Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAAB0EBEDA6211EFB34A9155762E951A.roa
File: EAAB0EBEDA6211EFB34A9155762E951A.roa (raw, json)
Hash identifier: SGegDuPryf/2ZnZLjgCIxG9X72kRtGERykReJvOE1tI=
Subject key identifier: B0:FA:7D:BF:3F:AF:72:71:60:B5:00:9F:7F:D4:C9:96:F8:C4:AE:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014873
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAAB0EBEDA6211EFB34A9155762E951A.roa
Signing time: Fri 24 Jan 2025 14:53:05 +0000
ROA not before: Fri 24 Jan 2025 14:53:01 +0000
ROA not after: Sat 01 Mar 2025 14:53:01 +0000
asID: 44559
IP address blocks: 154.203.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84083 (0x14873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:53:01 2025 GMT
Not After : Mar 1 14:53:01 2025 GMT
Subject: CN=6793a951-e895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:69:5c:77:cb:53:42:c2:0e:40:06:58:a7:
a2:2a:bd:64:bf:5f:56:56:01:85:81:7d:58:c7:1d:
1c:90:3f:c7:a7:11:d9:3e:ff:9d:d0:5c:b4:b0:68:
19:e2:32:f3:4a:ed:43:74:90:47:fc:c9:9f:a4:74:
58:17:56:1f:fa:e7:67:60:39:3f:9e:96:bc:56:22:
eb:9d:8e:09:5f:2b:fb:3d:ff:dc:50:70:ed:36:39:
dd:ee:97:1c:27:e3:ef:71:01:ea:7c:d0:a2:42:1d:
b2:b0:28:ac:ac:f7:67:af:2e:1a:c9:78:76:28:b3:
7d:f6:09:c6:ee:c9:d4:b6:1b:c2:74:ea:69:89:00:
03:13:56:d4:05:ae:9c:f8:79:94:93:f0:06:93:16:
29:bd:3d:4f:7b:81:bb:46:f5:90:16:93:3e:65:3d:
a4:ec:7c:fa:b1:3f:82:e9:ae:5c:80:8f:1e:aa:89:
08:3e:71:a6:d8:6f:05:b2:f0:a5:04:14:03:a0:0f:
d5:18:36:99:2a:e2:9f:8a:02:b1:31:86:4b:f6:ff:
f7:e0:44:b0:f8:2d:73:b0:7b:e5:75:5e:ca:50:77:
1c:50:63:b6:e1:5c:06:eb:9b:4e:f1:7d:79:8d:2b:
18:0a:78:ef:5f:cd:8a:56:09:5f:ed:9c:5e:b3:ee:
12:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FA:7D:BF:3F:AF:72:71:60:B5:00:9F:7F:D4:C9:96:F8:C4:AE:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAAB0EBEDA6211EFB34A9155762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.217.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a0:eb:5a:18:64:18:d7:69:e5:bc:e7:51:12:33:47:cb:ac:
4b:47:5e:a3:98:fc:13:e4:04:b4:e4:98:70:58:e1:9f:d1:d5:
f4:56:60:66:49:ca:e8:45:89:01:2b:cb:15:30:9a:ac:d5:89:
e2:da:50:5e:a6:22:7d:54:a7:0e:a1:36:7b:5f:3e:0f:60:43:
ae:76:f6:99:85:65:80:f8:bc:21:ee:7a:af:e9:2f:04:89:e0:
57:1f:25:62:43:c0:ca:ff:34:98:d3:ce:06:af:3a:54:b6:ad:
03:e2:b2:1a:34:2a:14:12:c9:e3:48:e9:fd:86:43:a9:ce:bf:
ee:bf:ff:6e:ee:1d:6d:00:50:fc:ac:13:dc:5b:a8:07:b8:dd:
49:24:88:23:ba:2e:79:64:df:91:d5:45:35:31:f5:a1:7d:de:
2f:a5:52:c0:97:0b:18:82:14:09:0e:48:5b:49:ec:c7:b2:63:
08:bf:be:9c:ad:1f:35:ed:f0:dd:b6:c5:02:78:d5:0b:58:2b:
f7:63:65:e5:1a:01:63:ff:bf:66:f6:5a:1d:35:b0:c3:f1:b7:
61:97:34:42:09:b6:16:69:f7:1a:50:59:65:22:68:29:99:7f:
0c:27:6e:07:f4:09:a5:3c:ab:21:74:2d:6f:d1:d2:81:32:46:
c6:d2:0f:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUhzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTQ1MzAxWhcNMjUwMzAxMTQ1MzAxWjAYMRYw
FAYDVQQDEw02NzkzYTk1MS1lODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyzZpXHfLU0LCDkAGWKeiKr1kv19WVgGFgX1Yxx0ckD/HpxHZPv+d0Fy0
sGgZ4jLzSu1DdJBH/MmfpHRYF1Yf+udnYDk/npa8ViLrnY4JXyv7Pf/cUHDtNjnd
7pccJ+PvcQHqfNCiQh2ysCisrPdnry4ayXh2KLN99gnG7snUthvCdOppiQADE1bU
Ba6c+HmUk/AGkxYpvT1Pe4G7RvWQFpM+ZT2k7Hz6sT+C6a5cgI8eqokIPnGm2G8F
svClBBQDoA/VGDaZKuKfigKxMYZL9v/34ESw+C1zsHvldV7KUHccUGO24VwG65tO
8X15jSsYCnjvX82KVglf7Zxes+4SzwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLD6
fb8/r3JxYLUAn3/UyZb4xK7tMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQUFCMEVCRURBNjIxMUVGQjM0QTkxNTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsvZMA0GCSqGSIb3DQEB
CwUAA4IBAQBzoOtaGGQY12nlvOdREjNHy6xLR16jmPwT5AS05JhwWOGf0dX0VmBm
ScroRYkBK8sVMJqs1Yni2lBepiJ9VKcOoTZ7Xz4PYEOudvaZhWWA+Lwh7nqv6S8E
ieBXHyViQ8DK/zSY084GrzpUtq0D4rIaNCoUEsnjSOn9hkOpzr/uv/9u7h1tAFD8
rBPcW6gHuN1JJIgjui55ZN+R1UU1MfWhfd4vpVLAlwsYghQJDkhbSezHsmMIv76c
rR817fDdtsUCeNULWCv3Y2XlGgFj/79m9lodNbDD8bdhlzRCCbYWafcaUFllImgp
mX8MJ24H9AmlPKshdC1v0dKBMkbG0g/0
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:37 2025 by rpki-client