Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AA13250DD6211EF945AA291762E951A.roa
File: 5AA13250DD6211EF945AA291762E951A.roa (raw, json)
Hash identifier: 8inowA9436uPmrwiRRapFlo6iJb7wUrux/qsrZcDH/8=
Subject key identifier: DE:83:AC:4F:7A:CD:91:20:49:6C:58:B6:9C:21:8E:CB:EA:D3:88:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AA13250DD6211EF945AA291762E951A.roa
Signing time: Tue 28 Jan 2025 10:26:37 +0000
ROA not before: Tue 28 Jan 2025 10:26:33 +0000
ROA not after: Tue 11 Feb 2025 10:26:33 +0000
asID: 140869
IP address blocks: 154.81.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85184 (0x14cc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 10:26:33 2025 GMT
Not After : Feb 11 10:26:33 2025 GMT
Subject: CN=6798b0dd-6eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:19:86:48:b9:cb:31:77:d1:b0:c1:15:a5:
1d:af:f5:e2:31:e6:ee:3e:eb:8d:83:ce:1e:07:b5:
15:8b:68:22:e5:df:5d:04:90:b6:6d:31:4c:1f:d4:
e9:83:45:c0:95:5b:e7:e7:1c:0d:f9:fa:c1:e6:15:
01:fc:34:c5:5c:73:0c:78:74:bf:58:3b:3b:d4:6e:
7d:4b:4e:ad:50:bf:29:52:1c:80:a8:3d:2d:a4:c6:
11:f3:c3:75:62:3c:82:48:a7:48:9b:a0:c2:3e:24:
4a:ef:ab:c9:ee:b0:65:73:4a:79:88:fe:54:eb:fb:
8e:3e:1e:90:3f:ad:9d:84:10:4e:24:a9:9d:2c:5b:
19:c4:bd:a1:b8:f4:aa:9d:61:c5:d4:6b:c9:a7:ac:
bc:2a:3e:b7:5b:d6:cf:e2:3a:f6:a0:b1:11:f8:6c:
6d:3a:61:e9:17:b3:29:ca:2b:78:26:f7:43:33:30:
9a:fa:f4:90:76:95:64:bb:69:e9:1c:8c:d4:52:61:
f1:7a:7d:22:66:55:ad:93:8f:bc:6b:9c:38:28:8c:
6d:83:24:7b:5f:d8:b5:bf:bc:89:15:30:1f:e6:f1:
16:c3:89:76:cb:88:02:37:57:3f:82:75:e1:96:18:
e5:78:4d:c2:1f:db:d9:f3:dd:31:39:30:a6:ed:3c:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:83:AC:4F:7A:CD:91:20:49:6C:58:B6:9C:21:8E:CB:EA:D3:88:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AA13250DD6211EF945AA291762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.37.0/24
Signature Algorithm: sha256WithRSAEncryption
52:d3:07:b5:9d:87:a7:2e:94:82:c2:21:2a:f0:fe:df:3d:50:
f0:a2:3e:eb:4b:6c:96:68:6d:6c:ea:fc:41:84:06:b4:e2:3b:
7c:e6:6d:e3:ab:c2:2e:c4:b3:f6:60:45:e2:da:52:62:0a:ea:
40:88:89:51:4b:c2:96:16:92:b0:ec:cd:ef:c2:3b:2b:40:b7:
69:86:98:51:4f:5e:53:62:79:90:77:39:a4:57:49:50:c0:18:
8d:3f:1e:16:7b:b2:4c:8e:f2:f2:65:e5:ac:b1:8d:5e:f8:56:
db:24:5d:f3:1b:1b:ec:63:31:2b:6e:83:4c:ae:b5:2d:33:bd:
d2:87:b8:57:4a:5f:ca:ce:f9:d0:bf:ea:f4:ab:85:1e:22:27:
9e:a8:a3:31:ef:fd:b9:14:98:2f:33:c7:85:5a:8f:9a:07:bc:
d0:ca:53:8b:07:b7:26:f9:88:26:fb:27:a4:c5:51:60:36:0e:
68:7a:b6:ac:f2:5d:c1:45:b0:d1:43:3e:cb:f5:69:08:7c:43:
5b:cb:5a:92:e1:1d:af:43:32:1c:21:31:e2:6d:88:1f:68:bb:
2a:3e:87:44:a9:98:55:60:82:3b:f1:33:42:a3:d3:a8:45:9a:
4f:da:0c:4f:25:7b:e5:e7:17:50:79:4a:3a:b9:a8:fc:98:5c:
48:30:26:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUzAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI4MTAyNjMzWhcNMjUwMjExMTAyNjMzWjAYMRYw
FAYDVQQDEw02Nzk4YjBkZC02ZWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuVMZhki5yzF30bDBFaUdr/XiMebuPuuNg84eB7UVi2gi5d9dBJC2bTFM
H9Tpg0XAlVvn5xwN+frB5hUB/DTFXHMMeHS/WDs71G59S06tUL8pUhyAqD0tpMYR
88N1YjyCSKdIm6DCPiRK76vJ7rBlc0p5iP5U6/uOPh6QP62dhBBOJKmdLFsZxL2h
uPSqnWHF1GvJp6y8Kj63W9bP4jr2oLER+GxtOmHpF7Mpyit4JvdDMzCa+vSQdpVk
u2npHIzUUmHxen0iZlWtk4+8a5w4KIxtgyR7X9i1v7yJFTAf5vEWw4l2y4gCN1c/
gnXhlhjleE3CH9vZ890xOTCm7Tz9TwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN6D
rE96zZEgSWxYtpwhjsvq04h0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81QUExMzI1MERENjIxMUVGOTQ1QUEyOTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlElMA0GCSqGSIb3DQEB
CwUAA4IBAQBS0we1nYenLpSCwiEq8P7fPVDwoj7rS2yWaG1s6vxBhAa04jt85m3j
q8IuxLP2YEXi2lJiCupAiIlRS8KWFpKw7M3vwjsrQLdphphRT15TYnmQdzmkV0lQ
wBiNPx4We7JMjvLyZeWssY1e+FbbJF3zGxvsYzErboNMrrUtM73Sh7hXSl/KzvnQ
v+r0q4UeIieeqKMx7/25FJgvM8eFWo+aB7zQylOLB7cm+Ygm+yekxVFgNg5oeras
8l3BRbDRQz7L9WkIfENby1qS4R2vQzIcITHibYgfaLsqPodEqZhVYII78TNCo9Oo
RZpP2gxPJXvl5xdQeUo6uaj8mFxIMCY7
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:15:40 2025 by rpki-client