Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CE9D998C2A311EFB094DE54762E951A.roa
File: 9CE9D998C2A311EFB094DE54762E951A.roa (raw, json)
Hash identifier: Ha8E8S2EQ7IhYwDKXi6C9kjwLD8qos5Dmgg85ao71I8=
Subject key identifier: 24:E4:39:CC:7C:98:E3:52:BA:FF:46:8A:05:9C:7A:6F:82:D3:26:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01254E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CE9D998C2A311EFB094DE54762E951A.roa
Signing time: Wed 25 Dec 2024 09:35:44 +0000
ROA not before: Wed 25 Dec 2024 09:35:40 +0000
ROA not after: Thu 13 Feb 2025 09:35:40 +0000
asID: 138915
IP address blocks: 154.203.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75086 (0x1254e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:35:40 2024 GMT
Not After : Feb 13 09:35:40 2025 GMT
Subject: CN=676bd1f0-b59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:cd:02:fa:d8:48:3c:ce:21:ac:b3:f8:89:
d0:77:30:6c:7f:9e:f5:eb:1c:e1:ee:77:8f:0a:dd:
03:8e:d8:67:3b:f8:e9:68:47:c5:9f:c7:f2:34:18:
ac:48:70:8a:8b:a3:64:80:8d:da:6e:21:af:e6:33:
d6:67:ec:53:1c:9b:3e:32:98:77:0e:4c:7f:53:07:
9c:38:01:d1:98:4b:08:30:7c:d5:a0:59:3f:5e:92:
68:8e:37:ec:82:cf:c8:fe:de:a2:88:93:19:24:f6:
54:41:5f:da:6e:37:ed:c3:c9:94:98:1a:59:5c:53:
48:c2:d7:4e:fb:76:00:02:7e:a9:f4:2f:09:f3:f9:
ca:aa:b3:f7:72:19:9d:35:81:f5:19:b2:05:7f:11:
93:27:7d:1c:cd:cf:ea:59:1a:fe:a6:39:05:10:77:
6b:d8:62:26:7d:f7:c2:0c:75:32:a4:e7:e2:ac:5e:
94:38:49:ce:98:59:a5:f3:ce:da:48:34:ab:74:4a:
e2:c0:dc:ce:00:bd:84:0f:16:45:c0:ec:94:db:33:
cd:e1:0c:ed:26:75:fa:6b:0a:9c:1a:bf:cd:e6:e8:
63:99:68:96:a8:e2:0a:6c:6a:9a:4c:ce:2e:db:c3:
ed:08:72:a7:51:b6:04:ac:19:3b:eb:cc:c0:8a:8f:
c5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E4:39:CC:7C:98:E3:52:BA:FF:46:8A:05:9C:7A:6F:82:D3:26:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CE9D998C2A311EFB094DE54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.164.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:cb:f7:4f:bd:83:56:fb:45:0b:bf:cc:95:dd:aa:28:28:c7:
86:f6:fe:43:b6:36:05:e3:2b:b0:79:04:a7:66:a5:27:60:79:
10:f4:83:70:27:d3:89:9d:0d:77:72:47:96:f4:b4:ee:f0:f7:
3c:63:64:58:15:10:dd:85:e6:06:96:00:03:e2:87:12:54:1b:
e4:ad:fa:96:62:66:be:69:0e:69:cc:ee:45:30:6a:42:e8:65:
7a:33:d3:98:b0:86:67:ec:7f:86:fb:31:a7:40:77:61:27:1c:
24:76:33:b0:6d:22:c8:b2:89:27:0b:2e:fa:ac:0f:24:bb:b6:
37:5b:e5:ff:59:43:c2:bc:cf:1c:fb:c9:51:fa:e1:e9:7d:9f:
a2:d5:6b:ed:fe:db:74:1c:4a:60:0c:d4:05:31:96:f8:cf:90:
5a:1c:02:86:07:8c:b4:eb:4c:72:d7:f0:0a:ee:2a:13:30:35:
e1:2e:c3:de:cd:01:07:2b:af:ef:d0:ed:72:04:cc:bd:38:d6:
99:c4:d0:68:a6:ef:01:44:f3:14:ec:5e:1a:06:6d:33:1b:7d:
ff:0f:90:3e:59:9f:11:39:a4:2f:fd:81:c3:c3:85:52:b9:4e:
ac:ea:50:5e:c1:ba:f5:f0:eb:92:7a:12:9a:97:c0:0e:ef:4a:
3f:b6:3d:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASVOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDkzNTQwWhcNMjUwMjEzMDkzNTQwWjAYMRYw
FAYDVQQDEw02NzZiZDFmMC1iNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtPfNAvrYSDzOIayz+InQdzBsf5716xzh7nePCt0DjthnO/jpaEfFn8fy
NBisSHCKi6NkgI3abiGv5jPWZ+xTHJs+Mph3Dkx/UwecOAHRmEsIMHzVoFk/XpJo
jjfsgs/I/t6iiJMZJPZUQV/abjftw8mUmBpZXFNIwtdO+3YAAn6p9C8J8/nKqrP3
chmdNYH1GbIFfxGTJ30czc/qWRr+pjkFEHdr2GImfffCDHUypOfirF6UOEnOmFml
887aSDSrdEriwNzOAL2EDxZFwOyU2zPN4QztJnX6awqcGr/N5uhjmWiWqOIKbGqa
TM4u28PtCHKnUbYErBk768zAio/FLQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCTk
Ocx8mONSuv9GigWcem+C0yYaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85Q0U5RDk5OEMyQTMxMUVGQjA5NERFNTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsukMA0GCSqGSIb3DQEB
CwUAA4IBAQDEy/dPvYNW+0ULv8yV3aooKMeG9v5DtjYF4yuweQSnZqUnYHkQ9INw
J9OJnQ13ckeW9LTu8Pc8Y2RYFRDdheYGlgAD4ocSVBvkrfqWYma+aQ5pzO5FMGpC
6GV6M9OYsIZn7H+G+zGnQHdhJxwkdjOwbSLIsoknCy76rA8ku7Y3W+X/WUPCvM8c
+8lR+uHpfZ+i1Wvt/tt0HEpgDNQFMZb4z5BaHAKGB4y060xy1/AK7ioTMDXhLsPe
zQEHK6/v0O1yBMy9ONaZxNBopu8BRPMU7F4aBm0zG33/D5A+WZ8ROaQv/YHDw4VS
uU6s6lBewbr18OuSehKal8AO70o/tj38
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:45 2025 by rpki-client