Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF7C2F48DA2811EFA238274C762E951A.roa
File: EF7C2F48DA2811EFA238274C762E951A.roa (raw, json)
Hash identifier: PKbg0WaKeUMQg+THAlTZwMudFs5iFN2YG8kSxM44VBQ=
Subject key identifier: 82:CA:57:53:DE:66:94:CA:5B:A7:49:0F:63:AE:CE:E7:CA:42:0B:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01443A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF7C2F48DA2811EFA238274C762E951A.roa
Signing time: Fri 24 Jan 2025 07:58:02 +0000
ROA not before: Fri 24 Jan 2025 07:57:59 +0000
ROA not after: Wed 05 Mar 2025 07:57:59 +0000
asID: 202656
IP address blocks: 154.222.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83002 (0x1443a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 07:57:59 2025 GMT
Not After : Mar 5 07:57:59 2025 GMT
Subject: CN=6793480a-0102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:76:90:09:92:22:05:75:9a:df:0b:6c:00:d0:
1a:12:87:34:d1:9f:47:56:7b:75:70:24:ae:5f:b3:
d6:be:8d:b7:bf:79:d4:11:03:b1:12:ae:2d:2d:e4:
9b:c5:64:df:7d:c4:d3:c4:a4:99:39:af:d1:6e:87:
f7:bc:45:9e:1e:46:1d:71:b8:a5:96:09:41:07:e7:
dd:b0:5b:2f:fe:92:cd:e8:f1:5f:d9:ce:e2:10:2c:
1d:4a:c9:9f:60:12:94:82:fc:79:c3:4c:50:b6:ab:
68:57:57:db:87:30:7e:c5:c9:6d:e9:73:8b:97:d6:
a5:f0:f2:15:c4:5a:be:77:b2:f6:aa:ca:39:55:99:
c1:6a:c7:a2:e0:fb:32:18:df:a2:55:41:25:55:3b:
f5:0f:80:c7:d8:87:19:df:dd:16:7a:7e:ed:67:14:
4f:94:62:f6:cc:33:e5:74:06:6a:de:62:ed:f7:01:
14:fc:01:ff:70:97:c8:34:cb:0c:c3:40:60:17:fd:
d1:13:33:60:1e:90:95:d1:90:52:53:35:fd:7e:61:
cb:19:51:1b:03:86:4f:d2:6a:ba:c6:08:71:1c:b2:
62:a3:ad:45:d0:24:bc:81:e5:96:31:3a:ab:c4:31:
38:ec:93:e4:27:dd:75:4e:95:fd:84:74:29:fb:3f:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CA:57:53:DE:66:94:CA:5B:A7:49:0F:63:AE:CE:E7:CA:42:0B:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF7C2F48DA2811EFA238274C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.43.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ed:50:69:29:25:e4:5e:c1:80:21:c0:f8:7b:2e:a0:b8:ce:
b0:6d:30:e9:5c:34:4f:08:12:70:d2:62:b4:dd:c7:07:2c:02:
c9:be:b3:13:29:99:f5:6b:cd:9b:ac:0c:23:8d:e0:6d:83:0c:
06:1c:9e:c2:56:cf:4e:e4:aa:77:87:ae:13:4b:0f:8b:86:02:
92:50:11:c6:64:4b:08:e7:22:52:09:25:ec:66:95:47:d9:e4:
9a:86:24:cb:51:78:d5:2f:ee:af:e6:0c:1c:2a:05:f6:3c:97:
f6:12:82:52:52:31:59:8d:af:ee:39:81:15:22:6d:47:dd:03:
98:9b:12:14:e5:8a:0e:b9:13:87:58:55:f5:fe:1a:a9:4f:35:
d6:7d:5a:d9:d6:b7:d1:a3:dd:72:e5:b6:98:dd:36:dd:19:ee:
2b:cb:1f:24:52:7e:06:ce:24:16:27:90:80:13:61:13:66:85:
d1:30:0a:9c:50:b2:35:b2:64:c3:c7:d8:0f:91:ef:2a:eb:4d:
26:4c:e7:13:ac:9a:e4:80:34:20:f3:89:02:ea:13:7c:4c:ff:
3f:a2:21:aa:11:ea:82:0a:b3:47:fb:cb:50:ca:bf:3a:b8:1a:
8a:b4:69:0b:da:98:e3:f8:25:06:89:bc:e0:4c:53:43:ca:32:
9f:1a:6d:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUQ6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MDc1NzU5WhcNMjUwMzA1MDc1NzU5WjAYMRYw
FAYDVQQDEw02NzkzNDgwYS0wMTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6HaQCZIiBXWa3wtsANAaEoc00Z9HVnt1cCSuX7PWvo23v3nUEQOxEq4t
LeSbxWTffcTTxKSZOa/Rbof3vEWeHkYdcbillglBB+fdsFsv/pLN6PFf2c7iECwd
SsmfYBKUgvx5w0xQtqtoV1fbhzB+xclt6XOLl9al8PIVxFq+d7L2qso5VZnBasei
4PsyGN+iVUElVTv1D4DH2IcZ390Wen7tZxRPlGL2zDPldAZq3mLt9wEU/AH/cJfI
NMsMw0BgF/3REzNgHpCV0ZBSUzX9fmHLGVEbA4ZP0mq6xghxHLJio61F0CS8geWW
MTqrxDE47JPkJ911TpX9hHQp+z9PXQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFILK
V1PeZpTKW6dJD2OuzufKQgtOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRjdDMkY0OERBMjgxMUVGQTIzODI3NEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt4rMA0GCSqGSIb3DQEB
CwUAA4IBAQBD7VBpKSXkXsGAIcD4ey6guM6wbTDpXDRPCBJw0mK03ccHLALJvrMT
KZn1a82brAwjjeBtgwwGHJ7CVs9O5Kp3h64TSw+LhgKSUBHGZEsI5yJSCSXsZpVH
2eSahiTLUXjVL+6v5gwcKgX2PJf2EoJSUjFZja/uOYEVIm1H3QOYmxIU5YoOuROH
WFX1/hqpTzXWfVrZ1rfRo91y5baY3TbdGe4ryx8kUn4GziQWJ5CAE2ETZoXRMAqc
ULI1smTDx9gPke8q600mTOcTrJrkgDQg84kC6hN8TP8/oiGqEeqCCrNH+8tQyr86
uBqKtGkL2pjj+CUGibzgTFNDyjKfGm0B
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:53 2025 by rpki-client