Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9FED318DA5B11EF957004A5762E951A.roa
File: D9FED318DA5B11EF957004A5762E951A.roa (raw, json)
Hash identifier: g/GJJRKh34W5djiO8+AbNOIrRWRmYsNVNlmIT9u3GbY=
Subject key identifier: 95:25:39:5D:94:F9:64:43:AE:B3:94:25:95:85:D9:92:AD:61:93:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9FED318DA5B11EF957004A5762E951A.roa
Signing time: Fri 24 Jan 2025 14:02:31 +0000
ROA not before: Fri 24 Jan 2025 14:02:27 +0000
ROA not after: Wed 05 Mar 2025 14:02:27 +0000
asID: 48031
IP address blocks: 154.222.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83931 (0x147db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:02:27 2025 GMT
Not After : Mar 5 14:02:27 2025 GMT
Subject: CN=67939d76-5b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:eb:ac:6f:8a:1f:55:63:eb:ca:42:aa:02:
78:2e:04:46:b3:db:58:f0:24:83:90:24:05:4c:5c:
f8:be:f4:0f:91:79:73:16:77:87:bc:8e:98:de:05:
ad:86:0d:6e:76:c6:6c:60:36:02:cc:f7:5b:10:90:
96:87:4d:5e:15:50:ca:ac:a7:fe:ce:ef:ba:8a:9d:
10:ab:4e:0e:ff:33:bf:d2:13:43:34:d6:36:18:7f:
37:ac:4f:f8:6c:f4:0c:0c:2b:ba:17:66:b4:1e:8b:
c1:66:db:a4:e8:a2:69:21:0a:11:1a:56:3e:52:09:
e0:55:84:ab:7e:52:39:a0:f5:a1:35:79:f7:cb:8e:
86:cb:14:93:c1:3a:ac:16:39:61:96:b2:39:a1:4a:
4d:e3:53:e0:66:ab:91:44:60:b1:93:b9:45:ca:ee:
08:c4:f6:c9:86:a9:0b:2e:a4:9e:17:cc:7d:ef:7a:
a2:e4:2e:51:87:ee:e2:ff:3e:3b:83:e9:a3:32:d3:
a4:e8:02:ea:43:50:a7:d3:f1:a7:1a:4e:2b:1d:ef:
c9:48:19:9a:63:f2:1f:20:ea:d2:62:94:61:95:b1:
35:09:49:f9:1a:53:8e:6d:e9:29:30:c6:5c:7e:e0:
3b:2e:cb:c3:22:06:c3:ca:32:b2:df:04:12:d7:d4:
78:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:25:39:5D:94:F9:64:43:AE:B3:94:25:95:85:D9:92:AD:61:93:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9FED318DA5B11EF957004A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.214.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6a:0b:3e:91:fc:b4:c1:3a:93:07:5e:db:ab:b2:01:f6:b4:
d1:8c:d2:d2:25:41:43:80:e4:33:14:8c:d9:4c:70:9c:da:64:
8b:17:0f:c4:7c:d7:c7:5a:27:cb:69:c3:cb:38:4c:a8:5a:31:
13:a2:e6:dd:6a:ea:f4:f8:b2:38:15:e8:bc:6c:14:63:53:f0:
0b:17:cb:05:c6:63:69:f6:2f:08:85:8f:b4:02:40:85:aa:83:
b3:e1:ad:b6:8f:59:4f:6a:a4:56:45:eb:36:87:7c:7e:a6:e7:
bc:d5:9f:67:e7:4c:16:cc:4d:30:72:2a:bd:04:ce:12:9c:6f:
ad:8d:10:af:43:ec:2c:94:e3:2f:0e:9b:36:6f:81:b6:42:c9:
55:92:40:72:da:93:29:d7:7e:ca:a4:fd:eb:86:af:d2:a6:18:
2b:71:d1:7c:f4:3f:ad:67:d1:55:29:85:cb:a9:b7:e2:6d:1b:
d2:7e:73:ab:f8:46:f1:e1:d0:05:9f:d5:b1:3c:66:ab:ae:74:
4d:82:a4:17:47:8b:94:88:4f:f5:46:32:ff:87:69:cc:a8:73:
6d:99:66:6a:ca:de:f1:8d:ea:ba:12:7a:40:16:12:a2:69:55:
4d:d4:bc:c4:7a:81:89:66:87:96:8f:08:e0:73:fc:64:55:66:
eb:56:1f:5b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUfbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTQwMjI3WhcNMjUwMzA1MTQwMjI3WjAYMRYw
FAYDVQQDEw02NzkzOWQ3Ni01YjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxBTrrG+KH1Vj68pCqgJ4LgRGs9tY8CSDkCQFTFz4vvQPkXlzFneHvI6Y
3gWthg1udsZsYDYCzPdbEJCWh01eFVDKrKf+zu+6ip0Qq04O/zO/0hNDNNY2GH83
rE/4bPQMDCu6F2a0HovBZtuk6KJpIQoRGlY+UgngVYSrflI5oPWhNXn3y46GyxST
wTqsFjlhlrI5oUpN41PgZquRRGCxk7lFyu4IxPbJhqkLLqSeF8x973qi5C5Rh+7i
/z47g+mjMtOk6ALqQ1Cn0/GnGk4rHe/JSBmaY/IfIOrSYpRhlbE1CUn5GlOObekp
MMZcfuA7LsvDIgbDyjKy3wQS19R4PwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJUl
OV2U+WRDrrOUJZWF2ZKtYZP/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EOUZFRDMxOERBNUIxMUVGOTU3MDA0QTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt7WMA0GCSqGSIb3DQEB
CwUAA4IBAQB2ags+kfy0wTqTB17bq7IB9rTRjNLSJUFDgOQzFIzZTHCc2mSLFw/E
fNfHWifLacPLOEyoWjEToubdaur0+LI4Fei8bBRjU/ALF8sFxmNp9i8IhY+0AkCF
qoOz4a22j1lPaqRWRes2h3x+pue81Z9n50wWzE0wciq9BM4SnG+tjRCvQ+wslOMv
Dps2b4G2QslVkkBy2pMp137KpP3rhq/SphgrcdF89D+tZ9FVKYXLqbfibRvSfnOr
+Ebx4dAFn9WxPGarrnRNgqQXR4uUiE/1RjL/h2nMqHNtmWZqyt7xjeq6EnpAFhKi
aVVN1LzEeoGJZoeWjwjgc/xkVWbrVh9b
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:54:12 2025 by rpki-client