bc:b2:42:21:72:
c6:02:30:a4:d0:21:9b:17:c7:22:d7:56:f2:21:07:
45:04:d9:62:1f:b4:3d:f9:b2:89:6d:5b:89:81:be:
d4:67:57:d7:72:83:e0:e2:39:82:77:fb:f9:31:0c:
a7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C6:E5:14:27:91:6F:F4:7D:8A:3F:97:AD:C7:BC:F5:BD:64:17:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/962BB8D6DA2911EFA23FA450762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.189.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:8d:bd:2c:13:50:1c:e8:c9:b2:2f:04:88:f1:f7:0f:29:04:
9a:49:d4:a8:be:bf:c8:37:79:df:93:bb:65:69:a6:78:cf:ca:
56:d6:34:58:e1:83:b6:22:18:ed:14:de:b4:57:05:60:49:c2:
fc:d7:f0:72:31:e3:51:9a:f5:50:62:03:32:be:eb:92:d3:8c:
7f:d1:f3:a0:a7:02:49:e1:dc:af:a2:f7:f5:4f:23:28:e9:e7:
de:d4:77:98:2a:34:5e:01:ef:af:c6:cf:ae:2d:0a:4c:10:02:
3c:85:69:4f:5d:5d:ac:6b:53:05:a3:c2:2f:fb:98:60:f7:da:
c4:8a:c5:56:e9:0e:bf:eb:be:9f:34:0b:1f:78:75:ba:23:6d:
1e:3b:55:07:35:ca:57:37:f3:c4:24:c2:bf:ba:64:af:e9:6b:
5c:ae:c8:16:e7:99:5b:ea:05:29:b5:6f:1f:33:41:10:14:34:
85:2f:74:58:a7:25:ca:67:81:c7:55:43:16:7f:e8:a2:0b:45:
3f:8e:e4:39:49:a0:b9:4e:d6:41:87:6f:e4:e6:cf:c9:f2:78:
72:b4:d2:09:ce:28:d6:5a:f0:6f:0e:13:4e:65:18:dc:a2:15:
54:26:b0:e2:cf:7e:3a:43:3b:79:fa:a0:c2:aa:0f:3d:f5:93:
6e:97:cf:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAURCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MDgwMjM4WhcNMjUwMzEzMDgwMjM4WjAYMRYw
FAYDVQQDEw02NzkzNDkyMi01MWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6lPQoMiy4/C2OU2Jlt9PmSAm/6PWkjSDPi9BkQizrUpxjYHe9Ki/1Zts
hG6exgIigM8OCuxcRy4FQHfgu+phfcORShEcwEB7UwveCKMOJB5QM95SOvt3qcyc
OSh+IAgF13UsYi5VeOsKBgfBa6+6XkNulBTmc8VN/d6MNyjEVJzYd4z9vGp7bIs/
qdLA7XZed8pWPZPp3gDfAe8TzawZR9NLc3dVxrG9OcrvVVgtOAr4v/DIXpYXYvHL
jhbSv0Iy3PPTkXZE3Qd7ORaavLJCIXLGAjCk0CGbF8ci11byIQdFBNliH7Q9+bKJ
bVuJgb7UZ1fXcoPg4jmCd/v5MQynmQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJzG
5RQnkW/0fYo/l63HvPW9ZBefMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NjJCQjhENkRBMjkxMUVGQTIzRkE0NTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsu9MA0GCSqGSIb3DQEB
CwUAA4IBAQAPjb0sE1Ac6MmyLwSI8fcPKQSaSdSovr/IN3nfk7tlaaZ4z8pW1jRY
4YO2IhjtFN60VwVgScL81/ByMeNRmvVQYgMyvuuS04x/0fOgpwJJ4dyvovf1TyMo
6efe1HeYKjReAe+vxs+uLQpMEAI8hWlPXV2sa1MFo8Iv+5hg99rEisVW6Q6/676f
NAsfeHW6I20eO1UHNcpXN/PEJMK/umSv6WtcrsgW55lb6gUptW8fM0EQFDSFL3RY
pyXKZ4HHVUMWf+iiC0U/juQ5SaC5TtZBh2/k5s/J8nhytNIJzijWWvBvDhNOZRjc
ohVUJrDiz346Qzt5+qDCqg899ZNul88B
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:55 2025 by rpki-client