Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6933C3CBEA911EFB8269FAB762E951A.roa
File: D6933C3CBEA911EFB8269FAB762E951A.roa (raw, json)
Hash identifier: 0psvxj4pRidb8FR7fnOncEP73O7UcUMjQqa6+3n4JZU=
Subject key identifier: A6:C5:D8:E7:D2:03:61:F0:AA:C7:9B:3D:83:98:68:66:7F:D0:AD:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6933C3CBEA911EFB8269FAB762E951A.roa
Signing time: Fri 20 Dec 2024 08:10:13 +0000
ROA not before: Fri 20 Dec 2024 08:10:09 +0000
ROA not after: Thu 20 Mar 2025 08:10:09 +0000
asID: 328608
IP address blocks: 154.214.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72836 (0x11c84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 08:10:09 2024 GMT
Not After : Mar 20 08:10:09 2025 GMT
Subject: CN=67652665-2dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:db:11:42:67:01:b1:5a:45:81:f3:d5:1d:
e4:17:e2:44:d9:f7:79:53:f2:4d:c8:21:7f:73:f2:
ab:ee:20:6d:a2:16:8c:24:c5:34:ce:ba:1d:43:70:
5c:fc:28:d2:c7:e3:ea:5e:75:86:4f:59:4d:13:1b:
5d:1a:21:c6:7b:ce:be:22:17:ba:4d:03:96:f6:3f:
18:04:aa:42:c2:a4:d0:df:15:b8:a2:f0:fe:1c:31:
91:ab:82:5e:63:5a:d2:f5:e1:c0:ff:45:10:1f:17:
0b:99:29:e9:69:06:93:2e:ca:fb:a1:53:bc:e0:0f:
91:db:ae:b2:34:43:e8:86:7f:ea:c4:b5:5d:99:47:
b0:9b:e4:52:d3:ac:ac:4a:21:c1:5a:a9:31:dd:de:
13:82:fa:82:ff:2c:36:60:31:7c:3b:3b:42:ff:6b:
ba:4c:90:70:21:0d:2c:62:ff:07:f7:8d:21:79:78:
22:ac:35:4c:ef:42:4f:0f:8b:c4:08:7b:39:42:b1:
4e:a6:4b:a0:ed:f0:9e:3a:bd:7a:fd:54:92:31:77:
53:11:77:40:7b:97:42:4b:fa:2d:77:9e:d0:a2:c2:
40:67:db:ae:98:74:b0:e7:54:f5:87:07:4e:fd:18:
29:ce:96:5e:ac:4a:e4:3e:4a:5b:6c:95:a5:d6:7e:
05:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C5:D8:E7:D2:03:61:F0:AA:C7:9B:3D:83:98:68:66:7F:D0:AD:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6933C3CBEA911EFB8269FAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.215.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:97:6e:b1:32:8d:f8:de:ac:f6:e4:6f:28:a2:50:80:b9:df:
03:b6:62:63:af:dd:58:b0:12:97:1f:35:1c:79:d6:d1:5d:22:
60:02:da:99:bb:5a:88:b5:19:28:b8:66:cb:19:63:98:b2:4c:
db:7f:0c:4c:af:3e:0b:70:07:7c:04:1b:b4:c1:bb:eb:80:11:
f2:7c:4f:ac:5c:d8:43:e3:70:fb:0b:57:9b:84:b1:84:a3:48:
23:4c:9d:e3:cb:50:58:1b:57:3f:10:da:4c:bc:db:e2:8e:39:
14:93:c0:11:64:51:cb:9a:59:7f:2b:9e:62:06:f9:eb:ca:19:
5e:f8:51:06:7f:14:80:cb:ad:6f:e4:c4:5d:3f:f3:b9:eb:f8:
2c:c0:d0:2c:f3:f1:8b:38:f5:bb:91:38:72:4d:00:51:6d:a2:
42:56:82:e7:08:53:fb:96:e2:ac:31:ee:ef:34:42:8d:89:b9:
61:14:8f:f0:2f:b1:97:e3:a2:d5:57:3d:06:e4:02:d4:95:51:
67:30:ec:7f:53:db:24:c2:51:e4:73:68:e5:7a:ca:5a:74:29:
b5:84:b6:f4:29:08:62:ee:bc:b1:bc:8c:30:b8:6a:d5:fc:99:
a0:d9:77:1c:7e:ea:de:c1:2a:4e:de:45:0e:24:80:19:11:d7:
da:7f:cc:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARyEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIwMDgxMDA5WhcNMjUwMzIwMDgxMDA5WjAYMRYw
FAYDVQQDEw02NzY1MjY2NS0yZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApxLbEUJnAbFaRYHz1R3kF+JE2fd5U/JNyCF/c/Kr7iBtohaMJMU0zrod
Q3Bc/CjSx+PqXnWGT1lNExtdGiHGe86+Ihe6TQOW9j8YBKpCwqTQ3xW4ovD+HDGR
q4JeY1rS9eHA/0UQHxcLmSnpaQaTLsr7oVO84A+R266yNEPohn/qxLVdmUewm+RS
06ysSiHBWqkx3d4TgvqC/yw2YDF8OztC/2u6TJBwIQ0sYv8H940heXgirDVM70JP
D4vECHs5QrFOpkug7fCeOr16/VSSMXdTEXdAe5dCS/otd57QosJAZ9uumHSw51T1
hwdO/RgpzpZerErkPkpbbJWl1n4FUQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKbF
2OfSA2HwqsebPYOYaGZ/0K3CMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENjkzM0MzQ0JFQTkxMUVGQjgyNjlGQUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtbXMA0GCSqGSIb3DQEB
CwUAA4IBAQDXl26xMo343qz25G8oolCAud8DtmJjr91YsBKXHzUcedbRXSJgAtqZ
u1qItRkouGbLGWOYskzbfwxMrz4LcAd8BBu0wbvrgBHyfE+sXNhD43D7C1ebhLGE
o0gjTJ3jy1BYG1c/ENpMvNvijjkUk8ARZFHLmll/K55iBvnryhle+FEGfxSAy61v
5MRdP/O56/gswNAs8/GLOPW7kThyTQBRbaJCVoLnCFP7luKsMe7vNEKNiblhFI/w
L7GX46LVVz0G5ALUlVFnMOx/U9skwlHkc2jlespadCm1hLb0KQhi7ryxvIwwuGrV
/Jmg2XccfurewSpO3kUOJIAZEdfaf8yg
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:59:21 2025 by rpki-client