Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ADDE9D2D96411EFBFF42D9C762E951A.roa
File: 4ADDE9D2D96411EFBFF42D9C762E951A.roa (raw, json)
Hash identifier: Ob14vRAuyTzn1DaHRFKRQZ/9AraYM84rU9A3tpaNNwk=
Subject key identifier: 66:20:D9:8C:EB:27:22:A7:70:F2:1B:BD:01:B3:EA:70:D7:CF:15:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01408B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ADDE9D2D96411EFBFF42D9C762E951A.roa
Signing time: Thu 23 Jan 2025 08:30:25 +0000
ROA not before: Thu 23 Jan 2025 08:30:21 +0000
ROA not after: Wed 26 Mar 2025 08:30:21 +0000
asID: 52263
IP address blocks: 154.194.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82059 (0x1408b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 08:30:21 2025 GMT
Not After : Mar 26 08:30:21 2025 GMT
Subject: CN=6791fe21-2bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:8b:21:cd:51:b0:93:b4:a5:22:0b:2f:e7:
27:71:9d:5d:fe:c7:79:6a:22:36:0a:48:e3:02:ad:
ea:be:04:05:1b:56:9e:c2:f4:75:95:59:7c:da:0e:
d9:6e:3b:55:4c:e6:13:83:f7:28:1b:64:44:31:f1:
7b:cb:2a:e4:16:ca:67:99:1f:1b:9e:69:58:8f:ee:
14:cd:93:bc:0d:db:29:db:38:f1:60:33:e3:7d:16:
0f:c1:00:46:2b:6e:a1:da:7a:ee:7c:8f:21:7d:57:
d7:53:3e:ba:49:aa:4b:80:f5:6f:02:8d:23:ba:a8:
bf:9a:db:9d:23:b7:cc:70:30:3d:5b:3b:a7:94:b1:
93:0b:9e:c9:02:4e:f9:25:38:95:f2:8f:13:8e:92:
8e:45:30:99:d5:10:42:ba:13:dc:81:62:62:71:ac:
94:53:82:fa:03:62:a4:77:5c:09:db:78:8f:95:4d:
6c:0b:f2:08:16:cc:19:f1:44:69:e8:8f:87:3d:18:
03:fd:eb:a5:45:32:a3:45:76:08:e0:c1:be:15:c1:
fe:57:1d:3f:30:0d:62:48:c8:f2:21:d7:52:f3:1d:
fd:10:b6:0b:17:7b:37:83:81:5e:2c:c0:ae:e7:61:
fc:4e:fe:4b:a2:45:7f:d9:75:db:e0:94:30:ac:ff:
1a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:20:D9:8C:EB:27:22:A7:70:F2:1B:BD:01:B3:EA:70:D7:CF:15:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ADDE9D2D96411EFBFF42D9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.69.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:5f:99:44:f0:95:5e:f6:07:41:e2:91:c0:c1:3c:e0:fc:5c:
ff:a7:ff:36:7c:42:a5:a0:f4:2c:2a:14:9b:3d:e1:c1:86:59:
5f:d8:a6:dd:a3:90:30:81:90:dd:ad:76:43:06:9b:00:bd:80:
35:a2:83:5f:43:00:64:7e:74:87:9d:8d:fb:33:ff:b4:c3:57:
a1:15:0a:de:3e:4f:e9:a6:29:cd:8b:00:e2:ce:5c:b4:8d:ae:
87:72:ba:0d:01:09:e4:91:fa:18:e5:7e:ac:42:ca:bb:c7:6e:
b3:36:69:94:07:28:3d:5e:5f:07:b7:1b:07:70:24:ea:e4:1b:
e6:9a:c2:8c:ab:8a:71:48:cf:8c:50:fc:78:25:6e:e1:94:55:
31:4c:9a:59:b6:7e:eb:e2:1d:64:50:2a:11:c4:d3:d9:7b:53:
65:60:09:8c:9b:91:ff:d5:77:ce:89:b9:91:48:28:4c:3d:55:
c4:28:9c:c9:a7:10:2f:3a:33:7b:55:bb:2b:27:cd:92:9d:6c:
b3:63:48:80:7f:e1:5d:54:87:c8:46:34:30:99:5a:fc:bf:d5:
ad:15:a4:a8:18:0d:ae:81:55:1b:45:c2:e7:c3:8a:b5:4a:22:
c8:1c:8b:47:c8:9c:4a:b5:2b:23:0f:d6:90:23:ac:bd:cc:f8:
a8:bb:17:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUCLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMDgzMDIxWhcNMjUwMzI2MDgzMDIxWjAYMRYw
FAYDVQQDEw02NzkxZmUyMS0yYmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxTmLIc1RsJO0pSILL+cncZ1d/sd5aiI2CkjjAq3qvgQFG1aewvR1lVl8
2g7ZbjtVTOYTg/coG2REMfF7yyrkFspnmR8bnmlYj+4UzZO8Ddsp2zjxYDPjfRYP
wQBGK26h2nrufI8hfVfXUz66SapLgPVvAo0juqi/mtudI7fMcDA9WzunlLGTC57J
Ak75JTiV8o8TjpKORTCZ1RBCuhPcgWJicayUU4L6A2Kkd1wJ23iPlU1sC/IIFswZ
8URp6I+HPRgD/eulRTKjRXYI4MG+FcH+Vx0/MA1iSMjyIddS8x39ELYLF3s3g4Fe
LMCu52H8Tv5LokV/2XXb4JQwrP8aoQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGYg
2YzrJyKncPIbvQGz6nDXzxVoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80QURERTlEMkQ5NjQxMUVGQkZGNDJEOUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJFMA0GCSqGSIb3DQEB
CwUAA4IBAQC2X5lE8JVe9gdB4pHAwTzg/Fz/p/82fEKloPQsKhSbPeHBhllf2Kbd
o5AwgZDdrXZDBpsAvYA1ooNfQwBkfnSHnY37M/+0w1ehFQrePk/ppinNiwDizly0
ja6HcroNAQnkkfoY5X6sQsq7x26zNmmUByg9Xl8HtxsHcCTq5BvmmsKMq4pxSM+M
UPx4JW7hlFUxTJpZtn7r4h1kUCoRxNPZe1NlYAmMm5H/1XfOibmRSChMPVXEKJzJ
pxAvOjN7VbsrJ82SnWyzY0iAf+FdVIfIRjQwmVr8v9WtFaSoGA2ugVUbRcLnw4q1
SiLIHItHyJxKtSsjD9aQI6y9zPiouxeq
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:36:32 2025 by rpki-client