Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD26A7F2E3A711EFB966FA64762E951A.roa
File: BD26A7F2E3A711EFB966FA64762E951A.roa (raw, json)
Hash identifier: W7jIwJ+MKYvzrL/B6lIE3GBhnxuBTenTaoQrYdD+uTo=
Subject key identifier: DD:26:3F:4E:53:52:80:AA:2A:3D:B0:17:A4:03:1F:0B:76:6D:B1:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0151A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD26A7F2E3A711EFB966FA64762E951A.roa
Signing time: Wed 05 Feb 2025 09:58:25 +0000
ROA not before: Wed 05 Feb 2025 09:58:21 +0000
ROA not after: Wed 30 Apr 2025 09:58:21 +0000
asID: 18229
IP address blocks: 154.210.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86440 (0x151a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 5 09:58:21 2025 GMT
Not After : Apr 30 09:58:21 2025 GMT
Subject: CN=67a33640-b066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5f:f2:6e:9b:52:4d:8f:4e:ab:24:0f:b7:0a:
5a:a1:dc:df:b9:0c:f3:7c:d0:86:a0:c9:3d:87:d1:
51:15:45:09:f1:5e:c7:be:2b:46:30:64:55:f3:1a:
f4:7d:7b:d6:a4:76:92:41:b4:79:a9:5d:29:83:ee:
8e:6e:61:e3:ba:11:7e:53:c2:13:50:46:14:ae:5e:
72:49:97:e5:ee:85:78:df:88:31:f3:01:f8:04:87:
a0:69:cf:20:d0:8d:94:bd:fc:9a:91:54:42:71:e3:
b2:a3:f4:c3:ca:11:2e:fa:f6:d3:40:a1:98:5c:77:
39:27:b9:ca:b4:9c:53:6b:d6:34:73:2c:f3:6d:0f:
cc:86:54:19:4a:eb:3b:5d:91:c6:67:1d:a4:c2:41:
23:e2:fc:4f:c7:7d:79:85:36:9b:e4:7c:ac:a8:e4:
a5:31:e0:e1:af:61:77:2a:2d:29:a8:6e:66:5c:1e:
68:c7:41:01:9d:f6:99:ce:fd:31:ff:d8:79:9d:18:
d3:c7:bc:e8:57:6e:af:58:2c:26:18:9a:66:c1:ee:
81:ce:9e:e5:33:f8:65:9e:34:f9:02:ec:27:50:60:
f3:0a:83:0d:dc:14:ef:54:66:47:56:80:54:d2:63:
b8:ce:58:91:10:d6:61:9e:17:b4:e9:8c:c4:be:f4:
0d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:26:3F:4E:53:52:80:AA:2A:3D:B0:17:A4:03:1F:0B:76:6D:B1:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD26A7F2E3A711EFB966FA64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.214.0/24
Signature Algorithm: sha256WithRSAEncryption
00:1f:e4:63:b3:2b:c7:e6:b9:59:45:36:4c:8e:a5:62:ab:17:
c7:df:ef:dc:1a:fc:81:0a:60:bc:19:b6:8c:d1:3e:02:0a:b4:
f8:56:11:e6:fa:44:21:8a:1b:b3:58:c4:89:ce:19:38:2a:99:
a8:70:4a:1a:5d:e1:53:03:61:a1:44:78:f5:e4:4a:1c:c4:95:
53:f5:42:ea:4a:e5:72:98:1d:a7:13:be:16:3f:40:82:b2:b5:
2a:20:58:84:2f:d7:db:06:30:a3:74:7a:32:8c:73:c7:48:d4:
1d:b8:4b:26:1b:52:fa:ec:fc:35:bb:af:a7:78:3a:bd:27:77:
ae:81:72:5d:6b:50:c6:98:71:ea:bb:6b:1f:e2:61:9d:63:35:
a4:da:29:7b:d6:78:75:a6:89:63:bb:af:31:e6:b2:a6:0f:e6:
b3:1a:02:6f:1a:7e:d5:a3:93:e1:48:14:89:f2:da:16:11:a9:
b3:bd:a9:fc:a5:f9:e3:43:b0:7f:30:bb:e6:62:4c:97:65:99:
84:fb:87:bf:fa:af:82:49:c1:20:ca:89:75:cb:45:2c:68:85:
f6:29:1f:1a:72:9e:28:de:b7:aa:1d:46:04:28:a0:f4:a0:48:
fa:61:7e:b4:b2:04:7c:8a:70:ae:ea:cb:f8:95:a3:5d:11:c6:
b3:5a:3f:d7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVGoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjA1MDk1ODIxWhcNMjUwNDMwMDk1ODIxWjAYMRYw
FAYDVQQDEw02N2EzMzY0MC1iMDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA21/ybptSTY9OqyQPtwpaodzfuQzzfNCGoMk9h9FRFUUJ8V7HvitGMGRV
8xr0fXvWpHaSQbR5qV0pg+6ObmHjuhF+U8ITUEYUrl5ySZfl7oV434gx8wH4BIeg
ac8g0I2UvfyakVRCceOyo/TDyhEu+vbTQKGYXHc5J7nKtJxTa9Y0cyzzbQ/MhlQZ
Sus7XZHGZx2kwkEj4vxPx315hTab5HysqOSlMeDhr2F3Ki0pqG5mXB5ox0EBnfaZ
zv0x/9h5nRjTx7zoV26vWCwmGJpmwe6Bzp7lM/hlnjT5AuwnUGDzCoMN3BTvVGZH
VoBU0mO4zliRENZhnhe06YzEvvQNbQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN0m
P05TUoCqKj2wF6QDHwt2bbFOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRDI2QTdGMkUzQTcxMUVGQjk2NkZBNjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtLWMA0GCSqGSIb3DQEB
CwUAA4IBAQAAH+RjsyvH5rlZRTZMjqViqxfH3+/cGvyBCmC8GbaM0T4CCrT4VhHm
+kQhihuzWMSJzhk4KpmocEoaXeFTA2GhRHj15EocxJVT9ULqSuVymB2nE74WP0CC
srUqIFiEL9fbBjCjdHoyjHPHSNQduEsmG1L67Pw1u6+neDq9J3eugXJda1DGmHHq
u2sf4mGdYzWk2il71nh1polju68x5rKmD+azGgJvGn7Vo5PhSBSJ8toWEamzvan8
pfnjQ7B/MLvmYkyXZZmE+4e/+q+CScEgyol1y0UsaIX2KR8acp4o3reqHUYEKKD0
oEj6YX60sgR8inCu6sv4laNdEcazWj/X
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:56 2025 by rpki-client