Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D09ED5A8BEA811EF846274A3762E951A.roa
File: D09ED5A8BEA811EF846274A3762E951A.roa (raw, json)
Hash identifier: pXKwg4Y1ZR1GwXOrlds8yiVM306YqX493BoUrxqPaVU=
Subject key identifier: BB:F0:D1:5A:22:11:30:F0:82:89:03:F1:D5:42:24:9A:0E:4E:48:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C76
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D09ED5A8BEA811EF846274A3762E951A.roa
Signing time: Fri 20 Dec 2024 08:02:54 +0000
ROA not before: Fri 20 Dec 2024 08:02:50 +0000
ROA not after: Thu 20 Mar 2025 08:02:50 +0000
asID: 328608
IP address blocks: 154.214.206.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72822 (0x11c76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 08:02:50 2024 GMT
Not After : Mar 20 08:02:50 2025 GMT
Subject: CN=676524ad-1f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:19:ec:36:97:bd:6e:51:83:ac:b6:2a:9d:e6:
e4:5a:87:76:77:49:a0:40:e5:58:10:10:3e:e6:72:
f3:01:a6:86:ac:1f:23:9d:d5:62:01:18:52:78:9f:
e5:bf:58:94:a5:1f:41:90:8f:29:c9:70:7f:6c:17:
6d:e3:07:ac:0f:67:98:76:e3:b7:3f:e6:7f:86:bf:
09:5a:d8:6d:b7:9a:92:9a:6b:da:f2:be:8e:d5:c3:
80:a9:53:df:bc:9a:5e:65:c5:f1:99:dd:f0:5b:f7:
6c:dc:c7:1b:42:c0:10:a0:c7:f8:fe:db:d9:3f:b4:
af:94:cc:68:d2:53:f6:3d:f2:0a:58:8a:e8:5e:9e:
3b:f7:90:57:29:df:8f:d4:b2:ec:77:1c:94:f1:e7:
39:a1:f3:bf:ed:fe:07:41:4a:ec:a4:2e:a8:98:f9:
b2:7e:9a:56:6e:b4:e4:ac:e5:e1:a6:b6:c2:32:c4:
39:bd:59:d5:42:1b:37:f7:92:4d:5b:72:2c:fb:de:
5c:87:38:36:55:a5:7a:d7:df:f3:70:95:1c:4f:79:
db:a8:6c:e1:d4:21:3b:16:d3:74:3c:e8:9e:0b:c4:
bc:9f:a8:3f:c5:c6:b2:ea:bc:14:85:68:0f:55:94:
b0:a8:64:4b:16:d9:64:ab:86:66:80:41:df:55:c7:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F0:D1:5A:22:11:30:F0:82:89:03:F1:D5:42:24:9A:0E:4E:48:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D09ED5A8BEA811EF846274A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.206.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:11:df:47:80:a0:d7:92:e1:8f:89:0c:65:c0:87:0d:9d:b3:
24:df:69:b5:b4:0b:9e:49:1a:9c:95:5c:d2:95:5e:b4:78:20:
c2:d0:36:a9:11:00:e6:9b:8f:74:9c:49:5e:f9:de:39:1c:71:
32:65:2d:a7:d6:5c:30:f4:18:58:db:cd:4f:60:28:af:6b:47:
66:cd:b0:ac:6a:eb:a8:5e:3c:02:0b:c7:16:70:3f:32:b5:da:
49:f2:6f:c2:12:1e:b8:6c:d1:37:7a:96:c9:48:78:95:21:1b:
0f:b5:68:b6:46:d9:f1:9b:bb:99:5d:4e:4c:91:f6:71:ba:1c:
b6:7d:ad:9c:b3:8b:8f:6a:8e:c4:aa:7c:b5:94:5e:bc:1c:98:
43:b0:ee:9c:bd:aa:22:9b:87:f7:ba:4a:c5:7d:33:14:83:06:
a7:96:30:7d:f4:56:60:2d:38:00:11:6f:6c:3c:de:db:30:d5:
7f:da:d8:14:47:9f:a9:69:f5:6c:66:9f:79:f9:13:cf:9a:f6:
f1:b2:a1:cc:d4:6c:ea:70:65:de:94:c5:46:51:b7:33:82:3e:
fc:93:ed:2f:ec:97:bb:2d:fe:ed:17:c8:93:70:c0:56:6b:be:
9d:b5:1e:98:10:34:40:71:4b:d2:6a:6e:f8:79:39:ca:38:0b:
76:06:37:7c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARx2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIwMDgwMjUwWhcNMjUwMzIwMDgwMjUwWjAYMRYw
FAYDVQQDEw02NzY1MjRhZC0xZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6hnsNpe9blGDrLYqnebkWod2d0mgQOVYEBA+5nLzAaaGrB8jndViARhS
eJ/lv1iUpR9BkI8pyXB/bBdt4wesD2eYduO3P+Z/hr8JWthtt5qSmmva8r6O1cOA
qVPfvJpeZcXxmd3wW/ds3McbQsAQoMf4/tvZP7SvlMxo0lP2PfIKWIroXp4795BX
Kd+P1LLsdxyU8ec5ofO/7f4HQUrspC6omPmyfppWbrTkrOXhprbCMsQ5vVnVQhs3
95JNW3Is+95chzg2VaV619/zcJUcT3nbqGzh1CE7FtN0POieC8S8n6g/xcay6rwU
hWgPVZSwqGRLFtlkq4ZmgEHfVcdF5wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLvw
0VoiETDwgokD8dVCJJoOTkgkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMDlFRDVBOEJFQTgxMUVGODQ2Mjc0QTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmtbOMA0GCSqGSIb3DQEB
CwUAA4IBAQA9Ed9HgKDXkuGPiQxlwIcNnbMk32m1tAueSRqclVzSlV60eCDC0Dap
EQDmm490nEle+d45HHEyZS2n1lww9BhY281PYCiva0dmzbCsauuoXjwCC8cWcD8y
tdpJ8m/CEh64bNE3epbJSHiVIRsPtWi2Rtnxm7uZXU5MkfZxuhy2fa2cs4uPao7E
qny1lF68HJhDsO6cvaoim4f3ukrFfTMUgwanljB99FZgLTgAEW9sPN7bMNV/2tgU
R5+pafVsZp95+RPPmvbxsqHM1GzqcGXelMVGUbczgj78k+0v7Je7Lf7tF8iTcMBW
a76dtR6YEDRAcUvSam74eTnKOAt2Bjd8
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:52:59 2025 by rpki-client