Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4C74D9EDA4F11EFAEFF1E51762E951A.roa
File: A4C74D9EDA4F11EFAEFF1E51762E951A.roa (raw, json)
Hash identifier: Dso0F4IdnxdDj6Xw2CwwGRlOfAWTxpa16ze+YZYI730=
Subject key identifier: 0A:D6:8A:DE:33:70:5C:D8:6A:1D:6A:0A:8C:72:11:57:BB:D5:33:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4C74D9EDA4F11EFAEFF1E51762E951A.roa
Signing time: Fri 24 Jan 2025 12:35:07 +0000
ROA not before: Fri 24 Jan 2025 12:35:04 +0000
ROA not after: Sat 08 Feb 2025 12:35:04 +0000
asID: 18229
IP address blocks: 154.210.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83676 (0x146dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:35:04 2025 GMT
Not After : Feb 8 12:35:04 2025 GMT
Subject: CN=679388fb-b79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:ec:db:0e:95:26:bf:4a:45:82:24:08:97:
e4:6a:8d:a4:b3:11:11:cb:08:67:7c:31:c4:de:d0:
2a:8a:e7:24:1d:f4:99:71:66:46:b6:b3:91:4d:5c:
a9:42:9b:2a:8c:ef:3b:c8:80:4f:b2:61:1f:06:92:
6c:98:2b:4f:ff:2e:e2:b9:07:7c:25:f9:f7:7e:38:
01:90:c1:d8:0c:49:3f:06:c7:1b:00:14:52:a6:69:
03:53:bd:2b:ff:44:8b:85:f1:cf:43:05:18:97:64:
0d:75:4b:3f:70:6e:49:50:3a:e1:14:6b:3b:4e:71:
54:02:13:19:33:38:5b:9f:9f:e9:14:5a:a2:90:2c:
2d:8a:af:fe:ee:5f:ac:4a:9c:34:e7:9a:9b:7b:c1:
90:3e:6a:0b:54:7b:12:05:6d:aa:60:e2:8e:d6:1b:
8c:33:64:9a:51:cd:60:4b:a9:8e:5d:a8:0e:f4:c0:
31:07:4b:83:60:4c:81:6c:5f:c7:f7:68:43:ae:4a:
af:79:b9:3f:3e:b6:03:01:31:fd:ff:5d:19:b9:b2:
57:f2:7e:e2:24:a5:8a:1c:74:c0:90:e8:67:fd:da:
65:5e:4b:16:5a:64:93:09:08:8e:7c:61:f4:28:53:
29:6f:d7:f9:5d:f5:67:d5:10:54:a3:cc:6f:fd:b9:
5d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D6:8A:DE:33:70:5C:D8:6A:1D:6A:0A:8C:72:11:57:BB:D5:33:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4C74D9EDA4F11EFAEFF1E51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.162.0/24
Signature Algorithm: sha256WithRSAEncryption
95:0e:38:e1:cb:00:db:74:48:c7:45:28:50:13:2c:42:80:70:
50:71:76:af:75:91:9f:25:2c:7b:2d:fb:a3:32:e2:20:f3:58:
e1:86:3b:49:c2:1c:18:2f:0c:81:7a:e4:99:ab:ca:98:fe:21:
0b:5a:39:8a:fd:f6:64:42:97:e4:4a:20:e8:55:12:a7:59:8a:
2a:de:42:41:a6:87:7d:b8:fb:b6:b4:2a:41:0d:24:ec:d1:1f:
9f:7d:53:aa:a0:13:0b:8b:11:9f:a0:c2:42:ad:90:23:6b:00:
cc:3c:26:1d:f3:e7:e3:4c:ab:e9:c6:16:ed:5f:a0:df:eb:ad:
bb:fe:3d:3e:51:fe:97:fc:0c:79:6c:34:ee:c5:2f:53:2d:36:
c8:82:1f:bb:38:af:bd:9f:20:b6:b6:b0:51:f7:bc:8c:5d:1c:
2c:10:4d:ca:be:27:ee:c8:56:c5:72:b8:8d:88:1d:44:15:85:
af:35:b6:e3:9e:d4:31:bf:8e:bc:f1:d1:43:0c:7d:f6:ac:da:
06:02:55:b4:81:bc:4a:e0:25:7a:85:cf:ed:02:56:42:5c:de:
b1:4b:0c:75:b8:34:76:22:19:94:a9:e8:a7:bd:ec:76:ff:47:
19:c5:86:fe:be:33:7f:1e:da:c1:79:a0:57:38:d4:f1:8b:3f:
b9:22:7d:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUbcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTIzNTA0WhcNMjUwMjA4MTIzNTA0WjAYMRYw
FAYDVQQDEw02NzkzODhmYi1iNzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtgXs2w6VJr9KRYIkCJfkao2ksxERywhnfDHE3tAqiuckHfSZcWZGtrOR
TVypQpsqjO87yIBPsmEfBpJsmCtP/y7iuQd8Jfn3fjgBkMHYDEk/BscbABRSpmkD
U70r/0SLhfHPQwUYl2QNdUs/cG5JUDrhFGs7TnFUAhMZMzhbn5/pFFqikCwtiq/+
7l+sSpw055qbe8GQPmoLVHsSBW2qYOKO1huMM2SaUc1gS6mOXagO9MAxB0uDYEyB
bF/H92hDrkqvebk/PrYDATH9/10ZubJX8n7iJKWKHHTAkOhn/dplXksWWmSTCQiO
fGH0KFMpb9f5XfVn1RBUo8xv/bld7wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFArW
it4zcFzYah1qCoxyEVe71TPgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNEM3NEQ5RURBNEYxMUVGQUVGRjFFNTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtKiMA0GCSqGSIb3DQEB
CwUAA4IBAQCVDjjhywDbdEjHRShQEyxCgHBQcXavdZGfJSx7LfujMuIg81jhhjtJ
whwYLwyBeuSZq8qY/iELWjmK/fZkQpfkSiDoVRKnWYoq3kJBpod9uPu2tCpBDSTs
0R+ffVOqoBMLixGfoMJCrZAjawDMPCYd8+fjTKvpxhbtX6Df6627/j0+Uf6X/Ax5
bDTuxS9TLTbIgh+7OK+9nyC2trBR97yMXRwsEE3KvifuyFbFcriNiB1EFYWvNbbj
ntQxv4688dFDDH32rNoGAlW0gbxK4CV6hc/tAlZCXN6xSwx1uDR2IhmUqeinvex2
/0cZxYb+vjN/HtrBeaBXONTxiz+5In3p
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:36 2025 by rpki-client