Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CBC581ED98311EF99FA7B6F762E951A.roa
File: 4CBC581ED98311EF99FA7B6F762E951A.roa (raw, json)
Hash identifier: fu3UElm5AvMvnWVVvjL8RHVp6V1P6NgO9caXjWypmRg=
Subject key identifier: DE:19:9C:8D:2A:99:83:5F:9F:4B:62:28:9A:28:05:EB:59:5E:16:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CBC581ED98311EF99FA7B6F762E951A.roa
Signing time: Thu 23 Jan 2025 12:12:22 +0000
ROA not before: Thu 23 Jan 2025 12:12:19 +0000
ROA not after: Fri 28 Feb 2025 12:12:19 +0000
asID: 62240
IP address blocks: 154.195.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82424 (0x141f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:12:19 2025 GMT
Not After : Feb 28 12:12:19 2025 GMT
Subject: CN=67923226-1e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:0b:d8:7e:e9:93:34:36:f6:ed:5e:9e:7e:
3c:7f:c1:c0:61:85:07:4e:c9:e7:fa:05:8b:f1:ac:
05:60:62:83:c8:95:7a:05:db:cd:74:76:30:77:7e:
f9:5b:4b:e7:1e:b5:2e:f9:98:af:09:fb:62:3c:6e:
b2:f5:3b:b6:e9:ef:9f:2b:45:c6:12:95:85:e6:44:
fb:d7:6d:1d:56:ab:6a:93:d8:47:30:c5:50:f5:49:
9f:da:cc:81:90:da:5f:7b:6e:c0:bf:81:d9:62:6a:
cf:0c:e1:af:8d:83:ca:2f:88:5c:93:cc:40:f0:d0:
7b:09:9d:c7:33:57:57:f3:36:18:1e:ea:a0:b0:4a:
f9:b2:ca:7a:db:79:66:0c:6c:98:20:8c:d9:9c:ae:
d3:62:02:1b:63:54:12:c6:d3:d9:0d:b0:2b:34:c2:
6d:c7:99:16:1e:3b:13:8c:f4:74:f3:a4:dc:8f:9e:
0d:bf:1b:39:89:28:bc:f1:a2:87:1e:f3:85:15:f5:
84:4d:7f:7f:1c:8a:95:60:28:94:3c:af:27:79:5a:
ec:5d:39:76:cb:2a:d8:1d:a2:c2:04:1c:ea:cd:6b:
76:a6:09:e8:ab:6b:fd:52:e9:70:05:af:d6:6b:ca:
2a:01:56:2d:c2:56:62:72:4f:61:5a:ea:bc:f1:cd:
be:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:19:9C:8D:2A:99:83:5F:9F:4B:62:28:9A:28:05:EB:59:5E:16:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CBC581ED98311EF99FA7B6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.185.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:f3:f4:f2:f5:34:ab:e2:e6:60:9b:90:90:5d:29:10:b9:f5:
fd:9b:ef:52:c7:63:a6:ac:a6:78:e7:eb:66:8f:18:12:60:5e:
30:93:05:c9:5f:ab:6d:7e:6e:30:4d:fd:9f:7a:b9:3b:5b:9d:
d3:df:6b:f8:8f:5b:78:b9:af:f8:43:77:b7:21:08:eb:f8:2f:
c6:d1:0e:07:c2:42:e0:33:10:11:cb:7f:85:b2:52:bd:c6:15:
ac:d8:fd:68:f9:d4:24:be:07:1c:7b:6b:3a:69:c0:93:e1:53:
4c:23:7a:f6:88:05:9b:67:29:e8:87:13:1c:b9:3d:15:77:4c:
7e:31:62:31:43:05:49:04:03:ef:5f:f5:d7:eb:c9:a1:74:ae:
16:df:df:cc:c4:17:d9:28:1c:af:b1:5f:14:51:10:13:f9:be:
87:73:3f:01:fc:fe:81:c1:7b:b9:0a:be:90:bb:12:4e:4b:f8:
77:62:21:76:85:54:9b:72:21:ed:6c:4a:14:31:4b:06:23:77:
1e:c1:c8:e6:e8:2d:23:08:9a:9b:99:a3:b9:f6:a3:ed:24:92:
f7:6f:e3:4a:fe:4d:14:e6:a8:a4:2d:92:a4:b1:a7:6f:d3:99:
37:7c:8a:6b:14:fe:e6:8c:43:2e:17:33:84:48:a6:d3:15:3d:
65:f4:31:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUH4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTIxMjE5WhcNMjUwMjI4MTIxMjE5WjAYMRYw
FAYDVQQDEw02NzkyMzIyNi0xZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqOwL2H7pkzQ29u1enn48f8HAYYUHTsnn+gWL8awFYGKDyJV6BdvNdHYw
d375W0vnHrUu+ZivCftiPG6y9Tu26e+fK0XGEpWF5kT7120dVqtqk9hHMMVQ9Umf
2syBkNpfe27Av4HZYmrPDOGvjYPKL4hck8xA8NB7CZ3HM1dX8zYYHuqgsEr5ssp6
23lmDGyYIIzZnK7TYgIbY1QSxtPZDbArNMJtx5kWHjsTjPR086Tcj54Nvxs5iSi8
8aKHHvOFFfWETX9/HIqVYCiUPK8neVrsXTl2yyrYHaLCBBzqzWt2pgnoq2v9Uulw
Ba/Wa8oqAVYtwlZick9hWuq88c2+6wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN4Z
nI0qmYNfn0tiKJooBetZXhbHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80Q0JDNTgxRUQ5ODMxMUVGOTlGQTdCNkY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsO5MA0GCSqGSIb3DQEB
CwUAA4IBAQDG8/Ty9TSr4uZgm5CQXSkQufX9m+9Sx2OmrKZ45+tmjxgSYF4wkwXJ
X6ttfm4wTf2ferk7W53T32v4j1t4ua/4Q3e3IQjr+C/G0Q4HwkLgMxARy3+FslK9
xhWs2P1o+dQkvgcce2s6acCT4VNMI3r2iAWbZynohxMcuT0Vd0x+MWIxQwVJBAPv
X/XX68mhdK4W39/MxBfZKByvsV8UURAT+b6Hcz8B/P6BwXu5Cr6QuxJOS/h3YiF2
hVSbciHtbEoUMUsGI3cewcjm6C0jCJqbmaO59qPtJJL3b+NK/k0U5qikLZKksadv
05k3fIprFP7mjEMuFzOESKbTFT1l9DEb
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:21:50 2025 by rpki-client