Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B23FF3C6DA4B11EF934C17B5762E951A.roa
File: B23FF3C6DA4B11EF934C17B5762E951A.roa (raw, json)
Hash identifier: 4xigJUK+PmIqYQKwwv2xnGP1Guqw+1Tza1FWU5wwjNs=
Subject key identifier: DC:D9:75:0D:3C:87:AF:72:0C:25:AF:52:E4:5F:33:8B:A3:F2:D2:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01467B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B23FF3C6DA4B11EF934C17B5762E951A.roa
Signing time: Fri 24 Jan 2025 12:06:52 +0000
ROA not before: Fri 24 Jan 2025 12:06:48 +0000
ROA not after: Tue 11 Mar 2025 12:06:48 +0000
asID: 138915
IP address blocks: 154.95.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83579 (0x1467b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:06:48 2025 GMT
Not After : Mar 11 12:06:48 2025 GMT
Subject: CN=6793825c-18ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e7:ad:20:31:de:03:55:21:43:1b:96:32:87:
b6:34:7c:91:2d:54:82:4f:d9:c6:85:0a:3c:ff:49:
a0:b6:50:8f:03:5d:16:5e:e8:4b:f3:e0:5d:86:e2:
1f:42:8f:7b:a7:5d:29:e0:49:e5:3e:32:b0:87:5f:
39:04:12:bc:b9:f3:fc:95:08:03:ab:38:42:af:9f:
ad:8a:ad:82:20:15:f7:0d:c9:01:d6:b5:ec:7f:f2:
35:00:7a:a2:51:69:46:53:89:1a:3b:67:8f:2e:c0:
ef:8c:38:6e:7e:50:23:3a:71:f5:af:43:63:4d:59:
1b:14:ee:1d:eb:16:7d:f6:64:07:12:fe:c3:0b:d2:
b2:d5:1c:1f:a3:4d:bc:c6:89:42:d4:a0:d0:ec:f4:
47:11:53:2e:4b:ed:da:b3:8c:d1:7b:b2:42:c3:77:
97:2b:c5:f5:46:c3:97:fa:d6:04:2b:6f:98:e4:36:
f1:2c:6f:2e:51:b5:27:e7:d2:6f:c6:db:2e:7a:93:
fa:b9:fc:20:ed:25:33:57:b1:8b:96:55:4c:d0:9b:
d3:94:73:25:32:2a:84:70:bf:cb:43:55:06:16:5b:
c0:39:a8:06:5c:84:76:68:cd:df:0a:73:6d:2f:f5:
1d:7b:bd:4e:6c:1b:65:10:e8:73:cd:64:73:3b:e5:
9c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D9:75:0D:3C:87:AF:72:0C:25:AF:52:E4:5F:33:8B:A3:F2:D2:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B23FF3C6DA4B11EF934C17B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.72.0/22
Signature Algorithm: sha256WithRSAEncryption
16:2c:d6:38:90:b5:3b:3f:3a:fd:b4:14:37:01:81:ce:df:f3:
3f:44:d8:62:d6:25:0f:fe:41:48:ce:e1:8b:86:18:ec:66:cc:
a0:d6:b2:7f:a6:ef:b2:03:f3:82:c0:5a:cb:39:b9:d0:b6:74:
dd:d4:cc:3b:e4:58:3f:91:b6:ab:f6:54:9f:f3:33:da:de:d0:
40:e9:fc:db:5c:0d:93:9a:71:08:2a:53:bf:0d:ed:ea:07:81:
b3:fa:bf:01:b0:77:f8:ba:13:f1:a2:9e:51:00:20:20:46:b4:
89:27:54:07:45:3b:84:73:2c:43:3d:a2:03:8d:74:f7:7d:e3:
79:7b:6b:71:1d:8e:d6:78:70:e6:27:fe:79:39:5d:5f:f3:87:
f9:f4:48:e6:79:a8:9f:2d:c5:35:00:60:b0:af:ac:06:53:20:
fd:35:bd:d7:f6:e8:c8:f9:96:b8:82:42:a2:9f:2d:22:89:1f:
87:d1:24:ce:df:8d:0f:65:17:ef:27:0d:35:d5:9a:10:d1:ff:
c7:04:10:4f:8c:02:58:86:1b:5e:83:2f:ce:2c:25:95:6a:1f:
b5:61:86:7c:09:9d:8f:96:45:11:c7:0f:6e:a8:9b:7f:93:f1:
a7:15:47:43:22:78:7d:75:d4:4a:c0:7c:a1:dd:f2:4b:78:2e:
a1:3c:82:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUZ7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTIwNjQ4WhcNMjUwMzExMTIwNjQ4WjAYMRYw
FAYDVQQDEw02NzkzODI1Yy0xOGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0+etIDHeA1UhQxuWMoe2NHyRLVSCT9nGhQo8/0mgtlCPA10WXuhL8+Bd
huIfQo97p10p4EnlPjKwh185BBK8ufP8lQgDqzhCr5+tiq2CIBX3DckB1rXsf/I1
AHqiUWlGU4kaO2ePLsDvjDhuflAjOnH1r0NjTVkbFO4d6xZ99mQHEv7DC9Ky1Rwf
o028xolC1KDQ7PRHEVMuS+3as4zRe7JCw3eXK8X1RsOX+tYEK2+Y5DbxLG8uUbUn
59JvxtsuepP6ufwg7SUzV7GLllVM0JvTlHMlMiqEcL/LQ1UGFlvAOagGXIR2aM3f
CnNtL/Ude71ObBtlEOhzzWRzO+WcIQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNzZ
dQ08h69yDCWvUuRfM4uj8tJwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMjNGRjNDNkRBNEIxMUVGOTM0QzE3QjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCml9IMA0GCSqGSIb3DQEB
CwUAA4IBAQAWLNY4kLU7Pzr9tBQ3AYHO3/M/RNhi1iUP/kFIzuGLhhjsZsyg1rJ/
pu+yA/OCwFrLObnQtnTd1Mw75Fg/kbar9lSf8zPa3tBA6fzbXA2TmnEIKlO/De3q
B4Gz+r8BsHf4uhPxop5RACAgRrSJJ1QHRTuEcyxDPaIDjXT3feN5e2txHY7WeHDm
J/55OV1f84f59EjmeaifLcU1AGCwr6wGUyD9Nb3X9ujI+Za4gkKiny0iiR+H0STO
340PZRfvJw011ZoQ0f/HBBBPjAJYhhtegy/OLCWVah+1YYZ8CZ2PlkURxw9uqJt/
k/GnFUdDInh9ddRKwHyh3fJLeC6hPIIR
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:42:53 2025 by rpki-client