Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1247D8EDFE611EFB7897A87762E951A.roa
File: D1247D8EDFE611EFB7897A87762E951A.roa (raw, json)
Hash identifier: VQ0uUpQ/P3LYcbRBgG+KneRufyRij0C2kuoJ40GDvTA=
Subject key identifier: 28:0F:33:2D:3C:23:72:17:03:7F:41:A2:8D:AC:8F:BB:5B:7F:5C:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DD8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1247D8EDFE611EFB7897A87762E951A.roa
Signing time: Fri 31 Jan 2025 15:19:52 +0000
ROA not before: Fri 31 Jan 2025 15:19:48 +0000
ROA not after: Sat 08 Feb 2025 15:19:48 +0000
asID: 58460
IP address blocks: 154.197.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85464 (0x14dd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 15:19:48 2025 GMT
Not After : Feb 8 15:19:48 2025 GMT
Subject: CN=679cea18-b319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:16:82:62:30:a4:5e:f0:d4:f3:b6:c8:d5:69:
27:e4:78:a2:36:9e:1a:7c:8e:86:b6:b7:d7:de:9f:
aa:d9:c8:6e:5a:de:e8:15:05:84:31:f4:dd:b0:6d:
9b:bf:fe:41:79:a4:db:42:74:3d:e2:bb:a2:c6:08:
ec:6a:56:27:a5:d0:af:6f:24:46:93:16:50:65:d3:
c4:ca:ce:a9:b4:7e:f1:1b:3c:73:fb:8a:ad:90:af:
b0:84:01:c4:5d:af:65:a6:35:d6:a0:a5:6b:f3:f2:
36:01:01:f2:8f:c4:74:25:08:69:28:38:a4:c1:4c:
88:27:95:dc:3f:1c:86:f9:cf:28:fc:72:6b:0d:33:
39:05:8a:a9:54:1a:5e:6e:36:a1:f7:a6:0b:e3:b5:
c3:29:98:88:e0:06:46:c6:41:23:ef:6f:20:11:b0:
4d:cd:69:14:48:3d:66:15:08:9b:2b:2e:ab:0c:b8:
c7:47:df:1b:9a:8a:3a:1a:ce:65:74:ec:7e:f3:93:
93:b8:9d:37:b1:78:25:51:30:e3:3f:e9:f1:57:6e:
96:40:21:c5:d6:98:df:94:33:b0:31:ce:57:92:90:
18:94:c6:56:c8:37:ca:1c:3c:3e:d5:1d:dc:0d:c6:
dc:91:8e:34:d4:15:79:12:4c:a3:76:70:c3:0b:ef:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0F:33:2D:3C:23:72:17:03:7F:41:A2:8D:AC:8F:BB:5B:7F:5C:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1247D8EDFE611EFB7897A87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.40.0/22
Signature Algorithm: sha256WithRSAEncryption
61:f6:65:95:d1:d1:53:37:d6:0e:00:bd:46:42:49:68:8e:a6:
e7:2e:f6:68:c3:e2:cf:d4:e9:89:77:27:f7:62:e8:b0:31:ce:
1a:a5:f7:9a:1a:60:86:06:68:5f:32:ae:0e:40:ea:05:80:f8:
33:0f:26:43:b2:27:34:0f:8b:b8:10:a1:ea:99:9f:a2:f1:07:
1e:40:80:11:6b:6c:96:5d:eb:c2:18:9f:73:bb:7e:b9:d5:b6:
52:73:91:77:9a:58:50:87:4b:16:4e:44:55:79:06:35:f3:88:
c6:7d:8f:36:75:0c:cc:fd:63:9d:e8:3f:51:3f:76:45:3b:f3:
6c:af:ce:20:36:ee:4e:e2:a3:ab:ea:4b:62:99:5e:63:01:79:
dd:f6:79:aa:47:58:c9:0a:ee:af:8f:bb:7e:64:ca:b0:8c:fb:
37:f0:a9:b4:f2:1a:03:a2:7c:9e:c9:39:21:90:e2:a9:ee:60:
5b:be:6f:50:cd:61:7f:11:d6:20:b9:9a:10:59:f4:7d:a3:d7:
4e:e2:a0:8a:b7:d9:78:ef:93:31:fe:e8:80:dc:a9:94:e0:5c:
5b:34:62:5b:61:f3:eb:f5:75:59:b1:23:a0:63:50:e7:bb:aa:
1c:c9:64:15:99:c8:9d:c3:f4:4e:b9:e7:6c:99:17:07:d2:8f:
b8:f5:4e:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU3YMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTMxMTUxOTQ4WhcNMjUwMjA4MTUxOTQ4WjAYMRYw
FAYDVQQDEw02NzljZWExOC1iMzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4xaCYjCkXvDU87bI1Wkn5HiiNp4afI6GtrfX3p+q2chuWt7oFQWEMfTd
sG2bv/5BeaTbQnQ94ruixgjsalYnpdCvbyRGkxZQZdPEys6ptH7xGzxz+4qtkK+w
hAHEXa9lpjXWoKVr8/I2AQHyj8R0JQhpKDikwUyIJ5XcPxyG+c8o/HJrDTM5BYqp
VBpebjah96YL47XDKZiI4AZGxkEj728gEbBNzWkUSD1mFQibKy6rDLjHR98bmoo6
Gs5ldOx+85OTuJ03sXglUTDjP+nxV26WQCHF1pjflDOwMc5XkpAYlMZWyDfKHDw+
1R3cDcbckY401BV5EkyjdnDDC+9uNQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCgP
My08I3IXA39Boo2sj7tbf1z4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMTI0N0Q4RURGRTYxMUVGQjc4OTdBODc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsUoMA0GCSqGSIb3DQEB
CwUAA4IBAQBh9mWV0dFTN9YOAL1GQklojqbnLvZow+LP1OmJdyf3YuiwMc4apfea
GmCGBmhfMq4OQOoFgPgzDyZDsic0D4u4EKHqmZ+i8QceQIARa2yWXevCGJ9zu365
1bZSc5F3mlhQh0sWTkRVeQY184jGfY82dQzM/WOd6D9RP3ZFO/Nsr84gNu5O4qOr
6ktimV5jAXnd9nmqR1jJCu6vj7t+ZMqwjPs38Km08hoDonyeyTkhkOKp7mBbvm9Q
zWF/EdYguZoQWfR9o9dO4qCKt9l475Mx/uiA3KmU4FxbNGJbYfPr9XVZsSOgY1Dn
u6ocyWQVmcidw/ROuedsmRcH0o+49U7J
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:59:53 2025 by rpki-client