Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E9F0E3AD96811EF946332B7762E951A.roa
File: 4E9F0E3AD96811EF946332B7762E951A.roa (raw, json)
Hash identifier: PqyhKfwJ7tkgKwnxdSg4hOCG3bu8hTwI6p8ajHi9IOc=
Subject key identifier: E5:E1:41:A9:3E:E1:93:0A:58:AC:72:63:B7:D6:4F:50:82:79:5F:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E9F0E3AD96811EF946332B7762E951A.roa
Signing time: Thu 23 Jan 2025 08:59:09 +0000
ROA not before: Thu 23 Jan 2025 08:59:06 +0000
ROA not after: Fri 28 Feb 2025 08:59:06 +0000
asID: 62240
IP address blocks: 154.194.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82102 (0x140b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 08:59:06 2025 GMT
Not After : Feb 28 08:59:06 2025 GMT
Subject: CN=679204dd-5e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0b:f8:3b:20:4c:50:eb:36:26:30:2d:b9:fd:
e4:a2:d9:98:c7:cd:c3:63:46:de:73:62:5d:b5:58:
cd:43:aa:46:cd:51:ff:47:10:c0:b1:5f:30:ab:ca:
8e:ef:fc:9a:5f:3f:4d:51:7e:40:98:08:63:d1:bf:
83:2a:1c:be:ba:7d:db:7c:07:fb:d2:1e:0c:5b:8a:
93:f4:db:cf:d3:47:3c:d1:c5:fd:57:f1:1a:2a:6e:
77:19:72:e5:d2:be:0f:ea:f4:a6:f0:01:38:f1:7a:
ba:87:ae:d0:ab:56:4d:68:34:e2:6a:06:66:bf:91:
1d:0e:c7:1c:93:b1:b7:9f:81:ba:56:cc:3c:19:d2:
05:a8:33:4d:d0:75:55:29:0c:1c:00:33:73:e5:43:
35:bc:89:0e:84:2d:0b:ab:66:78:58:b9:06:f1:0a:
41:4c:eb:b5:31:b2:89:cd:f9:de:6e:c1:e7:f6:68:
de:17:12:ef:cc:e0:35:47:bd:58:ba:96:c7:66:e0:
6f:cb:a6:cc:2a:e2:93:bc:b0:89:ba:ec:ad:b7:98:
4c:b3:6e:ef:2f:88:9d:42:1d:14:cd:eb:7d:3d:d5:
8b:b9:49:ae:f1:27:fe:c4:c7:b6:df:7b:94:d7:ff:
20:9c:ae:51:a7:34:36:17:cc:78:89:eb:3f:bb:07:
cc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E1:41:A9:3E:E1:93:0A:58:AC:72:63:B7:D6:4F:50:82:79:5F:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E9F0E3AD96811EF946332B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.78.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:a7:8b:63:91:8c:62:a7:2e:5c:c9:5a:15:9b:e3:ec:68:9b:
82:b7:fd:74:b8:a1:1b:d7:cc:2e:fb:28:b0:80:b7:21:c6:9a:
6b:8d:b6:dc:0b:1d:87:99:75:df:13:34:b7:46:3c:ae:e2:e1:
da:5d:e8:be:71:16:0c:b1:c1:3d:56:63:67:79:2d:9a:79:d7:
6d:50:36:20:29:0c:7c:52:8c:83:ce:85:e5:33:39:38:a8:51:
ee:41:c7:6d:d2:27:76:dc:ce:a3:7e:65:7e:95:a1:f6:eb:8c:
1a:e9:e8:a1:69:93:21:eb:e7:ec:76:24:aa:74:91:98:9e:d4:
f9:e0:4d:bf:e5:dd:65:f0:10:97:08:75:bb:28:ae:ac:bf:0a:
29:37:dc:70:fe:fb:0e:b5:f5:da:85:77:78:f3:bd:b6:51:56:
1c:6a:11:a7:e1:8a:dd:1a:08:08:d0:6d:09:28:a2:32:97:e5:
57:11:b2:48:ca:a0:e9:34:cb:97:40:84:88:aa:eb:b7:94:0d:
65:d1:e3:60:2b:79:6b:d2:27:14:71:4c:23:93:c9:29:be:ab:
88:ef:ab:e2:0f:63:4f:a8:74:e1:64:7e:43:aa:99:9f:70:32:
6a:d6:73:a7:92:5d:50:1f:f9:b4:1b:53:d1:01:c1:1a:27:bf:
b5:d0:78:85
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUC2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMDg1OTA2WhcNMjUwMjI4MDg1OTA2WjAYMRYw
FAYDVQQDEw02NzkyMDRkZC01ZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4gv4OyBMUOs2JjAtuf3kotmYx83DY0bec2JdtVjNQ6pGzVH/RxDAsV8w
q8qO7/yaXz9NUX5AmAhj0b+DKhy+un3bfAf70h4MW4qT9NvP00c80cX9V/EaKm53
GXLl0r4P6vSm8AE48Xq6h67Qq1ZNaDTiagZmv5EdDscck7G3n4G6Vsw8GdIFqDNN
0HVVKQwcADNz5UM1vIkOhC0Lq2Z4WLkG8QpBTOu1MbKJzfnebsHn9mjeFxLvzOA1
R71YupbHZuBvy6bMKuKTvLCJuuytt5hMs27vL4idQh0Uzet9PdWLuUmu8Sf+xMe2
33uU1/8gnK5RpzQ2F8x4ies/uwfMWwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOXh
Qak+4ZMKWKxyY7fWT1CCeV/GMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RTlGMEUzQUQ5NjgxMUVGOTQ2MzMyQjc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJOMA0GCSqGSIb3DQEB
CwUAA4IBAQBOp4tjkYxipy5cyVoVm+PsaJuCt/10uKEb18wu+yiwgLchxpprjbbc
Cx2HmXXfEzS3Rjyu4uHaXei+cRYMscE9VmNneS2aeddtUDYgKQx8UoyDzoXlMzk4
qFHuQcdt0id23M6jfmV+laH264wa6eihaZMh6+fsdiSqdJGYntT54E2/5d1l8BCX
CHW7KK6svwopN9xw/vsOtfXahXd48722UVYcahGn4YrdGggI0G0JKKIyl+VXEbJI
yqDpNMuXQISIquu3lA1l0eNgK3lr0icUcUwjk8kpvquI76viD2NPqHThZH5Dqpmf
cDJq1nOnkl1QH/m0G1PRAcEaJ7+10HiF
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:24:03 2025 by rpki-client