Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2426EF0D8A811EF9AE4B2AF762E951A.roa
File: D2426EF0D8A811EF9AE4B2AF762E951A.roa (raw, json)
Hash identifier: R71af5Zp4oyhfkBJYvoKFLKZyH244W7cuFgk+/jcGAw=
Subject key identifier: D3:B7:9E:10:BB:68:58:8D:CE:0E:15:47:76:39:F5:CD:FB:5C:22:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EAE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2426EF0D8A811EF9AE4B2AF762E951A.roa
Signing time: Wed 22 Jan 2025 10:08:27 +0000
ROA not before: Wed 22 Jan 2025 10:08:22 +0000
ROA not after: Wed 05 Feb 2025 10:08:22 +0000
asID: 395793
IP address blocks: 154.200.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81582 (0x13eae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 10:08:22 2025 GMT
Not After : Feb 5 10:08:22 2025 GMT
Subject: CN=6790c39a-e788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:d7:e3:7c:df:3c:f7:bf:ef:5e:d3:a7:05:
03:8d:4d:ac:11:d8:a5:5f:77:6a:09:35:07:96:db:
29:1f:70:f0:85:c2:3e:67:0a:ef:b6:ad:0c:fe:00:
b7:e4:7c:54:30:27:b0:e6:19:c5:15:d5:f8:3f:df:
89:49:a2:e8:59:a3:a8:5b:5f:93:6e:6a:cc:38:1d:
75:2f:9d:01:a5:18:fb:23:01:5b:a6:a1:5e:66:a8:
2f:a3:07:86:10:55:23:44:2f:4a:79:7e:a5:34:16:
c9:2d:e3:2b:0e:9e:2e:c6:db:c9:46:f9:a3:24:c1:
92:7c:e4:2b:0a:7b:72:08:08:a0:d0:2d:1b:f9:bb:
c5:e6:c7:90:83:f4:e3:eb:ba:6e:de:26:0b:47:52:
90:25:0e:56:dc:16:62:17:4f:d7:28:6f:aa:47:2f:
a2:83:b4:37:b6:54:1a:d2:b8:d1:e8:38:38:78:a8:
25:36:d1:1c:a5:1e:79:3f:bf:7d:02:8d:79:0e:42:
db:b5:e5:23:31:bb:d9:cb:08:38:2a:91:b6:01:0f:
28:34:7d:f5:27:b1:59:f3:af:36:7b:a1:11:51:44:
c5:9c:f3:4d:97:eb:ec:d3:09:ee:c2:71:fc:27:a1:
5f:1d:78:75:c9:fe:d1:01:05:db:66:df:21:f6:23:
b6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B7:9E:10:BB:68:58:8D:CE:0E:15:47:76:39:F5:CD:FB:5C:22:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2426EF0D8A811EF9AE4B2AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.58.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:94:7c:cd:ae:51:df:d8:55:21:56:c6:e3:14:4e:4f:96:5e:
1b:02:9c:e6:fb:a0:42:2a:21:5e:e2:86:6e:8c:ae:04:ec:dc:
9c:8e:d5:67:eb:cb:50:00:8c:0c:ea:6a:ca:53:ee:e6:45:8e:
73:a5:b9:e7:b4:6e:47:bf:d5:89:f7:ff:71:15:31:4f:15:1b:
83:2c:fb:b7:79:65:1c:56:bc:3f:4e:a2:76:3e:e5:95:ad:15:
67:27:a3:8c:c0:b8:89:2e:f9:a7:03:4a:0d:f9:07:bf:f7:e7:
f0:ef:c3:7e:62:84:5e:2e:6e:77:e5:0f:9b:c3:2c:5d:e1:4d:
6d:30:21:a0:06:97:95:ee:a4:7f:5c:8b:f0:a4:0d:b2:66:c3:
e0:46:36:fb:ae:8b:89:ec:40:61:7b:ea:bf:4f:b5:cd:16:8f:
0a:19:aa:7b:3f:d5:59:ed:96:c5:c0:30:91:f1:60:1c:1a:7a:
e7:fd:82:fb:f0:e5:e6:78:2a:1a:6a:33:f2:bd:8c:13:4e:83:
89:f1:b8:0b:09:53:82:d8:80:a3:ef:11:06:a2:01:50:4b:a2:
b9:91:f2:d4:10:d4:95:45:d5:4e:03:88:92:10:79:5d:17:ba:
83:88:5a:77:20:3b:d5:88:e8:8b:56:63:51:72:0d:95:f8:19:
f7:5c:f7:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT6uMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMTAwODIyWhcNMjUwMjA1MTAwODIyWjAYMRYw
FAYDVQQDEw02NzkwYzM5YS1lNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAveDX43zfPPe/717TpwUDjU2sEdilX3dqCTUHltspH3DwhcI+Zwrvtq0M
/gC35HxUMCew5hnFFdX4P9+JSaLoWaOoW1+TbmrMOB11L50BpRj7IwFbpqFeZqgv
oweGEFUjRC9KeX6lNBbJLeMrDp4uxtvJRvmjJMGSfOQrCntyCAig0C0b+bvF5seQ
g/Tj67pu3iYLR1KQJQ5W3BZiF0/XKG+qRy+ig7Q3tlQa0rjR6Dg4eKglNtEcpR55
P799Ao15DkLbteUjMbvZywg4KpG2AQ8oNH31J7FZ8682e6ERUUTFnPNNl+vs0wnu
wnH8J6FfHXh1yf7RAQXbZt8h9iO2lQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNO3
nhC7aFiNzg4VR3Y59c37XCJDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMjQyNkVGMEQ4QTgxMUVGOUFFNEIyQUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsg6MA0GCSqGSIb3DQEB
CwUAA4IBAQDSlHzNrlHf2FUhVsbjFE5Pll4bApzm+6BCKiFe4oZujK4E7NycjtVn
68tQAIwM6mrKU+7mRY5zpbnntG5Hv9WJ9/9xFTFPFRuDLPu3eWUcVrw/TqJ2PuWV
rRVnJ6OMwLiJLvmnA0oN+Qe/9+fw78N+YoReLm535Q+bwyxd4U1tMCGgBpeV7qR/
XIvwpA2yZsPgRjb7rouJ7EBhe+q/T7XNFo8KGap7P9VZ7ZbFwDCR8WAcGnrn/YL7
8OXmeCoaajPyvYwTToOJ8bgLCVOC2ICj7xEGogFQS6K5kfLUENSVRdVOA4iSEHld
F7qDiFp3IDvViOiLVmNRcg2V+Bn3XPcr
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:14:56 2025 by rpki-client