Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1E18AD4BED811EFB95AA24E762E951A.roa
File: D1E18AD4BED811EFB95AA24E762E951A.roa (raw, json)
Hash identifier: 3Q8RwyUjKfu0DOacdTfH1C0pLazONbOQRZ1iqzE6uf8=
Subject key identifier: 47:30:B2:DF:F6:29:8B:C4:F1:58:25:D7:2D:F5:59:08:6A:6F:C3:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D04
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1E18AD4BED811EFB95AA24E762E951A.roa
Signing time: Fri 20 Dec 2024 13:46:31 +0000
ROA not before: Fri 20 Dec 2024 13:46:28 +0000
ROA not after: Sun 02 Feb 2025 13:46:28 +0000
asID: 44559
IP address blocks: 154.209.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72964 (0x11d04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 13:46:28 2024 GMT
Not After : Feb 2 13:46:28 2025 GMT
Subject: CN=67657537-be95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:7d:92:59:91:de:84:a7:ce:d0:e6:14:55:
f3:4f:7f:66:5a:bf:af:a8:0a:3a:fe:93:ef:07:b9:
35:9a:cb:80:8d:4d:f4:b4:04:3d:28:7a:45:03:5b:
63:a1:96:31:c8:de:65:ee:8a:1c:8e:be:6b:f4:18:
b7:af:50:b4:32:ce:cd:4b:fe:ae:9e:5c:8f:39:bf:
f3:47:c4:5c:99:fa:8a:79:23:88:ce:7a:be:8a:c5:
c9:1c:80:3b:2a:5a:bd:00:5b:42:f1:12:4c:cf:14:
65:54:29:88:2e:4b:8a:ca:ed:6c:38:ef:d0:8d:9d:
7c:26:83:f4:82:c3:8e:c4:fd:50:43:a5:e1:a8:00:
ed:68:78:aa:52:53:86:57:ac:51:e1:01:76:62:71:
5e:36:94:83:f0:f2:e4:6c:cf:6d:7b:d6:b0:c7:8b:
fc:f9:fb:69:da:51:11:00:86:d6:65:93:0c:6d:07:
2b:45:81:de:fe:b0:c7:d6:0f:24:2f:cd:da:ab:71:
54:35:b7:31:c0:19:ef:56:95:73:43:27:07:04:34:
d3:8d:47:3e:8d:73:e0:64:76:17:3f:b0:0d:fb:8a:
f1:92:61:f8:89:cc:f2:09:8f:f1:05:a0:1d:82:96:
59:81:3f:90:bb:2c:0c:dc:99:65:83:97:ae:e1:e2:
34:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:30:B2:DF:F6:29:8B:C4:F1:58:25:D7:2D:F5:59:08:6A:6F:C3:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1E18AD4BED811EFB95AA24E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.19.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:cd:6a:51:2c:89:2e:8f:9a:19:ad:90:22:38:f9:f0:98:48:
5b:59:ae:6e:ba:d0:8d:3d:e2:81:11:29:2c:e5:84:6d:d9:ab:
d5:0c:ef:1f:3a:4a:a6:a0:b5:d5:74:11:40:9e:14:67:35:79:
23:a9:41:5f:db:f6:fb:f7:2e:ea:be:3a:f9:3a:c1:f1:39:b8:
a6:e3:17:12:75:a5:0a:de:1e:a9:89:5e:0a:80:ed:1a:6c:c9:
cd:bd:49:b8:e5:f6:03:d9:c0:52:45:d0:6d:46:f3:80:98:c1:
da:1b:47:86:43:78:0e:80:bd:9d:59:57:1e:91:0a:32:9c:58:
ae:55:c7:5c:14:b2:95:24:ba:00:f5:db:0e:ad:45:8b:fe:88:
06:d7:c2:7f:ef:ef:97:ce:bb:84:f7:7f:42:c1:5e:51:45:52:
e1:2e:41:91:b5:17:87:ad:3d:c0:a8:78:52:37:29:3b:2f:7d:
9c:d8:24:09:86:e2:8d:e3:87:3e:ea:31:cd:5a:86:61:65:96:
39:04:45:b1:bf:1a:40:86:0c:61:be:11:11:eb:59:ae:f6:1e:
97:44:fe:3f:71:64:ec:e4:f1:3a:2a:18:73:50:d1:7e:ee:88:
5c:1d:09:5f:96:c6:9c:20:55:ee:22:0d:68:55:d2:22:cb:60:
e2:e7:fb:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR0EMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIwMTM0NjI4WhcNMjUwMjAyMTM0NjI4WjAYMRYw
FAYDVQQDEw02NzY1NzUzNy1iZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAypN9klmR3oSnztDmFFXzT39mWr+vqAo6/pPvB7k1msuAjU30tAQ9KHpF
A1tjoZYxyN5l7oocjr5r9Bi3r1C0Ms7NS/6unlyPOb/zR8RcmfqKeSOIznq+isXJ
HIA7Klq9AFtC8RJMzxRlVCmILkuKyu1sOO/QjZ18JoP0gsOOxP1QQ6XhqADtaHiq
UlOGV6xR4QF2YnFeNpSD8PLkbM9te9awx4v8+ftp2lERAIbWZZMMbQcrRYHe/rDH
1g8kL83aq3FUNbcxwBnvVpVzQycHBDTTjUc+jXPgZHYXP7AN+4rxkmH4iczyCY/x
BaAdgpZZgT+QuywM3Jllg5eu4eI0TwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEcw
st/2KYvE8Vgl1y31WQhqb8N6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMUUxOEFENEJFRDgxMUVGQjk1QUEyNEU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtETMA0GCSqGSIb3DQEB
CwUAA4IBAQC1zWpRLIkuj5oZrZAiOPnwmEhbWa5uutCNPeKBESks5YRt2avVDO8f
OkqmoLXVdBFAnhRnNXkjqUFf2/b79y7qvjr5OsHxObim4xcSdaUK3h6piV4KgO0a
bMnNvUm45fYD2cBSRdBtRvOAmMHaG0eGQ3gOgL2dWVcekQoynFiuVcdcFLKVJLoA
9dsOrUWL/ogG18J/7++XzruE939CwV5RRVLhLkGRtReHrT3AqHhSNyk7L32c2CQJ
huKN44c+6jHNWoZhZZY5BEWxvxpAhgxhvhER61mu9h6XRP4/cWTs5PE6KhhzUNF+
7ohcHQlflsacIFXuIg1oVdIiy2Di5/tk
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:55 2025 by rpki-client