Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D06DE10D97A11EF95A51DB1762E951A.roa
File: 4D06DE10D97A11EF95A51DB1762E951A.roa (raw, json)
Hash identifier: h4DpXJ8ByWzmxsOEdb2ebt8sPLKGRBIpfZx1Whu4ky4=
Subject key identifier: F3:B9:2F:F4:51:D8:5D:66:63:A7:E7:BE:5F:F6:17:13:DB:60:19:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01417B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D06DE10D97A11EF95A51DB1762E951A.roa
Signing time: Thu 23 Jan 2025 11:07:57 +0000
ROA not before: Thu 23 Jan 2025 11:07:52 +0000
ROA not after: Fri 28 Feb 2025 11:07:52 +0000
asID: 62240
IP address blocks: 154.195.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82299 (0x1417b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:07:52 2025 GMT
Not After : Feb 28 11:07:52 2025 GMT
Subject: CN=6792230d-f695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:73:22:89:77:25:a0:7f:4d:47:55:e4:be:
cb:26:29:d1:31:93:ac:3d:9e:4f:48:ea:75:57:97:
c2:fc:02:84:b1:81:82:49:c9:64:42:d8:99:28:fc:
42:46:44:fa:42:89:b3:2e:1f:49:f4:8c:99:5a:ac:
43:19:c9:56:13:b8:1d:07:93:05:dc:7f:87:29:4c:
28:3b:c0:5a:d1:16:c0:99:53:bb:22:44:f1:ed:cf:
6f:88:eb:51:ad:eb:0c:ff:84:8f:f7:a1:b9:6a:74:
14:c8:82:7e:fb:71:71:60:6e:eb:d9:62:c0:c4:5d:
8a:bf:b8:8f:d3:ad:86:c4:d6:b8:f7:c2:dd:89:e2:
f6:00:3b:00:03:f3:4b:1e:c5:c1:1b:4d:9f:bc:e5:
28:79:2d:61:95:a3:33:29:ee:9d:d2:f4:24:5a:26:
a0:65:b5:33:d0:1f:0c:66:61:64:b0:15:64:d0:00:
ef:7b:8b:c8:81:15:42:25:16:13:69:57:78:1c:60:
0a:0c:0c:92:13:96:55:e2:69:8e:1e:ec:e7:51:51:
6b:0e:5b:dd:4f:17:bb:80:58:aa:d3:6c:d8:d5:63:
64:9d:d7:d4:56:fd:82:17:9f:a9:b7:91:da:a5:d8:
fd:a5:b7:1e:37:49:9b:d9:bd:c9:ff:35:e7:2e:30:
91:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B9:2F:F4:51:D8:5D:66:63:A7:E7:BE:5F:F6:17:13:DB:60:19:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D06DE10D97A11EF95A51DB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.148.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:21:99:ae:9c:f0:b0:fe:3d:aa:63:81:db:bc:6e:b6:43:81:
d0:8d:2a:f5:70:69:5d:80:b9:a2:5b:39:a9:93:79:e7:32:71:
f1:e7:36:99:82:7d:b6:99:d6:ae:08:fc:ee:d3:51:80:54:d1:
3b:ad:76:4f:28:87:93:9a:a1:9e:70:cd:fd:dd:c9:6c:43:2c:
b3:3f:c6:a0:54:6f:0c:1a:f4:97:17:be:60:67:c9:31:1d:39:
65:5f:d8:7b:3b:77:81:a2:f4:36:a8:d7:42:b3:3e:0f:3a:09:
5d:d8:a1:8c:fa:93:98:c0:42:ea:db:b5:3b:bf:23:9d:a3:10:
31:a4:48:b3:d8:4c:f4:1a:63:cb:67:84:2d:17:d8:73:cc:0c:
58:a2:02:03:a4:ff:8a:2c:42:24:04:81:3a:e3:59:a6:cd:50:
05:05:87:ac:9a:18:ac:3c:31:a7:f5:9e:53:28:23:b6:ed:82:
6f:70:10:90:bf:ac:0c:fe:e8:0b:f8:46:e6:8a:b1:17:ad:58:
6d:d3:92:7c:36:8c:89:7a:20:5a:6d:9c:86:01:7b:a9:08:94:
f1:ee:60:5f:83:59:76:ba:ab:b1:15:a7:2b:cf:59:92:94:8d:
f8:a1:4a:97:04:49:18:73:a1:92:ba:b4:a1:14:d7:ee:ae:5c:
ff:f0:a4:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUF7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTEwNzUyWhcNMjUwMjI4MTEwNzUyWjAYMRYw
FAYDVQQDEw02NzkyMjMwZC1mNjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs0dzIol3JaB/TUdV5L7LJinRMZOsPZ5PSOp1V5fC/AKEsYGCSclkQtiZ
KPxCRkT6QomzLh9J9IyZWqxDGclWE7gdB5MF3H+HKUwoO8Ba0RbAmVO7IkTx7c9v
iOtRresM/4SP96G5anQUyIJ++3FxYG7r2WLAxF2Kv7iP062GxNa498LdieL2ADsA
A/NLHsXBG02fvOUoeS1hlaMzKe6d0vQkWiagZbUz0B8MZmFksBVk0ADve4vIgRVC
JRYTaVd4HGAKDAySE5ZV4mmOHuznUVFrDlvdTxe7gFiq02zY1WNkndfUVv2CF5+p
t5Hapdj9pbceN0mb2b3J/zXnLjCRRwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPO5
L/RR2F1mY6fnvl/2FxPbYBlbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RDA2REUxMEQ5N0ExMUVGOTVBNTFEQjE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsOUMA0GCSqGSIb3DQEB
CwUAA4IBAQCgIZmunPCw/j2qY4HbvG62Q4HQjSr1cGldgLmiWzmpk3nnMnHx5zaZ
gn22mdauCPzu01GAVNE7rXZPKIeTmqGecM393clsQyyzP8agVG8MGvSXF75gZ8kx
HTllX9h7O3eBovQ2qNdCsz4POgld2KGM+pOYwELq27U7vyOdoxAxpEiz2Ez0GmPL
Z4QtF9hzzAxYogIDpP+KLEIkBIE641mmzVAFBYesmhisPDGn9Z5TKCO27YJvcBCQ
v6wM/ugL+EbmirEXrVht05J8NoyJeiBabZyGAXupCJTx7mBfg1l2uquxFacrz1mS
lI34oUqXBEkYc6GSurShFNfurlz/8KQP
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:55 2025 by rpki-client