Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C685BB2D9C711EFB2B209AD762E951A.roa
File: 4C685BB2D9C711EFB2B209AD762E951A.roa (raw, json)
Hash identifier: 7YT24OnQkX17nUGR7kKcDE2CzRw+P/+hLaQMKfT76fk=
Subject key identifier: C3:22:EC:FD:2A:8A:16:7B:90:3A:FD:C7:17:D4:BD:DE:71:5B:73:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C685BB2D9C711EFB2B209AD762E951A.roa
Signing time: Thu 23 Jan 2025 20:19:08 +0000
ROA not before: Fri 24 Jan 2025 20:19:03 +0000
ROA not after: Fri 28 Feb 2025 20:19:03 +0000
asID: 62240
IP address blocks: 154.196.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82632 (0x142c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 20:19:03 2025 GMT
Not After : Feb 28 20:19:03 2025 GMT
Subject: CN=6792a43b-10a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:cd:29:7b:b9:f1:37:d1:fd:13:f8:0a:f7:
8d:e1:09:15:f3:01:4e:cf:2c:05:bb:72:d1:08:15:
58:66:e3:c0:59:40:b6:7a:24:53:59:55:aa:4c:97:
ab:83:b5:3a:1c:e5:af:b3:0d:72:b8:8f:80:77:6c:
43:5a:20:2b:9f:ea:74:25:1f:41:0a:c6:fb:f2:d4:
02:fa:d3:96:cd:61:97:23:ea:93:35:d8:1d:79:3d:
4e:6d:3e:ea:2e:cc:70:0c:e4:71:70:1c:0d:b3:8e:
03:84:fb:63:f7:0d:de:5e:ed:83:06:ad:50:80:8c:
4e:b6:c1:4d:de:c7:63:81:71:70:a5:90:72:b2:7b:
2b:c6:9a:5a:bb:54:59:b3:cd:5b:ed:fe:3a:24:06:
90:97:64:d0:9a:68:76:b4:e8:f0:fc:e5:8f:a0:30:
74:52:1c:17:de:94:44:e1:ee:6c:ea:37:09:5d:0e:
7a:08:61:00:82:da:d1:5b:6b:77:a4:50:da:75:01:
e4:9f:e0:38:5a:05:e9:a2:17:13:3d:35:67:a8:64:
5e:3e:b1:97:aa:c8:1c:f9:50:db:87:32:72:4d:33:
72:69:42:04:de:a6:a9:d0:9e:72:76:36:1c:dd:99:
89:3a:e7:9f:47:4f:dc:90:dd:ae:fa:42:39:1d:75:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:22:EC:FD:2A:8A:16:7B:90:3A:FD:C7:17:D4:BD:DE:71:5B:73:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C685BB2D9C711EFB2B209AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.48.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:06:20:fc:7b:32:3a:32:29:4c:b1:6b:47:be:11:a7:14:5a:
dd:97:50:36:94:22:08:7a:03:e3:02:76:9b:c2:c8:55:1b:00:
35:45:53:4e:55:1b:ca:0a:73:6f:a4:9c:3a:49:85:62:a4:dc:
42:fd:09:d2:97:9b:ae:b1:88:8b:f6:09:6a:3b:60:22:e4:31:
ad:a9:34:ae:5c:1e:b8:4b:2a:2d:95:38:b5:22:99:2b:a4:df:
d0:e0:3d:5c:46:4e:28:76:43:5b:4e:b8:49:81:9a:cd:73:05:
cb:ae:89:12:9c:a3:22:85:86:c0:a4:a0:e1:70:0c:21:3d:9f:
90:2b:98:74:63:42:27:e1:73:0d:e2:f5:34:c1:ca:f1:4d:7e:
f5:1e:d3:bd:13:4a:2c:ee:be:87:e3:1d:7a:4a:d7:32:74:b0:
93:e5:54:c0:ce:c4:41:9b:61:e9:d6:0e:71:bf:f5:f4:96:7c:
c2:bf:37:88:b6:76:fd:53:86:1e:9e:d3:2e:c7:47:d2:fd:74:
a9:94:b6:87:ac:e7:57:e2:d8:02:bc:50:8e:29:ea:07:af:6f:
cb:db:8d:e3:5a:63:56:ab:3d:ba:ed:fc:b4:29:56:37:a1:60:
00:62:99:c4:c0:16:ca:6e:9d:dc:dc:75:f0:e1:ff:e0:f0:16:
1f:42:9b:84
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAULIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MjAxOTAzWhcNMjUwMjI4MjAxOTAzWjAYMRYw
FAYDVQQDEw02NzkyYTQzYi0xMGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvfXNKXu58TfR/RP4CveN4QkV8wFOzywFu3LRCBVYZuPAWUC2eiRTWVWq
TJerg7U6HOWvsw1yuI+Ad2xDWiArn+p0JR9BCsb78tQC+tOWzWGXI+qTNdgdeT1O
bT7qLsxwDORxcBwNs44DhPtj9w3eXu2DBq1QgIxOtsFN3sdjgXFwpZBysnsrxppa
u1RZs81b7f46JAaQl2TQmmh2tOjw/OWPoDB0UhwX3pRE4e5s6jcJXQ56CGEAgtrR
W2t3pFDadQHkn+A4WgXpohcTPTVnqGRePrGXqsgc+VDbhzJyTTNyaUIE3qap0J5y
djYc3ZmJOuefR0/ckN2u+kI5HXWO3wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMMi
7P0qihZ7kDr9xxfUvd5xW3MIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80QzY4NUJCMkQ5QzcxMUVGQjJCMjA5QUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsQwMA0GCSqGSIb3DQEB
CwUAA4IBAQBuBiD8ezI6MilMsWtHvhGnFFrdl1A2lCIIegPjAnabwshVGwA1RVNO
VRvKCnNvpJw6SYVipNxC/QnSl5uusYiL9glqO2Ai5DGtqTSuXB64SyotlTi1Ipkr
pN/Q4D1cRk4odkNbTrhJgZrNcwXLrokSnKMihYbApKDhcAwhPZ+QK5h0Y0In4XMN
4vU0wcrxTX71HtO9E0os7r6H4x16StcydLCT5VTAzsRBm2Hp1g5xv/X0lnzCvzeI
tnb9U4YentMux0fS/XSplLaHrOdX4tgCvFCOKeoHr2/L243jWmNWqz267fy0KVY3
oWAAYpnEwBbKbp3c3HXw4f/g8BYfQpuE
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:50 2025 by rpki-client