Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07CA9A10D9C711EFAC62AAAC762E951A.roa
File: 07CA9A10D9C711EFAC62AAAC762E951A.roa (raw, json)
Hash identifier: xKSon3kQdKlH40huxMSTQEZd6ufPj5YvBKLyg9TDmLg=
Subject key identifier: 20:8A:3B:1B:7C:A8:FA:C4:DB:D1:7C:1A:01:C7:0E:DF:FE:E3:28:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07CA9A10D9C711EFAC62AAAC762E951A.roa
Signing time: Thu 23 Jan 2025 20:17:12 +0000
ROA not before: Fri 24 Jan 2025 20:17:08 +0000
ROA not after: Fri 28 Feb 2025 20:17:08 +0000
asID: 62240
IP address blocks: 154.196.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82630 (0x142c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 20:17:08 2025 GMT
Not After : Feb 28 20:17:08 2025 GMT
Subject: CN=6792a3c8-4b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:83:9d:e8:8a:0a:cf:7e:e2:b6:30:e7:cb:
f4:d4:39:56:e1:80:a4:3d:9f:40:35:31:25:d4:4f:
72:c1:14:e4:20:07:5d:6a:6f:6e:a6:83:29:25:bd:
61:4f:f1:13:c2:a3:b3:dd:1c:77:8f:1c:52:c3:00:
e5:67:65:72:07:95:e5:4b:c0:aa:46:55:5f:b6:4d:
b0:36:0d:3e:41:2e:95:72:fc:4d:fa:3d:c8:86:d7:
be:07:ef:6a:81:a0:37:b3:e1:11:a2:c6:ae:b6:4a:
7b:03:6f:aa:c8:df:e9:ac:91:c9:12:8b:80:1e:a0:
b0:f4:8e:1b:0b:de:a1:d0:05:26:f1:db:cb:4e:8b:
22:b3:4c:e4:8c:b5:60:27:3e:a5:df:01:47:1d:9d:
e5:a1:fa:18:55:fe:c5:9c:78:29:b4:3f:75:12:b6:
bc:bf:3b:0a:d7:d9:be:de:7f:4a:fc:99:07:00:67:
f0:29:aa:cb:81:0c:04:61:98:26:f9:a0:51:d7:e9:
29:b9:8d:58:1b:28:75:a8:3c:57:d1:f2:a4:e0:09:
a4:77:29:d5:0a:17:56:c5:4c:e3:15:b5:97:25:ff:
40:b7:76:38:83:eb:9e:3f:93:ad:d2:68:13:17:93:
4a:12:0d:eb:7b:3a:2c:68:d0:90:61:45:a2:a5:1b:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8A:3B:1B:7C:A8:FA:C4:DB:D1:7C:1A:01:C7:0E:DF:FE:E3:28:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07CA9A10D9C711EFAC62AAAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.47.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:43:d2:7d:75:e8:84:c4:7f:b9:dc:40:64:c1:41:8c:0a:e3:
6e:01:5e:07:53:7c:1b:55:26:06:07:a4:a7:e6:3a:d2:39:52:
e4:9f:fe:7b:86:5c:88:18:87:5f:3f:6c:a7:9a:6e:cb:63:b2:
04:a6:9a:f8:bf:80:20:10:87:c1:3b:5f:f3:4c:a8:97:6e:a5:
17:bb:eb:71:33:c2:89:d0:3f:02:e4:0b:69:4e:08:6f:a6:7d:
81:4b:00:89:30:6a:48:08:e2:1a:eb:2f:f8:d7:09:be:10:d4:
75:5b:c8:e8:00:d7:ff:ff:e6:ab:b8:c6:86:78:5a:d3:96:fe:
0c:5a:6b:ce:a9:b8:37:bb:0f:a1:94:e9:35:71:c7:47:a3:7c:
97:a8:d4:fd:8c:ec:76:50:09:66:33:f8:d7:ff:53:10:94:14:
0a:2b:4d:92:57:7f:5e:2b:79:53:18:26:2c:64:aa:2f:e6:ee:
8b:8d:c9:7a:88:f1:09:d6:53:f9:ed:3a:2f:97:fc:9a:67:31:
de:fd:fd:34:a3:95:df:35:73:4f:b5:9e:92:87:5a:67:64:78:
36:00:ca:de:4e:c3:7c:c2:06:4b:3b:2c:a7:43:d3:b2:82:f4:
64:f0:30:d0:7b:4a:4a:1b:08:20:71:42:17:fa:ea:86:0c:02:
17:ea:19:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAULGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MjAxNzA4WhcNMjUwMjI4MjAxNzA4WjAYMRYw
FAYDVQQDEw02NzkyYTNjOC00YjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzaKDneiKCs9+4rYw58v01DlW4YCkPZ9ANTEl1E9ywRTkIAddam9upoMp
Jb1hT/ETwqOz3Rx3jxxSwwDlZ2VyB5XlS8CqRlVftk2wNg0+QS6VcvxN+j3Ihte+
B+9qgaA3s+ERosautkp7A2+qyN/prJHJEouAHqCw9I4bC96h0AUm8dvLTosis0zk
jLVgJz6l3wFHHZ3lofoYVf7FnHgptD91Era8vzsK19m+3n9K/JkHAGfwKarLgQwE
YZgm+aBR1+kpuY1YGyh1qDxX0fKk4AmkdynVChdWxUzjFbWXJf9At3Y4g+ueP5Ot
0mgTF5NKEg3rezosaNCQYUWipRtsZwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCCK
Oxt8qPrE29F8GgHHDt/+4yjRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wN0NBOUExMEQ5QzcxMUVGQUM2MkFBQUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsQvMA0GCSqGSIb3DQEB
CwUAA4IBAQBsQ9J9deiExH+53EBkwUGMCuNuAV4HU3wbVSYGB6Sn5jrSOVLkn/57
hlyIGIdfP2ynmm7LY7IEppr4v4AgEIfBO1/zTKiXbqUXu+txM8KJ0D8C5AtpTghv
pn2BSwCJMGpICOIa6y/41wm+ENR1W8joANf//+aruMaGeFrTlv4MWmvOqbg3uw+h
lOk1ccdHo3yXqNT9jOx2UAlmM/jX/1MQlBQKK02SV39eK3lTGCYsZKov5u6Ljcl6
iPEJ1lP57Tovl/yaZzHe/f00o5XfNXNPtZ6Sh1pnZHg2AMreTsN8wgZLOyynQ9Oy
gvRk8DDQe0pKGwggcUIX+uqGDAIX6hke
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:36 2025 by rpki-client