Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF9C32ECDA5511EFA3C6AD7B762E951A.roa
File: AF9C32ECDA5511EFA3C6AD7B762E951A.roa (raw, json)
Hash identifier: 24LBl8QjiiK5AFIe3Tvzr38RxlYVM5OmOzEABOB0hDM=
Subject key identifier: B3:45:15:C6:DA:16:ED:75:F4:C8:D1:F4:F3:30:14:E2:EB:8C:5C:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01475D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF9C32ECDA5511EFA3C6AD7B762E951A.roa
Signing time: Fri 24 Jan 2025 13:18:22 +0000
ROA not before: Fri 24 Jan 2025 13:18:19 +0000
ROA not after: Sat 01 Mar 2025 13:18:19 +0000
asID: 44559
IP address blocks: 154.205.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83805 (0x1475d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:18:19 2025 GMT
Not After : Mar 1 13:18:19 2025 GMT
Subject: CN=6793931e-8b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:d4:4d:da:11:77:d5:ed:0d:9d:e1:10:c2:
70:e9:ea:fd:03:c7:0f:37:74:e4:3e:c9:81:1c:8e:
9c:9e:4f:39:4c:03:36:4c:02:26:65:ff:db:43:b2:
2f:9e:18:84:95:8c:7d:2c:62:12:a9:31:8a:4e:0e:
1b:0d:99:dd:cc:66:52:e8:05:61:bb:06:10:0b:5b:
4b:ad:14:35:5d:92:d8:58:3e:c3:98:23:c9:75:de:
e1:53:8d:f8:72:25:63:60:ac:8e:f0:17:5d:cf:f4:
97:07:3b:2f:de:59:19:c6:f9:86:35:f6:39:c5:d2:
f8:41:7d:de:b9:b9:e4:0e:0e:d5:dd:18:1f:dd:f7:
9a:c6:a3:ec:5c:98:08:c5:77:9c:03:17:ac:1c:4c:
44:e4:9e:2f:73:79:d3:cb:fd:88:66:33:b8:2b:c5:
61:8d:7f:f8:6a:87:a1:00:31:60:83:3f:ef:61:e5:
c8:f2:0d:66:9a:72:00:5d:0c:f9:05:3a:22:ff:83:
25:3a:00:b2:d2:0f:28:d0:e0:9b:67:9f:bb:29:cb:
11:90:44:d2:31:31:00:a6:a1:27:86:ce:72:36:40:
91:69:f1:b7:4d:14:e0:b0:38:e3:37:14:24:b2:c8:
c3:9d:03:67:cb:33:0d:9e:b1:ba:a7:64:dd:7b:ae:
36:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:45:15:C6:DA:16:ED:75:F4:C8:D1:F4:F3:30:14:E2:EB:8C:5C:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF9C32ECDA5511EFA3C6AD7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.241.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:4a:9b:7a:56:47:1a:f7:4e:ec:1e:2d:eb:6c:d9:30:37:33:
f6:95:4e:67:4e:22:39:ac:79:e7:e0:c3:f2:47:72:97:e3:4e:
6a:9d:d3:6e:fe:f2:52:3c:c3:a2:ed:06:08:3a:18:75:64:1e:
f0:27:63:7b:1d:2b:6e:d5:78:ee:8f:f8:13:d2:65:5b:4a:58:
12:98:da:0e:37:1d:91:81:b7:81:27:b2:55:fd:ee:8e:9b:94:
b6:b8:b2:95:05:2d:87:b6:5e:9b:c9:ad:2f:d1:5e:c3:5c:d9:
1a:dc:04:92:6f:a1:1e:29:b5:bb:39:04:f4:df:2b:f1:b0:7a:
d3:ae:2c:34:2d:f4:66:93:15:93:2c:91:86:88:0f:ec:f8:53:
f3:9f:c6:9e:f5:1b:46:d5:8f:ef:8e:d1:55:d4:c4:5e:68:d4:
40:9b:27:ff:31:c2:6c:9b:11:f2:67:48:36:d9:9f:18:14:2b:
3c:b1:37:bd:ff:7c:93:a1:5e:dc:e5:11:fc:e5:be:0c:e0:8e:
f6:05:8d:8c:05:8c:ff:ed:fe:39:28:9d:21:0c:95:64:f3:0a:
19:ed:07:1f:e3:5a:a6:49:a9:dc:0e:75:44:03:8d:9c:e0:de:
b6:8f:71:8b:4d:d1:36:a7:59:75:5b:c4:cf:52:6a:54:10:c8:
86:c4:59:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUddMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTMxODE5WhcNMjUwMzAxMTMxODE5WjAYMRYw
FAYDVQQDEw02NzkzOTMxZS04YjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArYvUTdoRd9XtDZ3hEMJw6er9A8cPN3TkPsmBHI6cnk85TAM2TAImZf/b
Q7IvnhiElYx9LGISqTGKTg4bDZndzGZS6AVhuwYQC1tLrRQ1XZLYWD7DmCPJdd7h
U434ciVjYKyO8Bddz/SXBzsv3lkZxvmGNfY5xdL4QX3eubnkDg7V3Rgf3feaxqPs
XJgIxXecAxesHExE5J4vc3nTy/2IZjO4K8VhjX/4aoehADFggz/vYeXI8g1mmnIA
XQz5BToi/4MlOgCy0g8o0OCbZ5+7KcsRkETSMTEApqEnhs5yNkCRafG3TRTgsDjj
NxQkssjDnQNnyzMNnrG6p2Tde642BQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLNF
FcbaFu119MjR9PMwFOLrjFyiMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRjlDMzJFQ0RBNTUxMUVGQTNDNkFEN0I3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms3xMA0GCSqGSIb3DQEB
CwUAA4IBAQAcSpt6Vkca907sHi3rbNkwNzP2lU5nTiI5rHnn4MPyR3KX405qndNu
/vJSPMOi7QYIOhh1ZB7wJ2N7HStu1Xjuj/gT0mVbSlgSmNoONx2RgbeBJ7JV/e6O
m5S2uLKVBS2Htl6bya0v0V7DXNka3ASSb6EeKbW7OQT03yvxsHrTriw0LfRmkxWT
LJGGiA/s+FPzn8ae9RtG1Y/vjtFV1MReaNRAmyf/McJsmxHyZ0g22Z8YFCs8sTe9
/3yToV7c5RH85b4M4I72BY2MBYz/7f45KJ0hDJVk8woZ7Qcf41qmSancDnVEA42c
4N62j3GLTdE2p1l1W8TPUmpUEMiGxFlq
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:52:19 2025 by rpki-client