Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB190542DA4D11EFBFC2B846762E951A.roa
File: DB190542DA4D11EFBFC2B846762E951A.roa (raw, json)
Hash identifier: J13rM/D4iwJBbZ2iNASPpvk4GfggjU9iVyB/LwgvwrU=
Subject key identifier: 6F:1D:D9:63:8E:65:65:79:5D:62:10:86:B5:34:1F:E6:60:69:CC:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB190542DA4D11EFBFC2B846762E951A.roa
Signing time: Fri 24 Jan 2025 12:22:19 +0000
ROA not before: Fri 24 Jan 2025 12:22:16 +0000
ROA not after: Sat 08 Feb 2025 12:22:16 +0000
asID: 18229
IP address blocks: 154.210.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83637 (0x146b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:22:16 2025 GMT
Not After : Feb 8 12:22:16 2025 GMT
Subject: CN=679385fb-c4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:f6:df:e8:7e:ac:47:6a:36:db:9c:7e:18:
28:d1:99:c5:ee:4d:be:de:2f:28:26:e5:8e:48:c9:
1b:13:98:7b:5d:be:24:56:e8:ba:6e:6c:2f:88:b7:
5f:cb:be:25:4d:c1:f8:9b:d3:40:88:3a:f2:aa:d4:
5b:68:35:39:c9:fe:3e:57:49:78:e8:78:fa:99:49:
f6:41:ef:0e:62:3b:39:df:ce:41:98:69:ea:14:b1:
d4:e6:66:24:76:26:d7:46:1e:5a:cd:71:e8:64:00:
17:0b:5a:f3:1a:f2:97:78:92:9e:fb:77:f0:98:86:
d0:81:85:dc:b8:84:21:db:ed:c2:17:cf:1e:ae:64:
7a:ce:76:c1:94:94:35:47:14:aa:e3:4c:35:e3:a9:
55:cd:af:af:94:50:a6:de:20:05:8e:7f:12:04:bc:
59:74:65:b5:d6:65:aa:ad:97:b5:ee:be:7b:05:c8:
52:68:1c:8a:ba:98:4f:76:d0:82:d8:47:ce:6f:98:
83:71:57:d3:c1:2f:f8:18:a3:77:aa:f4:85:40:d8:
a5:45:13:6d:31:5e:75:a3:90:da:e0:8c:01:ca:50:
83:50:87:bd:f6:2a:fd:0e:e3:ca:c4:e9:9c:c4:62:
4b:4e:bf:a8:53:2d:12:9a:c4:20:f3:29:67:79:d0:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1D:D9:63:8E:65:65:79:5D:62:10:86:B5:34:1F:E6:60:69:CC:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB190542DA4D11EFBFC2B846762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.156.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:9b:24:43:4d:b1:f3:f5:58:76:6c:f0:be:d2:e6:d9:ef:e1:
ed:73:ba:ea:c1:9f:7a:ad:04:0c:43:cf:c5:c7:04:46:6e:70:
cf:63:8a:1f:e9:b2:69:cd:0d:9d:0f:41:64:07:78:97:4f:c1:
b4:e3:36:0e:16:94:b7:39:eb:90:50:71:f5:b1:4c:11:48:29:
8e:e1:29:3e:a5:44:c4:1e:47:0f:20:5e:0c:4e:db:d6:b6:d2:
1a:29:00:a7:c6:97:c6:4a:c5:35:47:71:d7:a9:b0:c3:bd:f1:
d9:d9:7c:3d:3e:7b:bc:51:df:fe:e9:56:b2:03:21:b1:2c:6a:
1f:50:f6:03:fd:31:73:da:01:a0:18:29:d8:32:85:fa:e3:c7:
a8:b2:c8:c7:1b:38:98:a9:e5:27:3d:aa:d5:8a:1e:0b:59:e1:
90:c1:c6:76:61:91:0e:97:c5:8c:e4:1e:17:b0:fc:db:c7:0c:
92:d0:dd:b3:8f:4d:50:66:49:60:fe:37:94:e2:31:2b:55:fd:
32:e9:6b:e6:26:f9:56:02:68:4a:58:82:db:cd:6f:1c:de:b0:
fd:68:b3:22:52:0c:b2:6c:d3:9e:81:a8:99:21:be:be:be:fb:
7e:31:c5:12:31:f0:e3:8b:8f:6a:52:44:db:85:51:be:c0:1d:
9a:92:7f:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUa1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTIyMjE2WhcNMjUwMjA4MTIyMjE2WjAYMRYw
FAYDVQQDEw02NzkzODVmYi1jNGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArm723+h+rEdqNtucfhgo0ZnF7k2+3i8oJuWOSMkbE5h7Xb4kVui6bmwv
iLdfy74lTcH4m9NAiDryqtRbaDU5yf4+V0l46Hj6mUn2Qe8OYjs5385BmGnqFLHU
5mYkdibXRh5azXHoZAAXC1rzGvKXeJKe+3fwmIbQgYXcuIQh2+3CF88ermR6znbB
lJQ1RxSq40w146lVza+vlFCm3iAFjn8SBLxZdGW11mWqrZe17r57BchSaByKuphP
dtCC2EfOb5iDcVfTwS/4GKN3qvSFQNilRRNtMV51o5Da4IwBylCDUIe99ir9DuPK
xOmcxGJLTr+oUy0SmsQg8ylnedBJXwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFG8d
2WOOZWV5XWIQhrU0H+ZgaczUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQjE5MDU0MkRBNEQxMUVGQkZDMkI4NDY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtKcMA0GCSqGSIb3DQEB
CwUAA4IBAQDUmyRDTbHz9Vh2bPC+0ubZ7+Htc7rqwZ96rQQMQ8/FxwRGbnDPY4of
6bJpzQ2dD0FkB3iXT8G04zYOFpS3OeuQUHH1sUwRSCmO4Sk+pUTEHkcPIF4MTtvW
ttIaKQCnxpfGSsU1R3HXqbDDvfHZ2Xw9Pnu8Ud/+6VayAyGxLGofUPYD/TFz2gGg
GCnYMoX648eossjHGziYqeUnParVih4LWeGQwcZ2YZEOl8WM5B4XsPzbxwyS0N2z
j01QZklg/jeU4jErVf0y6WvmJvlWAmhKWILbzW8c3rD9aLMiUgyybNOegaiZIb6+
vvt+McUSMfDji49qUkTbhVG+wB2akn+k
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:51 2025 by rpki-client