Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFF25C12BEB811EF8EFF798A762E951A.roa
File: EFF25C12BEB811EF8EFF798A762E951A.roa (raw, json)
Hash identifier: KF94aAeaIM7GkRreP6rmAmAWuMLAC1KhomniENwd2hA=
Subject key identifier: 75:2B:60:A1:96:E9:0B:CF:F8:A5:CC:56:56:69:6A:89:59:51:B2:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CDE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFF25C12BEB811EF8EFF798A762E951A.roa
Signing time: Fri 20 Dec 2024 09:58:18 +0000
ROA not before: Fri 20 Dec 2024 09:58:14 +0000
ROA not after: Sun 02 Feb 2025 09:58:14 +0000
asID: 48031
IP address blocks: 154.222.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72926 (0x11cde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 09:58:14 2024 GMT
Not After : Feb 2 09:58:14 2025 GMT
Subject: CN=67653fba-3bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:95:17:1f:c8:5b:bb:34:c5:75:91:6b:6c:
5c:90:27:0f:ae:cd:e9:6e:ce:d0:d8:c8:3a:2c:b1:
80:f7:e3:3b:17:ac:ec:ba:e0:90:d3:5f:1e:73:5d:
4a:9a:75:48:29:71:c0:d3:43:48:3d:1c:43:84:d6:
dc:cc:bf:5f:9c:7f:7b:98:6a:3c:90:6c:f5:0a:61:
9a:9a:0b:b9:8c:28:61:6c:5a:2c:a1:e6:8f:d7:59:
bb:58:95:48:54:cd:d9:ed:cc:ba:af:ba:b3:6c:59:
b6:d3:92:de:b0:4a:ea:d4:ac:e1:9a:09:1d:64:ba:
d3:1a:0c:c8:55:6b:63:76:e0:ee:82:f1:30:9d:21:
4e:46:ba:7d:2a:21:f6:13:cc:95:bc:44:02:a8:59:
fc:52:5a:fa:b1:13:65:37:4e:c4:78:b5:ad:e4:6e:
6c:76:11:98:26:07:06:ef:31:c4:16:df:22:1a:cd:
45:6b:70:63:02:92:a4:81:ea:c2:3d:07:6b:62:98:
0c:69:c2:ea:3c:a5:e9:13:3f:fd:9b:c7:24:08:05:
cc:cb:31:70:28:3f:5e:f3:e8:81:a4:37:96:d9:98:
31:0c:df:6e:36:dd:96:13:ba:b6:69:16:88:65:89:
66:c4:39:5f:4c:65:c4:a9:a5:8f:9b:34:ac:5f:b5:
9d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2B:60:A1:96:E9:0B:CF:F8:A5:CC:56:56:69:6A:89:59:51:B2:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFF25C12BEB811EF8EFF798A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.220.0/22
Signature Algorithm: sha256WithRSAEncryption
53:97:9d:5e:d4:a4:85:41:ec:c6:a3:2c:d4:47:f8:c7:8e:59:
74:e6:f2:38:a7:12:c1:8b:84:55:b1:a3:ad:04:d2:55:81:7f:
ee:0c:9b:aa:0e:27:25:d7:ec:34:aa:69:a9:d1:70:ba:b8:46:
d3:b0:f6:e9:ac:19:03:e7:d1:c8:f8:2e:53:01:24:43:51:df:
56:82:6a:17:75:77:3a:6d:77:a5:f7:c2:3e:7f:83:d0:60:df:
09:18:0c:9b:10:3f:2c:90:47:bd:ce:4b:a7:47:86:73:64:d5:
54:25:6b:ff:6d:dc:26:ba:30:10:e3:17:6e:ba:a0:54:88:46:
58:5a:c8:53:2e:a3:d1:d9:07:b7:20:cd:90:be:b3:09:f9:2a:
8c:cf:d9:b1:ca:c7:1d:0b:36:43:84:21:09:95:47:62:2b:b2:
3d:47:a2:3d:a1:2e:21:27:cb:94:aa:5d:a6:14:2e:e1:6b:e0:
e0:51:92:ce:2c:18:0f:f9:da:d7:e2:43:56:f5:7f:91:06:f8:
bc:df:0a:4e:bd:1e:ee:68:5c:3b:46:cd:d8:71:fa:c9:e4:39:
8d:96:a4:8a:03:2c:c0:45:b2:e7:ec:a8:8a:cf:ac:d1:7e:6d:
74:6b:bc:bf:05:89:95:38:2d:8b:6a:cd:9d:b8:82:1a:20:76:
1c:bf:a9:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARzeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIwMDk1ODE0WhcNMjUwMjAyMDk1ODE0WjAYMRYw
FAYDVQQDEw02NzY1M2ZiYS0zYmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0N+VFx/IW7s0xXWRa2xckCcPrs3pbs7Q2Mg6LLGA9+M7F6zsuuCQ018e
c11KmnVIKXHA00NIPRxDhNbczL9fnH97mGo8kGz1CmGamgu5jChhbFosoeaP11m7
WJVIVM3Z7cy6r7qzbFm205LesErq1KzhmgkdZLrTGgzIVWtjduDugvEwnSFORrp9
KiH2E8yVvEQCqFn8Ulr6sRNlN07EeLWt5G5sdhGYJgcG7zHEFt8iGs1Fa3BjApKk
gerCPQdrYpgMacLqPKXpEz/9m8ckCAXMyzFwKD9e8+iBpDeW2ZgxDN9uNt2WE7q2
aRaIZYlmxDlfTGXEqaWPmzSsX7Wd+QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHUr
YKGW6QvP+KXMVlZpaolZUbJTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRkYyNUMxMkJFQjgxMUVGOEVGRjc5OEE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmt7cMA0GCSqGSIb3DQEB
CwUAA4IBAQBTl51e1KSFQezGoyzUR/jHjll05vI4pxLBi4RVsaOtBNJVgX/uDJuq
Dicl1+w0qmmp0XC6uEbTsPbprBkD59HI+C5TASRDUd9WgmoXdXc6bXel98I+f4PQ
YN8JGAybED8skEe9zkunR4ZzZNVUJWv/bdwmujAQ4xduuqBUiEZYWshTLqPR2Qe3
IM2QvrMJ+SqMz9mxyscdCzZDhCEJlUdiK7I9R6I9oS4hJ8uUql2mFC7ha+DgUZLO
LBgP+drX4kNW9X+RBvi83wpOvR7uaFw7Rs3YcfrJ5DmNlqSKAyzARbLn7KiKz6zR
fm10a7y/BYmVOC2Las2duIIaIHYcv6lq
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:13:13 2025 by rpki-client