Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE4F455CDCC111EFAC6E8053762E951A.roa
File: DE4F455CDCC111EFAC6E8053762E951A.roa (raw, json)
Hash identifier: AWXyz6tUawvi0m6Ft6hRJFoPKz0t4UfKXLVq01xKKOM=
Subject key identifier: 68:43:EC:8D:70:F0:4B:DF:A6:F8:0D:C9:F0:4C:08:6B:9D:8F:86:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C39
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE4F455CDCC111EFAC6E8053762E951A.roa
Signing time: Mon 27 Jan 2025 15:17:49 +0000
ROA not before: Mon 27 Jan 2025 15:17:45 +0000
ROA not after: Sun 09 Feb 2025 15:17:45 +0000
asID: 5065
IP address blocks: 154.86.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85049 (0x14c39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 15:17:45 2025 GMT
Not After : Feb 9 15:17:45 2025 GMT
Subject: CN=6797a39d-e62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:66:98:1b:04:4b:50:a3:16:95:9e:20:b4:
11:f5:0b:cb:ab:af:c5:07:6a:72:8e:d1:b1:1e:dc:
b1:58:fb:55:ee:26:a4:6c:c4:1f:1e:6f:60:4a:09:
7c:bd:61:fe:39:67:ac:a0:cc:69:be:24:17:14:5e:
25:81:8c:71:1f:91:1b:d8:25:80:58:76:cf:d9:3d:
ce:40:01:e4:ba:e0:07:ff:be:73:93:7a:de:70:1a:
fb:b4:f2:ec:36:74:20:39:86:4f:0d:81:2b:bc:8b:
d8:1b:2f:ca:a2:f8:63:ba:0f:73:0f:f9:9c:7b:46:
4e:92:d0:9a:1f:e5:c8:2d:2e:d6:b4:86:ed:97:e1:
a2:f7:5f:ab:0c:e6:5f:a9:13:4e:a1:77:c4:12:c8:
98:39:18:3f:96:e9:ac:51:7d:18:bd:bf:52:84:4d:
27:a4:bc:72:d3:42:51:3d:18:3c:ae:3b:0a:24:93:
0f:24:44:7b:1c:08:96:e1:f4:af:ef:e4:6b:22:47:
e2:14:8e:6d:1e:81:27:26:d7:23:19:1f:4e:15:0f:
86:79:ea:f5:13:48:6e:66:eb:8c:37:af:e5:f9:5a:
fa:c3:16:7a:ce:52:cf:1c:c5:be:ba:41:79:28:5f:
d2:a8:4f:a7:c3:1d:b7:33:22:cc:ce:31:e2:9d:f8:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:43:EC:8D:70:F0:4B:DF:A6:F8:0D:C9:F0:4C:08:6B:9D:8F:86:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE4F455CDCC111EFAC6E8053762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.108.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:39:f6:fe:d9:ab:6f:da:b1:56:1c:ec:e2:1c:b2:3d:d5:91:
ca:58:39:f7:29:3b:1b:52:44:83:57:c1:b1:8d:ae:b1:a9:73:
7d:ac:8b:50:92:bb:82:b2:47:38:16:e4:14:95:82:05:49:5d:
46:d8:43:fc:fe:4a:63:69:f1:e7:c3:b7:d8:58:90:67:8b:f6:
f9:dc:b6:7b:ba:68:45:3e:9c:a9:34:8b:bb:83:73:9a:c0:f0:
9f:37:8a:89:dc:d2:b9:c5:61:6e:bc:a2:87:82:c4:39:a7:2c:
01:c7:e4:f3:cc:32:56:13:d1:48:56:31:02:3a:cf:d5:20:a6:
e7:26:84:62:2d:18:70:f1:d7:b7:d6:99:40:e1:3f:5f:1f:71:
a8:e7:b6:a7:21:0b:61:6f:c7:d2:46:5d:3a:6c:7b:79:e8:7a:
c1:a3:03:be:fa:3e:61:ff:71:80:52:8a:83:a2:86:50:bc:f3:
43:c7:88:22:6e:27:a2:cd:9a:60:67:47:6e:34:ec:7e:04:7e:
36:cd:11:fa:61:d2:83:0a:44:15:2b:cb:4f:02:3e:6d:d5:5c:
2d:3f:c7:62:f3:b5:19:39:d9:6c:b2:88:62:df:49:4b:30:4e:
b0:c6:17:c6:9d:3d:a0:c8:8b:93:70:ec:6e:ea:b8:d0:04:9f:
6a:f6:f5:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUw5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI3MTUxNzQ1WhcNMjUwMjA5MTUxNzQ1WjAYMRYw
FAYDVQQDEw02Nzk3YTM5ZC1lNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqHBmmBsES1CjFpWeILQR9QvLq6/FB2pyjtGxHtyxWPtV7iakbMQfHm9g
Sgl8vWH+OWesoMxpviQXFF4lgYxxH5Eb2CWAWHbP2T3OQAHkuuAH/75zk3recBr7
tPLsNnQgOYZPDYErvIvYGy/Kovhjug9zD/mce0ZOktCaH+XILS7WtIbtl+Gi91+r
DOZfqRNOoXfEEsiYORg/lumsUX0Yvb9ShE0npLxy00JRPRg8rjsKJJMPJER7HAiW
4fSv7+RrIkfiFI5tHoEnJtcjGR9OFQ+Geer1E0huZuuMN6/l+Vr6wxZ6zlLPHMW+
ukF5KF/SqE+nwx23MyLMzjHinfgEsQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGhD
7I1w8EvfpvgNyfBMCGudj4adMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERTRGNDU1Q0RDQzExMUVGQUM2RTgwNTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlZsMA0GCSqGSIb3DQEB
CwUAA4IBAQA9Ofb+2atv2rFWHOziHLI91ZHKWDn3KTsbUkSDV8Gxja6xqXN9rItQ
kruCskc4FuQUlYIFSV1G2EP8/kpjafHnw7fYWJBni/b53LZ7umhFPpypNIu7g3Oa
wPCfN4qJ3NK5xWFuvKKHgsQ5pywBx+TzzDJWE9FIVjECOs/VIKbnJoRiLRhw8de3
1plA4T9fH3Go57anIQthb8fSRl06bHt56HrBowO++j5h/3GAUoqDooZQvPNDx4gi
bieizZpgZ0duNOx+BH42zRH6YdKDCkQVK8tPAj5t1VwtP8di87UZOdlssohi30lL
ME6wxhfGnT2gyIuTcOxu6rjQBJ9q9vUI
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:56 2025 by rpki-client