Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2942EC32DA3B11EF84762647762E951A.roa
File: 2942EC32DA3B11EF84762647762E951A.roa (raw, json)
Hash identifier: 5dPaExBpwSmRH5li3b14y7KWiaX31bLEeYptkkg6jQo=
Subject key identifier: 2C:1A:A6:F4:1C:3F:15:73:85:73:05:1A:C8:DC:B7:CF:81:34:03:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014554
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2942EC32DA3B11EF84762647762E951A.roa
Signing time: Fri 24 Jan 2025 10:08:30 +0000
ROA not before: Fri 24 Jan 2025 10:08:27 +0000
ROA not after: Fri 28 Feb 2025 10:08:27 +0000
asID: 62240
IP address blocks: 154.196.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83284 (0x14554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:08:27 2025 GMT
Not After : Feb 28 10:08:27 2025 GMT
Subject: CN=6793669e-cb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:18:e5:ee:e1:1b:5b:e5:1b:2c:e3:b9:02:
61:f3:01:89:ce:fc:57:b3:26:75:f9:5a:3d:51:6c:
3e:6d:90:30:0e:15:3e:01:e8:3b:22:78:2d:3c:54:
5b:6e:1f:ff:15:c5:f5:9f:5e:68:3a:6e:90:ed:e3:
97:86:a8:de:2e:e3:d9:36:b0:f5:ff:79:46:a7:ef:
6e:d7:a0:14:a7:8f:d8:83:30:60:a1:2f:e1:0c:71:
15:05:00:4e:c6:05:37:2c:8e:b4:f7:d4:3b:14:04:
06:c8:52:32:f7:25:cc:88:fc:b7:ea:cd:c7:85:29:
e9:7a:08:20:4d:15:49:24:46:cb:ec:5b:0e:54:34:
27:4c:bd:29:c7:6a:88:3a:b6:87:de:18:bc:17:ca:
3f:3c:ba:60:b6:db:a4:dc:c0:8a:a4:07:84:56:d5:
f2:6e:8a:3f:04:0b:58:b3:ea:72:b0:ca:cd:aa:30:
78:6d:b5:4d:37:20:d8:f9:bb:ae:28:41:16:9d:5c:
c5:24:92:3a:20:f9:2d:bf:f1:2c:e0:2e:ab:83:9e:
b4:cc:5d:4d:99:5e:23:68:6e:11:ba:b7:10:e0:75:
c1:2c:df:9d:cc:0d:f7:b9:79:c1:1d:25:11:2c:12:
7a:f3:7d:70:f4:71:9f:cf:90:e8:82:5b:82:b5:e3:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1A:A6:F4:1C:3F:15:73:85:73:05:1A:C8:DC:B7:CF:81:34:03:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2942EC32DA3B11EF84762647762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.44.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:83:15:52:bf:5e:2a:3a:81:76:4f:6c:da:46:db:41:2c:8f:
2d:ea:85:ec:14:37:77:f8:e8:29:d5:ab:b3:93:14:cc:88:c6:
7f:0f:5e:26:aa:e6:1d:96:1d:ea:e7:5a:ad:66:33:15:c0:6b:
0c:61:c6:26:65:50:73:8b:ca:dc:59:89:a6:01:34:91:ab:ce:
bc:53:90:f5:a8:8c:ef:d1:71:d7:30:28:39:3e:36:eb:d2:ec:
b1:37:17:96:bd:28:f0:5d:cc:90:8e:ff:af:95:66:a1:97:75:
74:1a:c0:cc:b3:66:a8:bc:3a:fe:ec:7f:c7:fc:de:f9:7a:a6:
1c:18:93:9e:ca:87:31:cb:11:c6:87:fc:36:72:81:63:4a:55:
23:89:91:4d:1c:b9:5e:cd:4b:de:7c:f1:53:c3:9e:61:e2:20:
2b:08:08:f1:36:ad:b9:ff:51:c4:8b:9e:0f:57:70:a2:a6:b4:
19:5f:9b:25:73:9a:46:44:dd:82:22:c5:70:5a:8d:97:3f:40:
c3:a4:33:ae:93:15:5d:c3:b1:5f:50:5c:97:09:f7:e4:a5:b2:
be:93:0e:36:24:d7:6c:39:0f:af:a9:c8:63:1e:4c:c4:ec:7b:
d0:ea:9b:9e:70:4d:8d:4f:a8:00:4a:5e:b6:a2:e4:56:58:95:
71:99:ff:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUVUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTAwODI3WhcNMjUwMjI4MTAwODI3WjAYMRYw
FAYDVQQDEw02NzkzNjY5ZS1jYjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw0gY5e7hG1vlGyzjuQJh8wGJzvxXsyZ1+Vo9UWw+bZAwDhU+Aeg7Ingt
PFRbbh//FcX1n15oOm6Q7eOXhqjeLuPZNrD1/3lGp+9u16AUp4/YgzBgoS/hDHEV
BQBOxgU3LI6099Q7FAQGyFIy9yXMiPy36s3HhSnpegggTRVJJEbL7FsOVDQnTL0p
x2qIOraH3hi8F8o/PLpgttuk3MCKpAeEVtXyboo/BAtYs+pysMrNqjB4bbVNNyDY
+buuKEEWnVzFJJI6IPktv/Es4C6rg560zF1NmV4jaG4RurcQ4HXBLN+dzA33uXnB
HSURLBJ6831w9HGfz5DogluCtePdpQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCwa
pvQcPxVzhXMFGsjct8+BNAMNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yOTQyRUMzMkRBM0IxMUVGODQ3NjI2NDc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsQsMA0GCSqGSIb3DQEB
CwUAA4IBAQDKgxVSv14qOoF2T2zaRttBLI8t6oXsFDd3+Ogp1auzkxTMiMZ/D14m
quYdlh3q51qtZjMVwGsMYcYmZVBzi8rcWYmmATSRq868U5D1qIzv0XHXMCg5Pjbr
0uyxNxeWvSjwXcyQjv+vlWahl3V0GsDMs2aovDr+7H/H/N75eqYcGJOeyocxyxHG
h/w2coFjSlUjiZFNHLlezUvefPFTw55h4iArCAjxNq25/1HEi54PV3CiprQZX5sl
c5pGRN2CIsVwWo2XP0DDpDOukxVdw7FfUFyXCffkpbK+kw42JNdsOQ+vqchjHkzE
7HvQ6puecE2NT6gASl62ouRWWJVxmf9x
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:18:47 2025 by rpki-client