Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20078F72C9C111EF81056C92762E951A.roa
File: 20078F72C9C111EF81056C92762E951A.roa (raw, json)
Hash identifier: mR8TGwLxkt2mhL5IXBE9BnZdyqLlg1dGaaLugvpqT5g=
Subject key identifier: D9:EF:C8:21:D0:D3:D3:FC:9A:69:5F:75:0A:58:04:AA:77:16:6B:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013488
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20078F72C9C111EF81056C92762E951A.roa
Signing time: Fri 03 Jan 2025 10:54:37 +0000
ROA not before: Fri 03 Jan 2025 10:54:34 +0000
ROA not after: Sun 09 Feb 2025 10:54:34 +0000
asID: 272369
IP address blocks: 154.197.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78984 (0x13488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 10:54:34 2025 GMT
Not After : Feb 9 10:54:34 2025 GMT
Subject: CN=6777c1ed-550f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:a1:a5:80:6b:62:48:2e:6e:98:6b:19:1e:
32:80:1d:ea:42:61:ff:da:b2:d6:01:ec:21:2e:33:
c5:43:45:a0:76:25:64:e9:2f:99:dc:c9:29:d2:e9:
4f:b6:0a:de:10:22:a7:f6:fc:53:4f:af:38:ff:b2:
c9:a8:a6:9e:37:fd:8f:19:e4:9c:2e:59:19:ca:ef:
53:4a:78:ba:71:1b:75:ed:e5:53:e6:27:0d:d2:e3:
01:43:78:a5:4e:0b:cb:8a:69:a0:ab:be:36:a4:b5:
6b:09:b8:68:86:70:8e:ee:fb:ec:23:a5:5b:16:26:
a8:6d:ea:e8:f2:6a:78:ca:2d:9d:ef:4e:d8:73:83:
0c:3a:33:a1:38:2e:5f:23:40:3d:9b:8f:57:9e:dc:
57:02:03:66:f7:96:e4:c4:3b:f4:b6:52:41:98:a4:
76:13:2a:00:3a:72:82:2e:ce:6f:5b:ee:34:df:15:
03:a1:a1:ec:90:11:7e:17:96:22:1e:24:9f:2b:cf:
e4:6f:e2:32:89:91:a6:cd:40:cd:9c:fc:02:96:6b:
74:a3:e1:fd:4a:53:5b:d0:d7:cb:cf:c4:32:81:ff:
c5:2b:38:0b:c5:96:82:48:42:dc:66:a6:e4:0d:84:
bc:d2:d0:b8:bf:4c:5b:d0:7c:af:44:c2:55:24:a8:
4b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EF:C8:21:D0:D3:D3:FC:9A:69:5F:75:0A:58:04:AA:77:16:6B:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20078F72C9C111EF81056C92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.90.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d1:4d:79:2d:ef:c2:50:36:64:6c:60:4a:89:4b:22:7f:84:
86:37:11:24:67:c0:f4:82:7c:c0:9f:1d:5c:24:21:7f:e7:94:
77:a6:d7:2c:23:3f:0d:1d:0f:e9:14:37:5e:8f:57:36:b2:d6:
58:bf:bc:4a:07:7a:27:e4:99:fc:c2:ad:9d:9b:6d:b7:37:6c:
6f:e8:e6:d4:2e:14:e7:0d:67:83:79:60:fe:e5:6d:d9:5e:8b:
65:4d:72:bb:e9:ab:62:e0:e0:e5:a7:d8:05:e8:ec:68:54:1c:
d0:67:83:f4:e7:99:12:73:33:85:73:7d:30:99:c4:21:6a:96:
4b:17:f0:cf:04:6c:71:24:03:2b:d7:65:aa:c9:5e:5b:cd:3e:
36:36:df:98:9d:8b:e3:ad:a0:f9:a5:2b:0b:73:05:48:ae:26:
1f:09:04:ef:37:0d:e7:01:01:f9:db:33:ab:52:da:3b:e5:76:
55:e5:b2:b5:0b:ef:d6:af:9a:ed:29:9c:79:6a:bc:52:59:a3:
ce:d2:04:98:32:e7:0e:e8:cc:1c:6b:dc:37:ef:17:b5:03:3f:
7e:a0:01:aa:a5:f2:49:68:1c:fe:bd:e2:28:c8:c8:a1:e0:f5:
4f:22:b6:9d:9e:53:40:70:53:8c:9a:ff:df:ba:91:49:20:47:
cc:9b:91:9c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATSIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAzMTA1NDM0WhcNMjUwMjA5MTA1NDM0WjAYMRYw
FAYDVQQDEw02Nzc3YzFlZC01NTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtSChpYBrYkgubphrGR4ygB3qQmH/2rLWAewhLjPFQ0WgdiVk6S+Z3Mkp
0ulPtgreECKn9vxTT684/7LJqKaeN/2PGeScLlkZyu9TSni6cRt17eVT5icN0uMB
Q3ilTgvLimmgq742pLVrCbhohnCO7vvsI6VbFiaobero8mp4yi2d707Yc4MMOjOh
OC5fI0A9m49XntxXAgNm95bkxDv0tlJBmKR2EyoAOnKCLs5vW+403xUDoaHskBF+
F5YiHiSfK8/kb+IyiZGmzUDNnPwClmt0o+H9SlNb0NfLz8Qygf/FKzgLxZaCSELc
ZqbkDYS80tC4v0xb0HyvRMJVJKhLlwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNnv
yCHQ09P8mmlfdQpYBKp3FmtvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMDA3OEY3MkM5QzExMUVGODEwNTZDOTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVaMA0GCSqGSIb3DQEB
CwUAA4IBAQBH0U15Le/CUDZkbGBKiUsif4SGNxEkZ8D0gnzAnx1cJCF/55R3ptcs
Iz8NHQ/pFDdej1c2stZYv7xKB3on5Jn8wq2dm223N2xv6ObULhTnDWeDeWD+5W3Z
XotlTXK76ati4ODlp9gF6OxoVBzQZ4P055kSczOFc30wmcQhapZLF/DPBGxxJAMr
12WqyV5bzT42Nt+YnYvjraD5pSsLcwVIriYfCQTvNw3nAQH52zOrUto75XZV5bK1
C+/Wr5rtKZx5arxSWaPO0gSYMucO6Mwca9w37xe1Az9+oAGqpfJJaBz+veIoyMih
4PVPIradnlNAcFOMmv/fupFJIEfMm5Gc
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:47:17 2025 by rpki-client