Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AC37A7ADCA211EFB2B78880762E951A.roa
File: 4AC37A7ADCA211EFB2B78880762E951A.roa (raw, json)
Hash identifier: 1WgrKW5qRwYLSltKPM0J1c2AlVvXxAUkoLs1H0bE1gY=
Subject key identifier: 09:00:1E:57:FD:98:84:DF:F4:AE:72:16:22:A5:EA:48:30:05:24:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BD7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AC37A7ADCA211EFB2B78880762E951A.roa
Signing time: Mon 27 Jan 2025 11:31:51 +0000
ROA not before: Mon 27 Jan 2025 11:31:42 +0000
ROA not after: Sat 08 Feb 2025 11:31:42 +0000
asID: 7018
IP address blocks: 154.195.40.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84951 (0x14bd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 11:31:42 2025 GMT
Not After : Feb 8 11:31:42 2025 GMT
Subject: CN=67976ea7-2e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:f9:fe:9d:8e:8c:11:11:95:8c:47:15:e1:
6b:49:33:e0:d2:f0:15:8f:7e:7d:0b:29:c0:9a:c2:
33:9e:c3:0b:34:fb:eb:2c:8b:a9:04:4b:a1:74:5c:
ec:b7:14:b4:c4:e6:1d:ea:d2:00:8b:e1:ce:ea:7a:
4c:fe:01:56:4b:a8:f7:c8:0b:94:e1:e6:d1:5b:ac:
d7:01:88:71:20:6e:2b:44:11:9d:fc:ff:80:a5:88:
52:3f:e3:0e:4a:b1:63:e4:e9:cf:58:3a:ce:0d:19:
7a:a9:46:9f:c1:7b:32:43:5a:7f:80:07:0a:98:8b:
36:5c:f3:8e:a2:84:66:2d:12:ee:50:60:6b:4c:4f:
73:e7:ea:86:a6:bc:33:7c:a6:bf:89:2c:2c:94:e5:
93:1c:dd:bd:d8:57:08:40:24:d1:38:db:05:c7:55:
dc:1d:17:07:ab:ba:20:4b:ed:0f:e1:a7:e5:6e:d4:
cf:74:1e:ef:28:67:bd:9d:63:f7:f2:1e:7b:0a:b6:
78:30:36:ba:fc:29:7f:37:ee:e4:ca:e9:86:34:82:
ff:74:a5:12:85:c0:1c:a0:85:92:92:4e:42:21:ca:
53:9b:02:d3:8e:ef:6d:0b:16:32:f3:59:28:4b:46:
a4:43:c6:66:ae:dd:c2:41:f7:47:70:52:41:1b:7f:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:00:1E:57:FD:98:84:DF:F4:AE:72:16:22:A5:EA:48:30:05:24:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AC37A7ADCA211EFB2B78880762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.40.0/23
Signature Algorithm: sha256WithRSAEncryption
04:18:8c:10:4d:a0:90:0e:a8:dd:b2:fb:7a:3b:7f:d9:5f:03:
ea:17:52:a0:20:73:a9:9c:fb:61:e3:f9:d7:1a:ae:a0:23:ba:
87:bd:62:f5:44:8e:03:b4:0d:55:85:a7:a2:d9:2c:a5:04:92:
32:10:47:9d:c1:1e:f5:34:e3:b2:25:e9:c5:eb:06:3b:c4:78:
61:29:39:ae:77:01:57:08:04:31:7c:e9:73:ad:e1:a7:14:3e:
03:ff:b3:64:67:1f:94:09:11:e8:3a:ce:72:40:a4:2b:b2:92:
22:ad:12:dd:9f:e9:a2:ff:7c:8f:9a:7a:97:93:cb:f2:3a:7e:
f9:70:7e:9f:34:22:b7:67:fa:59:da:a6:e0:87:5f:de:47:4d:
b0:a7:88:31:8d:a8:62:53:28:9b:4f:39:af:39:97:82:c2:08:
5c:23:b6:0e:25:85:be:09:ce:c8:57:4a:a8:b1:2c:a5:9b:ef:
2b:ea:74:98:9d:93:24:f7:3b:85:38:3e:06:e4:fc:9b:bb:5a:
12:18:5b:11:07:b4:cf:a0:65:07:20:a9:b5:b5:9e:25:d6:41:
2b:f8:cf:a7:8c:e0:a5:12:21:c8:8c:93:51:ed:62:e3:9f:db:
02:ff:62:29:58:98:f9:98:fb:82:27:58:1d:5a:08:c3:68:d7:
2f:73:03:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUvXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI3MTEzMTQyWhcNMjUwMjA4MTEzMTQyWjAYMRYw
FAYDVQQDEw02Nzk3NmVhNy0yZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo1b5/p2OjBERlYxHFeFrSTPg0vAVj359CynAmsIznsMLNPvrLIupBEuh
dFzstxS0xOYd6tIAi+HO6npM/gFWS6j3yAuU4ebRW6zXAYhxIG4rRBGd/P+ApYhS
P+MOSrFj5OnPWDrODRl6qUafwXsyQ1p/gAcKmIs2XPOOooRmLRLuUGBrTE9z5+qG
prwzfKa/iSwslOWTHN292FcIQCTRONsFx1XcHRcHq7ogS+0P4aflbtTPdB7vKGe9
nWP38h57CrZ4MDa6/Cl/N+7kyumGNIL/dKUShcAcoIWSkk5CIcpTmwLTju9tCxYy
81koS0akQ8Zmrt3CQfdHcFJBG38GEQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAkA
Hlf9mITf9K5yFiKl6kgwBSRiMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80QUMzN0E3QURDQTIxMUVGQjJCNzg4ODA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsMoMA0GCSqGSIb3DQEB
CwUAA4IBAQAEGIwQTaCQDqjdsvt6O3/ZXwPqF1KgIHOpnPth4/nXGq6gI7qHvWL1
RI4DtA1Vhaei2SylBJIyEEedwR71NOOyJenF6wY7xHhhKTmudwFXCAQxfOlzreGn
FD4D/7NkZx+UCRHoOs5yQKQrspIirRLdn+mi/3yPmnqXk8vyOn75cH6fNCK3Z/pZ
2qbgh1/eR02wp4gxjahiUyibTzmvOZeCwghcI7YOJYW+Cc7IV0qosSylm+8r6nSY
nZMk9zuFOD4G5Pybu1oSGFsRB7TPoGUHIKm1tZ4l1kEr+M+njOClEiHIjJNR7WLj
n9sC/2IpWJj5mPuCJ1gdWgjDaNcvcwOO
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:03:25 2025 by rpki-client