Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D936AEA6D9D911EFBC57EBA7762E951A.roa
File: D936AEA6D9D911EFBC57EBA7762E951A.roa (raw, json)
Hash identifier: CWPDl1cUCirs77tAYl7YpRVPqg+3U2cZo5Cl9AMhJtw=
Subject key identifier: 47:C4:E2:56:AE:78:8A:13:AC:79:C1:C4:B9:12:83:97:F2:27:3D:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014351
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D936AEA6D9D911EFBC57EBA7762E951A.roa
Signing time: Thu 23 Jan 2025 22:31:55 +0000
ROA not before: Fri 24 Jan 2025 22:31:51 +0000
ROA not after: Sat 01 Mar 2025 22:31:51 +0000
asID: 44559
IP address blocks: 154.205.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82769 (0x14351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 22:31:51 2025 GMT
Not After : Mar 1 22:31:51 2025 GMT
Subject: CN=6792c35b-15c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:d0:16:84:1a:19:47:28:d6:c0:ec:3c:58:
9a:f8:46:52:dc:c8:5c:bb:75:ec:ae:9e:36:a8:35:
32:a2:2d:48:4e:7b:50:1e:df:f8:b9:53:88:dc:34:
14:a1:03:1a:7b:b8:52:12:c7:ea:c6:b9:a2:2c:c6:
f3:e8:e4:d1:b2:31:61:f7:3f:1a:75:b6:ac:96:3a:
3c:c5:09:39:66:e8:a8:0e:15:b4:6d:a5:1b:6b:ba:
4f:66:50:9b:d0:ed:bd:24:bc:49:11:ff:74:70:6e:
f8:8c:06:ad:83:83:d7:75:86:28:a8:e4:80:fa:25:
ec:a1:be:b4:14:45:0e:77:e5:0f:17:fb:1b:53:ba:
26:44:34:f4:90:ef:15:8d:e1:b7:5f:06:63:02:63:
1d:f9:80:1d:3b:b5:5b:58:2f:d1:82:1f:b6:54:e9:
e9:07:f4:f9:db:78:ae:3b:7f:06:da:e3:71:67:ef:
13:9f:a2:bc:a9:3a:92:7b:6b:d4:77:ab:c2:22:bd:
5d:08:e9:01:f9:32:27:30:c9:b2:2e:c1:c6:00:c9:
83:b8:ff:04:43:20:9a:31:5d:c3:2a:76:6c:64:b6:
8b:a8:6d:ce:a4:3e:3d:62:59:cf:86:a4:48:c6:27:
a3:c5:de:bf:f8:03:c1:02:0e:38:4b:f8:55:5c:39:
0f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C4:E2:56:AE:78:8A:13:AC:79:C1:C4:B9:12:83:97:F2:27:3D:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D936AEA6D9D911EFBC57EBA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.239.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b6:15:96:9a:98:c5:73:16:39:d3:a7:71:90:19:9e:bf:d5:
ac:48:7a:35:6c:8a:a3:95:64:c3:de:1c:cd:cf:29:4e:4b:d0:
ac:cb:bd:a6:40:ef:32:8a:71:c1:74:5e:64:d7:a6:7e:2f:61:
ee:79:b7:cc:62:20:84:fc:d1:27:30:b6:95:2e:74:36:5e:26:
90:61:b4:3a:26:e5:c5:54:35:2e:33:aa:52:f8:4c:e6:cc:78:
b5:93:6e:32:7a:ea:64:71:9f:19:83:69:f4:f4:31:92:e6:b8:
37:32:5f:bb:b1:fc:97:d1:1b:50:40:4e:5e:b2:e9:70:2c:80:
40:09:4b:79:2b:52:3d:09:0c:1a:3d:99:19:b1:7d:ce:7d:df:
61:af:d2:b1:92:46:1b:c2:39:1a:7e:be:b7:fb:1e:9a:56:8d:
3a:5a:0a:eb:5f:c5:8b:83:c2:f0:96:84:c7:12:d1:4b:93:20:
25:33:1d:e5:22:f4:9f:23:22:ea:7b:4c:30:c6:d6:d5:e0:fb:
61:66:40:28:3c:a4:0a:cd:e0:ff:eb:0e:6c:ab:26:2a:71:81:
b0:92:ae:83:16:f4:2c:b5:b0:cb:f5:7f:0c:b5:a3:2d:8f:4a:
2e:7f:f9:d1:a6:07:e1:b8:da:74:77:d6:6d:0b:36:ee:a6:16:
b6:dd:e9:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUNRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MjIzMTUxWhcNMjUwMzAxMjIzMTUxWjAYMRYw
FAYDVQQDEw02NzkyYzM1Yi0xNWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsXDQFoQaGUco1sDsPFia+EZS3Mhcu3Xsrp42qDUyoi1ITntQHt/4uVOI
3DQUoQMae7hSEsfqxrmiLMbz6OTRsjFh9z8adbasljo8xQk5ZuioDhW0baUba7pP
ZlCb0O29JLxJEf90cG74jAatg4PXdYYoqOSA+iXsob60FEUOd+UPF/sbU7omRDT0
kO8VjeG3XwZjAmMd+YAdO7VbWC/Rgh+2VOnpB/T523iuO38G2uNxZ+8Tn6K8qTqS
e2vUd6vCIr1dCOkB+TInMMmyLsHGAMmDuP8EQyCaMV3DKnZsZLaLqG3OpD49YlnP
hqRIxiejxd6/+APBAg44S/hVXDkP5QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEfE
4laueIoTrHnBxLkSg5fyJz3iMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EOTM2QUVBNkQ5RDkxMUVGQkM1N0VCQTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms3vMA0GCSqGSIb3DQEB
CwUAA4IBAQBwthWWmpjFcxY506dxkBmev9WsSHo1bIqjlWTD3hzNzylOS9Csy72m
QO8yinHBdF5k16Z+L2HuebfMYiCE/NEnMLaVLnQ2XiaQYbQ6JuXFVDUuM6pS+Ezm
zHi1k24yeupkcZ8Zg2n09DGS5rg3Ml+7sfyX0RtQQE5esulwLIBACUt5K1I9CQwa
PZkZsX3Ofd9hr9KxkkYbwjkafr63+x6aVo06WgrrX8WLg8LwloTHEtFLkyAlMx3l
IvSfIyLqe0wwxtbV4PthZkAoPKQKzeD/6w5sqyYqcYGwkq6DFvQstbDL9X8MtaMt
j0ouf/nRpgfhuNp0d9ZtCzbupha23emw
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:50 2025 by rpki-client