Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7F290C0DBF111EFBED66259762E951A.roa
File: A7F290C0DBF111EFBED66259762E951A.roa (raw, json)
Hash identifier: 13LRmCZU7vUM9oN2EXqRp4cxh7t8pxLBtPpFlM64yXA=
Subject key identifier: FE:57:84:EB:3E:D0:6F:41:A1:7D:CA:EA:53:FB:3F:71:54:47:68:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7F290C0DBF111EFBED66259762E951A.roa
Signing time: Sun 26 Jan 2025 14:27:22 +0000
ROA not before: Sun 26 Jan 2025 14:27:18 +0000
ROA not after: Fri 21 Mar 2025 14:27:18 +0000
asID: 138915
IP address blocks: 154.93.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84680 (0x14ac8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 14:27:18 2025 GMT
Not After : Mar 21 14:27:18 2025 GMT
Subject: CN=6796464a-f203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3e:15:f3:f6:f2:ee:a8:1c:f1:0c:0e:ee:35:
9a:8f:f1:a6:8a:ba:96:14:94:eb:ee:87:a5:47:ec:
e7:55:3e:8b:7a:e4:5a:6a:70:8d:83:8a:82:1f:54:
aa:5d:94:08:0c:e3:0d:6e:69:d4:8a:38:51:6f:bb:
f6:d7:f0:22:c0:a6:1a:e5:ac:a9:44:b4:77:20:91:
d5:07:f2:ef:2f:d9:6f:be:84:3e:7b:e4:fa:c2:48:
9c:c9:9c:e7:1a:17:30:0e:b8:88:0c:87:93:f6:dc:
0a:ff:28:00:e0:99:77:3f:bb:dd:0f:e9:4d:4a:6e:
21:97:4a:84:de:ea:50:e6:7e:c0:0a:ab:ba:42:47:
ef:14:f4:ac:c3:0b:7c:1c:30:28:15:e8:25:b6:9e:
b0:81:bf:4e:32:01:60:8a:ca:ee:54:f4:cd:b6:27:
c9:58:86:a8:4f:94:a8:ee:0d:dc:dd:67:77:fa:b7:
4c:52:c8:ed:3c:45:bf:c2:95:81:97:9c:d2:6e:9e:
c2:8d:69:16:bd:bd:ab:4e:d2:9e:d2:de:7d:76:0a:
95:c3:96:ef:9c:6f:9f:12:20:9d:1b:f7:33:7b:45:
84:8a:97:27:f2:04:9d:da:ba:d6:ca:5b:57:f8:38:
18:8c:55:b5:10:bc:66:61:24:6d:34:de:be:fe:48:
62:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:57:84:EB:3E:D0:6F:41:A1:7D:CA:EA:53:FB:3F:71:54:47:68:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7F290C0DBF111EFBED66259762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.47.0/24
Signature Algorithm: sha256WithRSAEncryption
04:f4:f6:eb:19:95:2d:af:95:ff:44:45:b9:39:58:70:e7:d9:
b5:8c:3d:c9:b4:f9:9e:80:b0:d1:ce:0e:80:cf:0d:10:1f:7c:
80:7c:11:1a:57:a8:3f:1f:0d:b2:1e:6d:a3:bc:ad:ab:08:90:
6a:59:11:5a:3f:2c:b5:9d:13:17:02:45:94:f1:2c:c3:17:62:
a0:7f:e6:9f:75:8b:7e:0e:da:84:4b:8a:29:59:f5:c3:1f:e6:
0e:db:b1:01:1c:4a:f3:b4:73:d1:39:2c:ff:46:5f:d6:42:14:
35:74:6a:17:84:25:25:d7:27:30:72:94:11:38:d9:58:cc:d3:
44:d0:c5:e0:ae:71:8e:fb:ae:5b:15:b1:bc:87:eb:a4:b3:8b:
9d:85:a8:20:01:28:3c:3f:6a:0a:2a:f9:9d:3a:c1:9e:2b:19:
ca:44:3b:ab:52:dc:19:a2:44:83:b8:ee:e5:d6:48:ba:f9:cc:
98:70:35:6a:55:fd:71:34:9e:03:c1:96:d3:e7:2d:0d:31:db:
1f:55:40:7e:2e:5a:4a:cc:49:81:8e:94:26:02:f2:2d:7c:a4:
d5:24:97:c7:3b:7e:a9:05:80:02:e5:a5:90:f1:89:b3:e5:26:
1a:32:d7:25:63:2c:9f:15:d5:c5:c4:03:b6:6b:e2:39:d4:e8:
c9:1f:42:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUrIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI2MTQyNzE4WhcNMjUwMzIxMTQyNzE4WjAYMRYw
FAYDVQQDEw02Nzk2NDY0YS1mMjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyD4V8/by7qgc8QwO7jWaj/GmirqWFJTr7oelR+znVT6LeuRaanCNg4qC
H1SqXZQIDOMNbmnUijhRb7v21/AiwKYa5aypRLR3IJHVB/LvL9lvvoQ+e+T6wkic
yZznGhcwDriIDIeT9twK/ygA4Jl3P7vdD+lNSm4hl0qE3upQ5n7ACqu6QkfvFPSs
wwt8HDAoFegltp6wgb9OMgFgisruVPTNtifJWIaoT5So7g3c3Wd3+rdMUsjtPEW/
wpWBl5zSbp7CjWkWvb2rTtKe0t59dgqVw5bvnG+fEiCdG/cze0WEipcn8gSd2rrW
yltX+DgYjFW1ELxmYSRtNN6+/khijQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP5X
hOs+0G9BoX3K6lP7P3FUR2hoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BN0YyOTBDMERCRjExMUVGQkVENjYyNTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml0vMA0GCSqGSIb3DQEB
CwUAA4IBAQAE9PbrGZUtr5X/REW5OVhw59m1jD3JtPmegLDRzg6Azw0QH3yAfBEa
V6g/Hw2yHm2jvK2rCJBqWRFaPyy1nRMXAkWU8SzDF2Kgf+afdYt+DtqES4opWfXD
H+YO27EBHErztHPROSz/Rl/WQhQ1dGoXhCUl1ycwcpQRONlYzNNE0MXgrnGO+65b
FbG8h+uks4udhaggASg8P2oKKvmdOsGeKxnKRDurUtwZokSDuO7l1ki6+cyYcDVq
Vf1xNJ4DwZbT5y0NMdsfVUB+LlpKzEmBjpQmAvItfKTVJJfHO36pBYAC5aWQ8Ymz
5SYaMtclYyyfFdXFxAO2a+I51OjJH0JB
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:00:11 2025 by rpki-client