Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CF52404D99111EF801B3C49762E951A.roa
File: 1CF52404D99111EF801B3C49762E951A.roa (raw, json)
Hash identifier: y0zb/mCOFPFAMBgngWZIyjegeWAgfiXOcmPEowXdCxo=
Subject key identifier: 83:F5:4E:C5:04:D6:D6:21:CD:5D:6E:3D:DF:70:90:D0:9B:BE:EF:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014290
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CF52404D99111EF801B3C49762E951A.roa
Signing time: Thu 23 Jan 2025 13:51:15 +0000
ROA not before: Thu 23 Jan 2025 13:51:11 +0000
ROA not after: Tue 13 May 2025 13:51:11 +0000
asID: 138915
IP address blocks: 154.205.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82576 (0x14290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 23 13:51:11 2025 GMT
Not After : May 13 13:51:11 2025 GMT
Subject: CN=67924953-4efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:01:cc:07:7d:ee:90:a2:b6:4a:44:d2:ef:
63:39:57:93:2e:18:5e:79:55:9e:80:b1:2a:15:17:
d8:ef:66:84:aa:b1:1e:c7:1c:e7:b0:00:e5:9c:42:
c7:c2:d4:b3:2b:62:ec:48:03:cd:6c:a6:d1:2c:a7:
60:5a:a7:97:57:bf:81:55:1c:86:f2:a5:58:38:a5:
42:23:77:bb:26:16:82:a4:72:60:82:cd:90:79:f8:
3b:39:7d:f4:dd:66:b1:33:2d:f7:c9:60:7f:99:a4:
91:32:8f:06:19:68:a2:3b:7f:da:2b:6b:69:d8:74:
3f:83:7a:f1:27:b2:0b:10:30:04:95:b2:60:5c:75:
e6:6a:d4:64:94:82:3b:cf:39:bf:95:ca:6b:e6:f8:
0a:13:1f:f3:82:4f:25:9f:a7:7f:e8:cb:9d:d9:c1:
48:eb:c2:44:0b:48:45:24:5f:f8:c3:e0:f1:49:be:
9c:94:14:06:7a:bd:0d:ea:a5:f6:e9:b0:20:dc:0f:
51:1f:7b:2e:d2:64:65:1f:84:39:59:75:87:3c:88:
c1:bd:9a:f9:a5:3e:b3:99:c4:aa:dd:5f:12:45:70:
db:45:5e:26:0e:26:ed:c9:bf:94:b3:3f:47:65:62:
e9:6c:25:f4:ca:cb:42:ee:65:51:32:b2:a7:bc:1e:
1a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F5:4E:C5:04:D6:D6:21:CD:5D:6E:3D:DF:70:90:D0:9B:BE:EF:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CF52404D99111EF801B3C49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.150.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:5a:dd:0e:75:61:88:ec:b0:a3:10:35:c4:12:64:f9:f3:04:
c0:6b:d1:0f:09:4e:db:76:37:73:3d:df:2e:d8:f0:73:b6:aa:
25:e4:d9:62:d4:2e:2a:18:64:e6:8b:25:26:30:01:32:41:2d:
0d:29:cb:f6:a2:cd:a7:d5:04:40:47:4c:76:e7:a7:e6:c9:1c:
40:24:84:e2:43:11:dc:9a:fc:31:65:6a:7f:8c:93:66:a9:87:
d9:fb:1d:38:05:3c:f6:60:85:51:28:2a:c6:38:e8:ba:3e:09:
71:22:bf:1c:a9:bf:cc:4a:da:c8:27:49:7a:c9:bd:1f:c4:c9:
a2:8e:a3:23:78:a0:ad:58:a3:e0:82:d1:22:87:96:e0:22:88:
0a:03:ba:be:ec:e2:00:06:be:de:bd:b5:d1:63:b6:1d:10:00:
0a:7c:d1:1a:64:e0:46:07:d0:2f:3b:ac:70:c2:03:fb:fa:bc:
65:1f:09:06:40:6f:89:5b:8b:2a:a1:aa:29:b2:80:f0:2d:62:
bc:7e:c8:f3:7c:94:c4:af:4b:0e:7a:06:ac:05:c0:d1:21:ab:
8b:af:32:77:c6:3f:1e:db:13:cb:14:ab:80:b5:7c:f2:6b:ce:
a1:52:51:26:d3:42:27:54:82:3b:d6:06:99:9a:21:3b:3e:96:
6f:3c:53:3a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUKQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTM1MTExWhcNMjUwNTEzMTM1MTExWjAYMRYw
FAYDVQQDEw02NzkyNDk1My00ZWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp7cBzAd97pCitkpE0u9jOVeTLhheeVWegLEqFRfY72aEqrEexxznsADl
nELHwtSzK2LsSAPNbKbRLKdgWqeXV7+BVRyG8qVYOKVCI3e7JhaCpHJggs2Qefg7
OX303WaxMy33yWB/maSRMo8GGWiiO3/aK2tp2HQ/g3rxJ7ILEDAElbJgXHXmatRk
lII7zzm/lcpr5vgKEx/zgk8ln6d/6Mud2cFI68JEC0hFJF/4w+DxSb6clBQGer0N
6qX26bAg3A9RH3su0mRlH4Q5WXWHPIjBvZr5pT6zmcSq3V8SRXDbRV4mDibtyb+U
sz9HZWLpbCX0ystC7mVRMrKnvB4apQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIP1
TsUE1tYhzV1uPd9wkNCbvu9yMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQ0Y1MjQwNEQ5OTExMUVGODAxQjNDNDk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms2WMA0GCSqGSIb3DQEB
CwUAA4IBAQAaWt0OdWGI7LCjEDXEEmT58wTAa9EPCU7bdjdzPd8u2PBztqol5Nli
1C4qGGTmiyUmMAEyQS0NKcv2os2n1QRAR0x256fmyRxAJITiQxHcmvwxZWp/jJNm
qYfZ+x04BTz2YIVRKCrGOOi6PglxIr8cqb/MStrIJ0l6yb0fxMmijqMjeKCtWKPg
gtEih5bgIogKA7q+7OIABr7evbXRY7YdEAAKfNEaZOBGB9AvO6xwwgP7+rxlHwkG
QG+JW4sqoaopsoDwLWK8fsjzfJTEr0sOegasBcDRIauLrzJ3xj8e2xPLFKuAtXzy
a86hUlEm00InVII71gaZmiE7PpZvPFM6
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:17 2025 by rpki-client