Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8EE5BDCDA4111EF9F963572762E951A.roa
File: A8EE5BDCDA4111EF9F963572762E951A.roa (raw, json)
Hash identifier: bgBY5+Wfbfs0/WV8Fme19D8O+UpPVH/ued/G6yuXcMA=
Subject key identifier: 97:5C:77:C3:39:70:93:57:78:81:8E:3A:D8:FB:62:D9:9B:EE:44:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8EE5BDCDA4111EF9F963572762E951A.roa
Signing time: Fri 24 Jan 2025 10:55:01 +0000
ROA not before: Fri 24 Jan 2025 10:54:58 +0000
ROA not after: Wed 05 Mar 2025 10:54:58 +0000
asID: 202656
IP address blocks: 154.219.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83403 (0x145cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:54:58 2025 GMT
Not After : Mar 5 10:54:58 2025 GMT
Subject: CN=67937185-88ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:d3:f6:ca:aa:a3:02:52:38:af:14:f1:77:
37:66:2a:21:a7:9f:32:1f:41:7c:cc:dd:7d:62:0e:
70:f9:ad:62:fc:2e:55:0f:33:4e:bc:62:22:11:3e:
ac:52:24:dc:c4:25:82:c5:4d:08:94:7c:b0:76:56:
f0:78:3e:af:82:cb:79:b8:42:17:9c:fc:c7:20:96:
a0:e8:f0:c6:78:5c:4a:8f:60:b9:b5:8e:b1:cf:57:
1e:50:92:82:b2:4e:f0:34:36:1a:14:69:91:d1:95:
46:e1:e2:80:b6:7c:35:6a:79:83:2d:ef:26:cf:60:
42:26:a7:c4:33:7e:bb:75:96:7e:7d:70:53:30:6d:
1c:dc:d0:16:a4:e8:19:c6:1e:e7:fe:01:e2:cb:04:
71:43:f0:f7:2c:a0:f0:99:4c:ce:4d:29:29:cd:d2:
da:a2:97:0b:9b:8e:aa:6c:7b:1f:c2:a6:ae:9c:85:
8a:73:6f:a9:d5:7d:f6:61:32:13:e8:22:55:8a:f8:
40:05:0d:3b:37:c3:f9:82:ff:1f:01:3c:ec:3f:97:
47:96:1d:7a:01:81:36:5f:9f:90:e9:f3:c6:a9:23:
5d:47:ab:a6:87:e4:9a:1b:8f:08:db:5a:61:a6:bd:
f3:f2:23:3c:3f:24:2a:ff:44:2f:cb:52:e7:7a:21:
29:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5C:77:C3:39:70:93:57:78:81:8E:3A:D8:FB:62:D9:9B:EE:44:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8EE5BDCDA4111EF9F963572762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.27.0/24
Signature Algorithm: sha256WithRSAEncryption
38:44:a2:ac:6f:86:87:08:1a:6e:64:ab:1d:53:99:1d:c9:bd:
d0:6d:47:48:94:db:fd:04:c9:e7:dc:25:52:b4:d6:34:58:01:
50:83:0c:53:1d:89:8b:e6:36:f4:56:ac:84:6e:98:45:f4:57:
71:3e:06:8c:62:48:7d:4f:45:16:e3:5a:7a:13:2d:0f:9e:b0:
25:ee:21:30:e3:52:8b:91:57:cb:f9:65:e8:a4:1c:3a:3e:72:
2a:c7:ad:76:44:a9:b7:2e:16:b7:97:dd:e5:62:75:dc:36:2f:
d8:84:57:0a:5f:2c:37:ce:ba:19:96:f6:3b:46:9e:42:9e:e3:
54:d3:ca:cc:c2:9a:81:6e:b0:fd:f2:ac:ef:98:c9:a4:96:4c:
4f:00:a6:d4:f3:bb:c2:1d:30:94:06:b1:4d:03:c6:79:45:20:
3d:22:01:94:25:69:17:89:2a:9e:22:1c:df:fc:11:4f:aa:1a:
fd:6c:b8:3f:73:db:5d:46:42:5f:5e:5a:90:5f:32:5b:2d:a0:
04:04:4c:ff:55:65:4f:1e:e7:87:3f:18:a9:35:02:32:43:23:
03:0f:d9:92:cc:c1:b7:2c:c5:87:17:f4:12:b1:b5:6c:ee:fa:
2b:94:9c:8f:fb:1d:4a:77:9b:1f:d2:c4:22:2d:9a:30:36:0b:
a2:fe:bb:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUXLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTA1NDU4WhcNMjUwMzA1MTA1NDU4WjAYMRYw
FAYDVQQDEw02NzkzNzE4NS04OGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvDnT9sqqowJSOK8U8Xc3Ziohp58yH0F8zN19Yg5w+a1i/C5VDzNOvGIi
ET6sUiTcxCWCxU0IlHywdlbweD6vgst5uEIXnPzHIJag6PDGeFxKj2C5tY6xz1ce
UJKCsk7wNDYaFGmR0ZVG4eKAtnw1anmDLe8mz2BCJqfEM367dZZ+fXBTMG0c3NAW
pOgZxh7n/gHiywRxQ/D3LKDwmUzOTSkpzdLaopcLm46qbHsfwqaunIWKc2+p1X32
YTIT6CJVivhABQ07N8P5gv8fATzsP5dHlh16AYE2X5+Q6fPGqSNdR6umh+SaG48I
21phpr3z8iM8PyQq/0Qvy1LneiEpBwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJdc
d8M5cJNXeIGOOtj7Ytmb7kQvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BOEVFNUJEQ0RBNDExMUVGOUY5NjM1NzI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtsbMA0GCSqGSIb3DQEB
CwUAA4IBAQA4RKKsb4aHCBpuZKsdU5kdyb3QbUdIlNv9BMnn3CVStNY0WAFQgwxT
HYmL5jb0VqyEbphF9FdxPgaMYkh9T0UW41p6Ey0PnrAl7iEw41KLkVfL+WXopBw6
PnIqx612RKm3Lha3l93lYnXcNi/YhFcKXyw3zroZlvY7Rp5CnuNU08rMwpqBbrD9
8qzvmMmklkxPAKbU87vCHTCUBrFNA8Z5RSA9IgGUJWkXiSqeIhzf/BFPqhr9bLg/
c9tdRkJfXlqQXzJbLaAEBEz/VWVPHueHPxipNQIyQyMDD9mSzMG3LMWHF/QSsbVs
7vorlJyP+x1Kd5sf0sQiLZowNgui/rs3
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:56:58 2025 by rpki-client