Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4158BD4BEA611EFB0B35D98762E951A.roa
File: D4158BD4BEA611EFB0B35D98762E951A.roa (raw, json)
Hash identifier: 67rGrHC012JcBJHPr5oQ+VzuG9lfb7lIHiLS6pYbQtc=
Subject key identifier: 2A:A0:18:B9:01:06:87:9E:AE:5D:B7:11:49:E0:76:D7:B9:33:CC:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4158BD4BEA611EFB0B35D98762E951A.roa
Signing time: Fri 20 Dec 2024 07:48:40 +0000
ROA not before: Fri 20 Dec 2024 07:48:37 +0000
ROA not after: Thu 20 Mar 2025 07:48:37 +0000
asID: 47890
IP address blocks: 154.214.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72794 (0x11c5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 07:48:37 2024 GMT
Not After : Mar 20 07:48:37 2025 GMT
Subject: CN=67652158-f258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:34:e8:e3:75:ff:42:18:ca:6f:ab:0a:4c:
37:aa:2c:65:1b:bc:f3:a4:b9:cb:1c:95:7c:4d:05:
82:77:2f:4c:db:64:af:d8:3a:db:c6:29:3f:58:b8:
25:29:3c:6f:b1:59:5e:a7:4b:d3:47:61:7e:62:96:
42:ab:89:c6:91:a8:3b:f5:b3:84:d2:93:fa:94:3d:
3e:35:a8:38:53:c5:11:63:bf:62:00:e0:18:bb:cb:
b7:4e:24:0d:d7:85:e6:c0:fa:6f:8f:9d:c6:ac:0b:
95:1f:15:e4:a9:67:51:5b:1a:36:1d:ac:ed:24:3c:
22:d6:bf:1b:40:f9:9a:33:a8:a1:0f:4d:85:75:94:
d2:39:e8:d7:73:3b:1e:20:7b:d3:c1:96:aa:32:7a:
50:fb:fe:6c:fc:ee:60:2b:bf:e4:62:7b:24:c7:9c:
aa:15:e6:40:21:6d:31:ab:a1:f7:02:b7:d6:6b:de:
a2:d3:0c:d4:39:26:3e:38:01:dd:1e:51:39:7b:14:
5c:af:fa:28:95:e4:f2:e4:ea:8d:fe:1e:2b:eb:46:
c2:65:02:da:ee:b7:d2:27:bd:c1:f6:9e:fd:fa:63:
39:ed:d7:b2:ba:1f:fb:ad:08:44:20:e1:60:38:1b:
74:b7:9a:80:97:3d:e9:7c:de:4d:c3:88:ee:26:d1:
30:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A0:18:B9:01:06:87:9E:AE:5D:B7:11:49:E0:76:D7:B9:33:CC:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4158BD4BEA611EFB0B35D98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.250.0/23
Signature Algorithm: sha256WithRSAEncryption
19:b2:55:28:98:f4:a9:b5:9f:7a:5d:6c:2f:21:91:c8:42:6a:
d6:59:68:a8:98:94:29:7e:7b:d7:4c:d7:51:52:60:c5:ab:72:
f7:75:fb:15:f9:99:ef:be:66:fe:bb:e0:a6:6f:8d:5c:27:31:
ee:6b:b5:67:8c:12:f7:9b:0c:4e:cc:62:42:f9:35:7d:a0:80:
11:1f:df:16:47:84:d2:a8:e7:cd:3c:87:ae:79:e4:53:7b:25:
8e:86:d1:28:d6:0d:0e:03:e1:12:0d:f4:eb:15:32:64:84:09:
b2:2c:6c:39:a7:5a:9c:4b:f0:d4:fe:e4:a7:47:e8:55:65:3a:
68:32:b1:c2:28:28:25:15:b5:56:91:f2:5f:e2:f8:4f:ff:22:
c7:9c:06:e7:b2:db:3d:51:99:b4:79:91:e8:ec:5d:27:dd:6d:
28:a5:9a:3e:5e:c8:25:5c:41:b0:5d:c8:59:fd:25:f2:3d:0d:
2f:ae:0d:bf:17:0a:b2:31:6e:30:23:30:9b:06:f7:36:6a:47:
73:f5:69:07:cf:00:ab:91:74:39:30:2a:65:67:0c:99:32:b3:
8d:0b:11:27:47:fb:c9:e0:68:cb:48:df:8e:2a:c4:00:b6:74:
50:50:6c:c5:39:84:f6:30:18:b5:3e:24:9d:01:51:d0:4a:d0:
5a:3b:58:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARxaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIwMDc0ODM3WhcNMjUwMzIwMDc0ODM3WjAYMRYw
FAYDVQQDEw02NzY1MjE1OC1mMjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtso06ON1/0IYym+rCkw3qixlG7zzpLnLHJV8TQWCdy9M22Sv2Drbxik/
WLglKTxvsVlep0vTR2F+YpZCq4nGkag79bOE0pP6lD0+Nag4U8URY79iAOAYu8u3
TiQN14XmwPpvj53GrAuVHxXkqWdRWxo2HaztJDwi1r8bQPmaM6ihD02FdZTSOejX
czseIHvTwZaqMnpQ+/5s/O5gK7/kYnskx5yqFeZAIW0xq6H3ArfWa96i0wzUOSY+
OAHdHlE5exRcr/ooleTy5OqN/h4r60bCZQLa7rfSJ73B9p79+mM57deyuh/7rQhE
IOFgOBt0t5qAlz3pfN5Nw4juJtEwQwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCqg
GLkBBoeerl23EUngdte5M8x8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENDE1OEJENEJFQTYxMUVGQjBCMzVEOTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmtb6MA0GCSqGSIb3DQEB
CwUAA4IBAQAZslUomPSptZ96XWwvIZHIQmrWWWiomJQpfnvXTNdRUmDFq3L3dfsV
+Znvvmb+u+Cmb41cJzHua7VnjBL3mwxOzGJC+TV9oIARH98WR4TSqOfNPIeueeRT
eyWOhtEo1g0OA+ESDfTrFTJkhAmyLGw5p1qcS/DU/uSnR+hVZTpoMrHCKCglFbVW
kfJf4vhP/yLHnAbnsts9UZm0eZHo7F0n3W0opZo+XsglXEGwXchZ/SXyPQ0vrg2/
FwqyMW4wIzCbBvc2akdz9WkHzwCrkXQ5MCplZwyZMrONCxEnR/vJ4GjLSN+OKsQA
tnRQUGzFOYT2MBi1PiSdAVHQStBaO1gF
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:38:40 2025 by rpki-client