Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16A2D986CD9111EFBF850B52762E951A.roa
File: 16A2D986CD9111EFBF850B52762E951A.roa (raw, json)
Hash identifier: FU4rRtToOFLs8j88pNI8w7dCfWYLwqzEPk9GbVncoZQ=
Subject key identifier: 5A:31:4A:A8:FD:74:64:1F:B7:4B:73:B9:0F:58:D3:15:74:FC:D6:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013692
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16A2D986CD9111EFBF850B52762E951A.roa
Signing time: Wed 08 Jan 2025 07:20:51 +0000
ROA not before: Wed 08 Jan 2025 07:20:47 +0000
ROA not after: Wed 12 Feb 2025 07:20:47 +0000
asID: 272854
IP address blocks: 154.197.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79506 (0x13692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 8 07:20:47 2025 GMT
Not After : Feb 12 07:20:47 2025 GMT
Subject: CN=677e2752-1a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:1a:b9:5a:e5:76:6f:e5:79:10:5d:9e:b3:
d6:9f:24:d2:77:16:1a:ec:f4:75:76:13:3e:e8:65:
cd:a8:28:9a:e1:80:40:87:e3:56:9a:f3:66:2a:1b:
83:d8:c3:e6:1e:d0:17:e6:43:78:ae:16:12:aa:fc:
62:74:dd:dd:cc:38:db:d0:1e:9b:46:2f:91:85:f8:
7a:8c:b9:13:e0:d2:42:ed:3e:7b:d9:60:12:96:7d:
a7:be:eb:8e:3a:dc:d3:c5:79:d1:cd:8b:b4:d6:bf:
8a:74:0b:52:05:fe:ff:34:cb:40:4b:40:1f:42:3d:
9d:01:dd:a1:02:17:5c:0c:69:4c:08:5f:92:33:fb:
c8:9b:ba:d1:6c:60:bb:c7:dd:15:52:a7:f5:c2:8e:
20:0c:dc:75:7a:3e:e6:b5:01:ee:3e:92:fa:d7:48:
1c:f9:b6:eb:1a:68:46:fe:64:97:01:2a:12:5d:a8:
2e:e8:58:4a:f6:07:b2:33:d1:fa:d1:f0:6b:d0:2e:
f9:d3:c2:ca:1f:6b:9c:e7:65:c0:8c:54:e6:75:5c:
dc:e0:a2:ac:6b:97:c5:3d:cf:47:65:d7:c5:ca:57:
7d:f1:43:99:cc:d4:c0:f7:76:fa:3d:d6:e4:73:68:
bb:de:10:61:9a:ce:e6:00:02:dd:08:20:85:5b:40:
66:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:31:4A:A8:FD:74:64:1F:B7:4B:73:B9:0F:58:D3:15:74:FC:D6:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16A2D986CD9111EFBF850B52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.1.0/24
Signature Algorithm: sha256WithRSAEncryption
83:23:6a:d7:0d:14:e8:e5:2d:8a:48:cf:2a:fd:fa:24:fd:2c:
9e:49:10:34:78:f3:f1:39:f5:82:e1:03:74:87:7f:e8:11:c0:
07:ef:e4:27:e9:e0:98:be:59:e7:e1:c9:1a:93:3c:e9:a1:5c:
3c:53:7b:9d:0b:06:1a:e1:82:a6:52:7b:60:1c:34:42:17:5e:
9a:a8:97:1d:11:7f:ee:83:5a:69:1b:a8:5d:20:32:19:f9:1e:
61:d4:c9:0b:88:8c:ba:cc:0b:53:66:c0:22:16:d9:0e:34:9c:
c5:67:28:22:03:ec:9e:27:ce:c5:f8:54:ca:59:82:06:92:ae:
43:7e:83:1d:32:4f:12:54:d5:45:86:12:19:d8:a6:fd:39:68:
ec:a3:bf:88:61:95:51:fc:26:21:1f:91:2f:1a:66:01:56:fe:
84:35:69:3d:7b:7b:6e:25:0a:b2:0f:59:92:3f:a4:aa:48:c2:
10:27:fa:9e:c8:8f:15:0f:dc:4d:06:22:ad:e5:8b:7d:98:2a:
94:be:02:09:c9:c4:0b:c7:48:9f:b4:72:a8:c2:6f:f1:0b:2d:
25:d4:f3:dc:22:48:c1:0a:fb:b2:86:95:8c:9b:f2:45:ba:9c:
2a:93:0e:10:9a:09:c1:46:4b:a4:e5:66:61:d0:87:a1:e8:09:
c3:2b:73:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATaSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MDcyMDQ3WhcNMjUwMjEyMDcyMDQ3WjAYMRYw
FAYDVQQDEw02NzdlMjc1Mi0xYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq/EauVrldm/leRBdnrPWnyTSdxYa7PR1dhM+6GXNqCia4YBAh+NWmvNm
KhuD2MPmHtAX5kN4rhYSqvxidN3dzDjb0B6bRi+Rhfh6jLkT4NJC7T572WASln2n
vuuOOtzTxXnRzYu01r+KdAtSBf7/NMtAS0AfQj2dAd2hAhdcDGlMCF+SM/vIm7rR
bGC7x90VUqf1wo4gDNx1ej7mtQHuPpL610gc+bbrGmhG/mSXASoSXagu6FhK9gey
M9H60fBr0C7508LKH2uc52XAjFTmdVzc4KKsa5fFPc9HZdfFyld98UOZzNTA93b6
Pdbkc2i73hBhms7mAALdCCCFW0Bm7QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFox
Sqj9dGQft0tzuQ9Y0xV0/NZDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNkEyRDk4NkNEOTExMUVGQkY4NTBCNTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsUBMA0GCSqGSIb3DQEB
CwUAA4IBAQCDI2rXDRTo5S2KSM8q/fok/SyeSRA0ePPxOfWC4QN0h3/oEcAH7+Qn
6eCYvlnn4ckakzzpoVw8U3udCwYa4YKmUntgHDRCF16aqJcdEX/ug1ppG6hdIDIZ
+R5h1MkLiIy6zAtTZsAiFtkONJzFZygiA+yeJ87F+FTKWYIGkq5DfoMdMk8SVNVF
hhIZ2Kb9OWjso7+IYZVR/CYhH5EvGmYBVv6ENWk9e3tuJQqyD1mSP6SqSMIQJ/qe
yI8VD9xNBiKt5Yt9mCqUvgIJycQLx0iftHKowm/xCy0l1PPcIkjBCvuyhpWMm/JF
upwqkw4QmgnBRkuk5WZh0Ieh6AnDK3O/
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:40:07 2025 by rpki-client