Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA844644DB3C11EF83D8F394762E951A.roa
File: BA844644DB3C11EF83D8F394762E951A.roa (raw, json)
Hash identifier: tQEYyddFEUYrgOcXDvl/JCsfQxeA0/ZTConO0UnRDAM=
Subject key identifier: 2E:9E:8E:DD:27:C8:53:46:AB:59:0B:ED:B2:A7:EC:A9:82:B0:93:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA844644DB3C11EF83D8F394762E951A.roa
Signing time: Sat 25 Jan 2025 16:52:15 +0000
ROA not before: Sat 25 Jan 2025 16:52:11 +0000
ROA not after: Fri 07 Mar 2025 16:52:11 +0000
asID: 138915
IP address blocks: 154.223.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84552 (0x14a48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 16:52:11 2025 GMT
Not After : Mar 7 16:52:11 2025 GMT
Subject: CN=679516be-bd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:84:31:5c:cf:73:e3:7d:66:a6:e4:66:2f:
ca:37:5f:6c:05:0d:07:ea:fe:19:2f:8c:ef:9a:fb:
04:41:63:1b:3b:65:9d:ec:ed:aa:37:19:95:c2:f7:
7f:a5:3b:81:08:4d:dc:93:39:e2:6d:98:a8:38:29:
93:91:f8:db:d6:1e:96:f0:e5:34:13:97:8f:d4:d9:
a8:e4:e3:fe:1e:89:fe:aa:ca:f7:d3:e1:9a:2a:06:
29:41:71:43:64:e7:df:96:43:6a:ee:6a:4e:c1:9b:
d8:ed:75:23:dd:23:f9:f3:9a:49:29:63:bd:25:b5:
36:4d:b3:c3:67:1d:97:ed:9b:f3:d1:d0:fa:ed:8a:
f4:90:7f:96:d8:e6:97:f8:62:f2:d7:af:e4:55:c9:
27:c1:76:23:d8:83:5c:06:c1:21:f7:0c:ff:ac:d7:
c2:98:e6:29:74:44:7c:2a:64:cb:e7:73:7f:7e:d5:
84:b8:45:b8:14:6a:10:9d:13:3c:30:38:aa:0f:0c:
8f:ff:b8:76:f5:45:3b:c6:76:7a:b7:b5:9a:4c:89:
c6:0c:fe:c7:46:e0:97:b1:63:e8:07:2a:fd:83:eb:
ae:59:bb:c6:a4:ac:a2:81:39:54:5a:3f:70:fd:a9:
d9:c8:e5:b0:09:c3:3b:2b:da:3a:04:6a:09:e8:66:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9E:8E:DD:27:C8:53:46:AB:59:0B:ED:B2:A7:EC:A9:82:B0:93:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA844644DB3C11EF83D8F394762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.30.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:5f:fe:71:7d:1f:3c:89:d3:c3:dc:8f:90:90:86:f9:0a:54:
40:18:b4:1c:63:53:84:45:96:2d:f8:44:68:6f:a9:28:bd:1e:
ff:20:26:29:63:1e:81:d6:da:12:9e:36:26:96:b8:47:98:46:
be:09:9f:2f:ef:ef:22:ef:b9:6e:cf:06:42:40:60:98:c8:6f:
4d:d9:8c:84:a8:29:f5:1f:96:fc:a9:8e:c8:40:a9:f7:9d:78:
42:1e:17:70:95:29:05:fd:a6:14:ee:ee:1f:c9:3d:8a:b2:de:
5a:70:c1:bd:e9:1e:76:93:f7:29:6c:67:62:c5:62:73:d6:42:
da:8c:0d:7b:d8:01:4e:6a:02:f8:e9:25:6e:4a:ef:2a:72:72:
0e:40:af:41:d4:d0:ec:3b:4e:70:e9:8c:b8:86:a6:dd:b0:28:
c5:62:20:fb:76:b7:84:64:34:45:7b:fb:3e:4f:33:3d:93:b0:
54:44:d0:7f:5d:93:e3:cb:2b:12:52:73:f7:0d:0c:ef:97:88:
c6:32:bb:e9:26:1c:55:ec:f6:8d:4f:d0:b0:1a:49:a7:25:ca:
cd:24:fc:20:2b:33:7b:04:49:18:7a:6b:41:96:2c:47:76:52:
e5:92:1d:62:1c:bc:94:b7:71:c8:cb:58:74:bd:4c:d8:1f:9d:
58:a2:f0:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUpIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI1MTY1MjExWhcNMjUwMzA3MTY1MjExWjAYMRYw
FAYDVQQDEw02Nzk1MTZiZS1iZDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxxyEMVzPc+N9ZqbkZi/KN19sBQ0H6v4ZL4zvmvsEQWMbO2Wd7O2qNxmV
wvd/pTuBCE3ckznibZioOCmTkfjb1h6W8OU0E5eP1Nmo5OP+Hon+qsr30+GaKgYp
QXFDZOfflkNq7mpOwZvY7XUj3SP585pJKWO9JbU2TbPDZx2X7Zvz0dD67Yr0kH+W
2OaX+GLy16/kVcknwXYj2INcBsEh9wz/rNfCmOYpdER8KmTL53N/ftWEuEW4FGoQ
nRM8MDiqDwyP/7h29UU7xnZ6t7WaTInGDP7HRuCXsWPoByr9g+uuWbvGpKyigTlU
Wj9w/anZyOWwCcM7K9o6BGoJ6GaEiQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFC6e
jt0nyFNGq1kL7bKn7KmCsJP5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQTg0NDY0NERCM0MxMUVGODNEOEYzOTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8eMA0GCSqGSIb3DQEB
CwUAA4IBAQAPX/5xfR88idPD3I+QkIb5ClRAGLQcY1OERZYt+ERob6kovR7/ICYp
Yx6B1toSnjYmlrhHmEa+CZ8v7+8i77luzwZCQGCYyG9N2YyEqCn1H5b8qY7IQKn3
nXhCHhdwlSkF/aYU7u4fyT2Kst5acMG96R52k/cpbGdixWJz1kLajA172AFOagL4
6SVuSu8qcnIOQK9B1NDsO05w6Yy4hqbdsCjFYiD7dreEZDRFe/s+TzM9k7BURNB/
XZPjyysSUnP3DQzvl4jGMrvpJhxV7PaNT9CwGkmnJcrNJPwgKzN7BEkYemtBlixH
dlLlkh1iHLyUt3HIy1h0vUzYH51YovCy
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:42:25 2025 by rpki-client