Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0DF54D6DA2511EFA0FF5FB4762E951A.roa
File: E0DF54D6DA2511EFA0FF5FB4762E951A.roa (raw, json)
Hash identifier: y2852QsHt2X13lYm0kIibPMVw9mT52NoouDaXAm62Fs=
Subject key identifier: 3E:2A:4F:F7:4E:F8:E2:D3:6C:F2:F1:FD:DD:E4:29:22:EF:D8:C1:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014420
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0DF54D6DA2511EFA0FF5FB4762E951A.roa
Signing time: Fri 24 Jan 2025 07:36:09 +0000
ROA not before: Fri 24 Jan 2025 07:36:05 +0000
ROA not after: Wed 05 Mar 2025 07:36:05 +0000
asID: 202656
IP address blocks: 154.222.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82976 (0x14420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 07:36:05 2025 GMT
Not After : Mar 5 07:36:05 2025 GMT
Subject: CN=679342e9-608f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:63:c8:11:80:36:e1:46:3f:2d:0d:79:9b:1b:
eb:79:4d:e3:62:a2:1c:9d:34:47:b3:de:c0:49:9b:
18:1d:43:54:f9:11:dd:41:44:44:e6:a0:ef:81:4a:
14:bd:90:b4:1f:f5:14:41:cd:3d:36:8f:4f:79:28:
12:5f:9b:b9:63:2f:e8:5b:35:af:57:d4:d2:8c:e1:
eb:c7:0a:9e:e2:dd:49:bd:70:23:e9:d8:60:f0:16:
6b:51:82:84:8a:4b:25:8d:15:62:94:6e:28:ae:34:
ea:76:77:a7:74:0c:98:34:fa:50:83:d1:1c:2a:a7:
82:8a:b3:02:17:d6:55:b1:4d:3c:4d:ea:09:d9:b8:
6e:44:49:7f:d0:23:26:52:af:6e:53:b5:b5:38:59:
a4:0e:8b:0c:c3:de:d4:9a:1b:a6:da:8e:8e:9e:1d:
ed:8d:fd:20:f1:70:1b:1d:e0:99:78:a1:9e:bf:a3:
2e:42:dd:52:9c:41:ab:a1:e5:b5:9f:d2:c8:81:c3:
3b:b9:b8:4f:5c:c6:47:95:ee:5b:7b:1d:46:32:3c:
7c:f5:53:2a:08:bf:21:a5:01:26:ba:d5:4d:d6:65:
23:f8:d8:aa:7a:0c:47:55:ba:fa:7c:c0:0b:40:70:
7b:bf:39:61:78:9f:83:ed:07:c9:4d:95:62:16:3e:
98:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2A:4F:F7:4E:F8:E2:D3:6C:F2:F1:FD:DD:E4:29:22:EF:D8:C1:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0DF54D6DA2511EFA0FF5FB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.192.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:95:21:1b:42:07:f5:4d:8e:b0:54:49:4b:c5:93:63:a4:6f:
c5:4c:f1:32:53:6f:2c:b0:51:52:f2:36:ad:3a:5d:8a:cc:88:
fb:a4:db:8c:0f:aa:7d:ae:09:0d:85:f9:95:fb:51:f6:da:81:
20:02:e3:54:33:a5:26:2a:0d:73:56:fd:bc:ae:01:47:de:e2:
94:12:4b:31:7a:3f:09:38:b5:f6:4f:14:00:8c:dd:0b:a2:20:
87:e6:ab:28:09:aa:27:7e:8b:4b:26:de:d1:b8:d3:df:3a:1d:
a4:e8:cd:0f:ab:3e:06:34:75:18:22:28:2b:6e:e8:f0:95:8f:
88:f6:09:dd:63:e6:25:28:84:49:66:04:f9:77:f8:33:c6:fe:
22:27:f1:20:06:3b:2d:1b:23:bc:c7:d2:27:02:64:4f:ce:b0:
ac:37:c1:de:27:d1:23:c4:c8:c6:17:b9:98:73:67:91:6b:74:
cc:91:6b:6f:a5:2d:ce:75:15:c8:e8:bc:2d:2e:f4:de:3e:ae:
a1:a6:aa:e9:24:0c:c0:54:97:a3:55:9f:47:d1:ec:6d:0d:03:
9a:e0:54:07:a1:7e:ec:55:27:3c:bd:fc:76:f2:74:57:fe:12:
5e:92:54:b7:08:01:11:9b:6f:2f:fc:17:62:22:e2:9d:d0:07:
8d:cd:56:61
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUQgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MDczNjA1WhcNMjUwMzA1MDczNjA1WjAYMRYw
FAYDVQQDEw02NzkzNDJlOS02MDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2WPIEYA24UY/LQ15mxvreU3jYqIcnTRHs97ASZsYHUNU+RHdQURE5qDv
gUoUvZC0H/UUQc09No9PeSgSX5u5Yy/oWzWvV9TSjOHrxwqe4t1JvXAj6dhg8BZr
UYKEiksljRVilG4orjTqdnendAyYNPpQg9EcKqeCirMCF9ZVsU08TeoJ2bhuREl/
0CMmUq9uU7W1OFmkDosMw97Umhum2o6Onh3tjf0g8XAbHeCZeKGev6MuQt1SnEGr
oeW1n9LIgcM7ubhPXMZHle5bex1GMjx89VMqCL8hpQEmutVN1mUj+NiqegxHVbr6
fMALQHB7vzlheJ+D7QfJTZViFj6Y/QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFD4q
T/dO+OLTbPLx/d3kKSLv2MEOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMERGNTRENkRBMjUxMUVGQTBGRjVGQjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt7AMA0GCSqGSIb3DQEB
CwUAA4IBAQCglSEbQgf1TY6wVElLxZNjpG/FTPEyU28ssFFS8jatOl2KzIj7pNuM
D6p9rgkNhfmV+1H22oEgAuNUM6UmKg1zVv28rgFH3uKUEksxej8JOLX2TxQAjN0L
oiCH5qsoCaonfotLJt7RuNPfOh2k6M0Pqz4GNHUYIigrbujwlY+I9gndY+YlKIRJ
ZgT5d/gzxv4iJ/EgBjstGyO8x9InAmRPzrCsN8HeJ9EjxMjGF7mYc2eRa3TMkWtv
pS3OdRXI6LwtLvTePq6hpqrpJAzAVJejVZ9H0extDQOa4FQHoX7sVSc8vfx28nRX
/hJeklS3CAERm28v/BdiIuKd0AeNzVZh
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:47:42 2025 by rpki-client