Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A501B3CD9D511EF8E4A668A762E951A.roa
File: 3A501B3CD9D511EF8E4A668A762E951A.roa (raw, json)
Hash identifier: uRMbCrZqAz2SNh1W5QEibEdaMNqs4dkZg4/KW+Pg+F8=
Subject key identifier: A4:7A:FA:4A:2D:A2:A0:B3:05:AA:72:56:65:99:C3:21:BC:62:8C:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01432F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A501B3CD9D511EF8E4A668A762E951A.roa
Signing time: Thu 23 Jan 2025 21:58:50 +0000
ROA not before: Fri 24 Jan 2025 21:58:46 +0000
ROA not after: Fri 28 Feb 2025 21:58:46 +0000
asID: 62240
IP address blocks: 154.194.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82735 (0x1432f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:58:46 2025 GMT
Not After : Feb 28 21:58:46 2025 GMT
Subject: CN=6792bb9a-0a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:86:f5:e3:16:de:ec:c1:54:03:7f:72:d5:
d6:f7:ad:86:ed:c4:fd:fa:1f:0a:35:0f:75:1b:2b:
fb:9f:20:10:7e:a9:b3:95:be:ab:d6:d9:d6:a7:de:
f3:d2:f2:e2:d3:59:15:6b:6e:43:37:f0:14:d0:41:
2a:6f:a7:76:c1:3c:51:11:51:13:54:15:a0:52:ff:
08:39:ea:0c:9a:9c:ae:a3:45:74:9d:8c:04:49:f9:
06:6c:44:18:f1:02:9a:68:06:2c:ec:c5:1b:10:74:
e9:6f:cf:0c:b2:fd:e8:4d:6f:a5:9f:0e:15:a4:35:
af:5e:54:ea:48:53:d5:b2:67:ca:2e:fa:77:7a:1b:
a6:d7:12:b9:e3:2d:b9:79:12:1b:17:60:99:a4:4a:
25:c6:1e:8d:54:a7:4c:b4:44:45:0b:6e:80:ce:1a:
ae:d5:50:d5:c7:ae:4c:b0:d0:34:f4:a4:92:56:29:
fc:3b:d7:62:38:39:f6:d2:8e:77:c3:3d:56:11:09:
cb:c8:6f:18:40:0c:85:f1:fa:be:12:a5:96:c7:9b:
bc:24:28:3f:a9:9a:b1:be:c3:c8:c1:18:11:b9:c8:
2b:b6:7e:4e:8b:29:71:2a:20:60:d8:b4:15:e4:d1:
c6:80:fa:7d:6d:8c:34:4c:ff:99:6b:b1:fb:89:5e:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7A:FA:4A:2D:A2:A0:B3:05:AA:72:56:65:99:C3:21:BC:62:8C:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A501B3CD9D511EF8E4A668A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.87.0/24
Signature Algorithm: sha256WithRSAEncryption
20:9d:57:e9:73:16:8d:21:33:a4:08:e1:8e:d0:02:25:4a:4e:
fe:02:2a:1e:b1:0e:99:91:ad:58:cc:12:18:a9:a5:69:73:16:
c5:37:44:d7:5d:ca:68:9a:da:ab:da:b1:60:3e:71:3f:91:85:
f5:7b:b8:b1:d8:3d:a5:0b:18:85:e6:17:e3:d2:4b:4b:55:e7:
fb:44:65:2c:e7:ff:4c:86:30:77:c1:c3:39:a1:0a:b3:a1:14:
9b:d9:b9:4d:65:3a:da:79:b2:bd:ea:a1:52:f1:b2:12:a5:f7:
81:7b:d9:42:9c:84:ed:f8:70:3c:0d:44:e9:da:c3:f0:7b:4f:
13:53:62:0f:c8:c9:4f:37:95:72:26:61:65:eb:6b:aa:98:4a:
21:4b:f9:e0:8e:ae:a0:b4:9d:54:be:5c:df:8b:cd:20:6c:c1:
f5:75:49:85:e4:52:86:5b:57:d3:a4:a8:68:de:83:ee:a5:ba:
dc:20:f0:c0:6c:6d:64:52:b4:2e:f5:9c:a4:b0:40:86:c3:d1:
dd:7b:1b:10:48:eb:7e:99:a4:6b:5d:a7:cd:53:22:70:9f:fa:
a0:a5:8b:fc:5c:c3:98:54:eb:44:cf:af:82:6d:47:9a:dc:aa:
30:7d:6a:db:4a:ef:24:e1:c6:8b:08:cf:70:a8:b9:92:34:e9:
40:ca:5c:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUMvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MjE1ODQ2WhcNMjUwMjI4MjE1ODQ2WjAYMRYw
FAYDVQQDEw02NzkyYmI5YS0wYTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAswGG9eMW3uzBVAN/ctXW962G7cT9+h8KNQ91Gyv7nyAQfqmzlb6r1tnW
p97z0vLi01kVa25DN/AU0EEqb6d2wTxREVETVBWgUv8IOeoMmpyuo0V0nYwESfkG
bEQY8QKaaAYs7MUbEHTpb88Msv3oTW+lnw4VpDWvXlTqSFPVsmfKLvp3ehum1xK5
4y25eRIbF2CZpEolxh6NVKdMtERFC26Azhqu1VDVx65MsNA09KSSVin8O9diODn2
0o53wz1WEQnLyG8YQAyF8fq+EqWWx5u8JCg/qZqxvsPIwRgRucgrtn5OiylxKiBg
2LQV5NHGgPp9bYw0TP+Za7H7iV6HswIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKR6
+kotoqCzBapyVmWZwyG8YownMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQTUwMUIzQ0Q5RDUxMUVGOEU0QTY2OEE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJXMA0GCSqGSIb3DQEB
CwUAA4IBAQAgnVfpcxaNITOkCOGO0AIlSk7+AioesQ6Zka1YzBIYqaVpcxbFN0TX
Xcpomtqr2rFgPnE/kYX1e7ix2D2lCxiF5hfj0ktLVef7RGUs5/9MhjB3wcM5oQqz
oRSb2blNZTraebK96qFS8bISpfeBe9lCnITt+HA8DUTp2sPwe08TU2IPyMlPN5Vy
JmFl62uqmEohS/ngjq6gtJ1Uvlzfi80gbMH1dUmF5FKGW1fTpKho3oPupbrcIPDA
bG1kUrQu9ZyksECGw9HdexsQSOt+maRrXafNUyJwn/qgpYv8XMOYVOtEz6+CbUea
3KowfWrbSu8k4caLCM9wqLmSNOlAylwJ
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:09:26 2025 by rpki-client