Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44FFB63ED99211EF92A0C051762E951A.roa
File: 44FFB63ED99211EF92A0C051762E951A.roa (raw, json)
Hash identifier: 5lQniO3vrD4TQAM5X6yvkuZD+2XQVurF8AbiljrmUA8=
Subject key identifier: 4B:3A:F4:28:22:29:3D:A6:EE:D0:2A:9B:D5:C7:A1:64:D6:7B:21:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014298
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44FFB63ED99211EF92A0C051762E951A.roa
Signing time: Thu 23 Jan 2025 13:59:32 +0000
ROA not before: Thu 23 Jan 2025 13:59:28 +0000
ROA not after: Fri 28 Feb 2025 13:59:28 +0000
asID: 62240
IP address blocks: 154.196.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82584 (0x14298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 13:59:28 2025 GMT
Not After : Feb 28 13:59:28 2025 GMT
Subject: CN=67924b44-0793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7b:12:61:5a:11:d4:a5:fa:7b:00:12:e0:7b:
2d:df:48:be:93:1d:0a:cd:34:63:ac:c4:41:7a:4b:
f7:0a:d1:fa:c6:c7:8f:96:8b:68:3a:e9:64:32:65:
b3:06:f9:8b:f0:dd:8d:11:4e:5d:4a:66:0e:9e:ef:
16:4a:4f:19:3c:10:20:79:19:d9:3f:21:38:5f:69:
4b:23:9a:e8:16:f1:84:d1:d5:36:9f:60:a5:95:e7:
29:9f:de:da:7f:3e:a6:76:73:7a:80:98:bc:7c:09:
7d:11:d0:3a:cc:98:b7:e7:2f:29:de:21:de:19:01:
c2:0d:7b:c2:13:40:49:6c:00:58:0e:cd:67:8e:0d:
5e:d7:32:f2:a1:b2:73:d3:29:03:3a:e4:f6:17:bf:
a7:9d:65:99:d0:04:41:0e:4e:9b:ed:3d:3d:3f:26:
e4:a7:93:cb:eb:f7:47:e9:8f:05:ac:00:b5:98:46:
1b:03:8c:81:6c:b1:8d:5e:f6:d8:d2:9e:f3:69:d6:
89:be:4a:80:59:f5:5c:9d:a6:3e:fb:81:2e:70:11:
de:2b:5c:b9:2b:5c:81:1f:10:44:2e:56:af:c0:11:
b6:0d:b1:80:43:43:3a:63:8a:1a:cc:a0:e7:ac:b4:
5d:68:47:1f:89:75:db:a8:6d:22:df:59:c9:a4:aa:
77:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3A:F4:28:22:29:3D:A6:EE:D0:2A:9B:D5:C7:A1:64:D6:7B:21:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44FFB63ED99211EF92A0C051762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:e3:43:b8:a8:31:f1:4c:d4:e5:cc:c8:17:ac:43:b0:11:59:
03:e4:95:d6:e7:84:fc:0e:1b:65:7d:cb:b5:02:db:a5:fd:fb:
11:60:eb:ae:7b:aa:c6:79:02:b7:23:14:35:f3:c7:df:3e:3a:
35:c6:d6:ee:cd:0f:ba:b4:06:17:67:5e:37:56:6e:5d:f0:83:
6e:3e:b7:8a:75:f2:d8:9c:02:ab:56:b4:e2:1b:da:1d:85:50:
6f:08:a3:f2:61:d3:fd:04:b5:d7:17:07:87:1f:c2:e0:a9:0e:
ea:be:ee:52:95:a5:d0:75:26:87:2e:54:78:47:a6:1a:93:82:
bc:a9:51:4b:39:40:41:e2:d5:54:83:7d:92:1a:2e:fa:56:bf:
bc:39:cd:00:19:14:86:4c:c2:83:30:2c:60:5c:8d:15:2f:65:
16:bf:23:af:97:5f:c2:3d:9e:8b:0f:92:ee:8d:cf:b4:5a:ff:
69:89:e9:a3:6e:69:30:29:c9:d0:c7:80:ec:a9:9b:f7:6d:0b:
04:dc:4a:56:8b:c0:b5:f8:1a:0e:49:c0:27:4a:7f:b2:52:5a:
c5:3f:ef:bd:15:2f:b4:d4:7f:26:56:95:02:91:bc:69:c5:36:
67:ac:a1:ac:ae:a7:a5:8b:8b:99:73:51:51:b9:49:58:cd:7f:
8d:06:37:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUKYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTM1OTI4WhcNMjUwMjI4MTM1OTI4WjAYMRYw
FAYDVQQDEw02NzkyNGI0NC0wNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA23sSYVoR1KX6ewAS4Hst30i+kx0KzTRjrMRBekv3CtH6xsePlotoOulk
MmWzBvmL8N2NEU5dSmYOnu8WSk8ZPBAgeRnZPyE4X2lLI5roFvGE0dU2n2Cllecp
n97afz6mdnN6gJi8fAl9EdA6zJi35y8p3iHeGQHCDXvCE0BJbABYDs1njg1e1zLy
obJz0ykDOuT2F7+nnWWZ0ARBDk6b7T09Pybkp5PL6/dH6Y8FrAC1mEYbA4yBbLGN
XvbY0p7zadaJvkqAWfVcnaY++4EucBHeK1y5K1yBHxBELlavwBG2DbGAQ0M6Y4oa
zKDnrLRdaEcfiXXbqG0i31nJpKp3TQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEs6
9CgiKT2m7tAqm9XHoWTWeyFkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NEZGQjYzRUQ5OTIxMUVGOTJBMEMwNTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsQbMA0GCSqGSIb3DQEB
CwUAA4IBAQCh40O4qDHxTNTlzMgXrEOwEVkD5JXW54T8Dhtlfcu1Atul/fsRYOuu
e6rGeQK3IxQ188ffPjo1xtbuzQ+6tAYXZ143Vm5d8INuPreKdfLYnAKrVrTiG9od
hVBvCKPyYdP9BLXXFweHH8LgqQ7qvu5SlaXQdSaHLlR4R6Yak4K8qVFLOUBB4tVU
g32SGi76Vr+8Oc0AGRSGTMKDMCxgXI0VL2UWvyOvl1/CPZ6LD5Lujc+0Wv9piemj
bmkwKcnQx4DsqZv3bQsE3EpWi8C1+BoOScAnSn+yUlrFP++9FS+01H8mVpUCkbxp
xTZnrKGsrqeli4uZc1FRuUlYzX+NBjcO
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:28 2025 by rpki-client