Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D9F7D72DA3F11EF84A5E862762E951A.roa
File: 3D9F7D72DA3F11EF84A5E862762E951A.roa (raw, json)
Hash identifier: B3jg1wmSALUdTFLCaUExHLpOM9Q6SHlTTtEzSewEWnI=
Subject key identifier: 70:45:E8:10:73:2E:CC:46:F9:91:C8:0F:4E:1D:83:D3:C8:CE:3F:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D9F7D72DA3F11EF84A5E862762E951A.roa
Signing time: Fri 24 Jan 2025 10:37:42 +0000
ROA not before: Fri 24 Jan 2025 10:37:39 +0000
ROA not after: Fri 28 Feb 2025 10:37:39 +0000
asID: 62240
IP address blocks: 154.196.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83362 (0x145a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:37:39 2025 GMT
Not After : Feb 28 10:37:39 2025 GMT
Subject: CN=67936d76-6139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:6a:ef:05:de:ae:a4:40:74:59:5e:df:38:
42:5c:16:9f:c5:54:15:44:5b:1e:fc:47:53:e2:0b:
b5:5d:b7:db:a8:0b:2f:6d:6c:43:f4:d1:25:b4:af:
5c:2c:f9:61:10:4a:70:c3:b8:aa:15:6f:45:f3:58:
4b:5e:38:76:3d:29:d0:6e:35:db:d7:fe:d2:de:30:
d4:b2:9e:10:2c:dc:a3:62:5a:e9:18:32:c4:45:0c:
28:0c:1d:81:cf:e0:8a:34:18:de:46:8a:16:51:8e:
7b:e5:87:df:f3:1f:f2:9a:64:a2:34:74:d1:bb:66:
70:2d:8c:29:a2:36:7f:ce:ae:a0:a2:8d:2d:f4:33:
d7:e2:46:03:e8:df:14:1e:36:0c:5e:ed:4c:ce:01:
66:76:50:cc:27:00:c6:a6:f0:b9:ab:53:ea:5f:68:
f1:6c:95:c5:7c:d5:19:16:48:6c:53:7d:fb:01:db:
33:9d:c2:a5:58:8b:30:19:87:10:4c:de:5d:3f:03:
37:36:ed:3b:8e:d6:85:32:57:b5:a0:c6:48:9c:28:
19:3a:e2:6c:90:94:76:dd:fe:e9:e7:ac:71:85:be:
bc:93:50:62:c8:83:3c:4b:bd:f7:d9:72:a1:7c:aa:
ea:57:2a:13:29:a6:70:63:f0:da:8e:a5:ce:39:03:
f1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:45:E8:10:73:2E:CC:46:F9:91:C8:0F:4E:1D:83:D3:C8:CE:3F:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D9F7D72DA3F11EF84A5E862762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.60.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:66:82:02:c6:2f:94:98:80:e3:0c:7b:ac:27:9b:75:c2:3c:
4a:1c:88:bb:be:2e:52:64:4e:62:e6:18:bf:86:d6:cb:48:24:
0b:4c:1b:65:2d:0c:93:cd:c8:dd:94:b8:a6:3e:40:a1:db:48:
bf:e9:58:17:41:ed:3d:6d:16:49:39:95:08:56:47:79:07:8e:
96:9c:dc:8a:2d:ed:ca:85:e3:10:48:57:0b:e2:66:31:ce:2d:
82:74:6d:77:88:41:c9:da:0b:a6:71:91:74:a9:b3:dd:82:8b:
8e:b6:c7:ee:d5:dc:90:f5:93:14:00:73:c1:cb:be:68:f9:67:
78:93:4c:98:18:a8:64:e6:4e:12:14:33:5a:4d:ec:a6:91:e5:
98:a4:0c:c4:90:6d:c7:04:72:08:ff:38:a6:7b:61:c7:03:e0:
7e:47:29:ea:3b:08:fd:ad:f2:d9:d9:c0:33:6f:09:9b:06:32:
ad:4e:b4:7d:5c:08:99:9b:04:cf:b8:df:e7:8c:aa:45:81:df:
38:d4:aa:b3:a8:46:00:95:49:32:e6:62:c1:01:db:e7:0c:41:
d1:81:2a:41:bf:1a:3f:3a:66:59:50:5d:76:60:64:3e:06:e2:
9f:b8:d3:02:43:8d:f1:be:a2:bd:29:73:5f:77:01:1b:1e:5b:
1a:84:e0:96
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUWiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTAzNzM5WhcNMjUwMjI4MTAzNzM5WjAYMRYw
FAYDVQQDEw02NzkzNmQ3Ni02MTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArNZq7wXerqRAdFle3zhCXBafxVQVRFse/EdT4gu1XbfbqAsvbWxD9NEl
tK9cLPlhEEpww7iqFW9F81hLXjh2PSnQbjXb1/7S3jDUsp4QLNyjYlrpGDLERQwo
DB2Bz+CKNBjeRooWUY575Yff8x/ymmSiNHTRu2ZwLYwpojZ/zq6goo0t9DPX4kYD
6N8UHjYMXu1MzgFmdlDMJwDGpvC5q1PqX2jxbJXFfNUZFkhsU337AdszncKlWIsw
GYcQTN5dPwM3Nu07jtaFMle1oMZInCgZOuJskJR23f7p56xxhb68k1BiyIM8S733
2XKhfKrqVyoTKaZwY/DajqXOOQPxJwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHBF
6BBzLsxG+ZHID04dg9PIzj9PMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zRDlGN0Q3MkRBM0YxMUVGODRBNUU4NjI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsQ8MA0GCSqGSIb3DQEB
CwUAA4IBAQBuZoICxi+UmIDjDHusJ5t1wjxKHIi7vi5SZE5i5hi/htbLSCQLTBtl
LQyTzcjdlLimPkCh20i/6VgXQe09bRZJOZUIVkd5B46WnNyKLe3KheMQSFcL4mYx
zi2CdG13iEHJ2gumcZF0qbPdgouOtsfu1dyQ9ZMUAHPBy75o+Wd4k0yYGKhk5k4S
FDNaTeymkeWYpAzEkG3HBHII/zime2HHA+B+RynqOwj9rfLZ2cAzbwmbBjKtTrR9
XAiZmwTPuN/njKpFgd841KqzqEYAlUky5mLBAdvnDEHRgSpBvxo/OmZZUF12YGQ+
BuKfuNMCQ43xvqK9KXNfdwEbHlsahOCW
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:12 2025 by rpki-client