Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EEEE6E6D98D11EF8DAE1CB0762E951A.roa
File: 5EEEE6E6D98D11EF8DAE1CB0762E951A.roa (raw, json)
Hash identifier: 9DWFBF5eANron7pvzRp0sRrnfxTGqXMOGTvZ3q5OCVE=
Subject key identifier: 21:D7:35:4E:D4:2E:92:B0:AB:D5:C0:78:BC:DA:D3:93:F2:8C:5B:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014272
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EEEE6E6D98D11EF8DAE1CB0762E951A.roa
Signing time: Thu 23 Jan 2025 13:24:28 +0000
ROA not before: Thu 23 Jan 2025 13:24:24 +0000
ROA not after: Fri 28 Feb 2025 13:24:24 +0000
asID: 62240
IP address blocks: 154.196.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82546 (0x14272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 13:24:24 2025 GMT
Not After : Feb 28 13:24:24 2025 GMT
Subject: CN=6792430c-dcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:77:ca:8b:c4:49:59:24:94:b2:58:ab:82:
f8:58:54:88:75:2c:65:e9:ea:b9:c2:4c:ee:62:5c:
d0:3a:1d:63:b1:e9:f9:47:76:fd:1d:e0:12:b0:f2:
66:9a:23:bb:a5:ed:a0:c2:6b:95:7f:36:da:8d:e8:
c8:0b:30:ef:02:ef:3d:99:24:fa:e3:7e:f2:5b:b9:
10:b9:7f:74:c5:d0:82:95:ad:c7:76:37:0f:b3:eb:
50:f6:1f:2a:bc:ef:e2:95:2e:28:e6:4d:f5:7a:47:
83:ce:7e:a4:4f:51:8f:70:1f:b2:88:97:20:87:db:
5e:16:83:ab:98:bf:a6:f1:73:61:30:b1:f8:2d:25:
ff:68:db:6e:d7:c7:06:47:43:be:94:b3:26:92:5d:
b2:d2:7a:a3:ac:d5:72:ac:17:f2:b4:61:e6:3d:d0:
d7:08:27:45:c7:a2:6c:5a:9d:36:dc:d9:20:73:0f:
12:d9:81:c4:74:56:c9:12:be:bf:62:b6:58:41:98:
4b:7e:fb:ee:1c:0c:4a:b3:74:fc:f6:20:cd:ad:00:
64:f0:87:a2:57:2f:c7:31:46:32:f6:01:77:ac:35:
22:af:b7:91:67:56:dc:88:1c:2e:70:11:e0:4e:e2:
32:07:bd:49:17:88:da:8d:b7:b2:f9:03:ce:d8:07:
60:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D7:35:4E:D4:2E:92:B0:AB:D5:C0:78:BC:DA:D3:93:F2:8C:5B:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EEEE6E6D98D11EF8DAE1CB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.21.0/24
Signature Algorithm: sha256WithRSAEncryption
49:99:29:b3:0d:22:a8:6f:74:db:41:84:b2:87:10:09:b0:56:
c0:78:de:87:da:cf:84:95:4c:eb:12:69:6b:98:21:0d:8e:09:
3a:65:a2:81:51:39:ae:7f:ca:c9:1e:f8:2b:68:15:4a:3e:1e:
f7:ea:07:b1:2e:75:74:db:a2:8a:1e:fd:ab:f7:9c:75:49:9b:
a9:32:43:7a:99:f5:97:74:22:5e:3e:f8:e0:53:a1:39:6c:d3:
65:5a:e2:c7:4b:9b:70:fb:fe:8f:ad:77:76:6f:ba:db:ca:42:
1e:09:35:89:1e:e0:45:9e:fe:b7:e8:1b:94:8f:ca:44:d8:ea:
a5:3d:24:3c:42:08:f4:0b:be:18:f0:28:09:7e:09:bc:95:01:
39:72:9c:fd:8f:3e:58:b5:a7:0b:b4:55:44:c5:65:9e:3a:94:
8f:dd:1b:44:75:11:e4:30:25:1d:6a:c9:95:b0:a5:25:7b:34:
fe:84:c2:af:b7:e0:af:fc:0e:22:d8:35:54:6a:64:ad:7c:4f:
46:f6:40:d2:ce:a9:8a:a7:92:54:ff:9f:1b:e8:80:e5:f0:24:
79:54:d3:79:96:61:94:92:48:f0:75:ba:ba:f1:24:26:c6:4b:
75:62:38:7b:57:27:be:b7:a5:92:ce:07:8c:3b:9b:6e:1e:21:
9e:c6:e2:57
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUJyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTMyNDI0WhcNMjUwMjI4MTMyNDI0WjAYMRYw
FAYDVQQDEw02NzkyNDMwYy1kY2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvZB3yovESVkklLJYq4L4WFSIdSxl6eq5wkzuYlzQOh1jsen5R3b9HeAS
sPJmmiO7pe2gwmuVfzbajejICzDvAu89mST6437yW7kQuX90xdCCla3HdjcPs+tQ
9h8qvO/ilS4o5k31ekeDzn6kT1GPcB+yiJcgh9teFoOrmL+m8XNhMLH4LSX/aNtu
18cGR0O+lLMmkl2y0nqjrNVyrBfytGHmPdDXCCdFx6JsWp023Nkgcw8S2YHEdFbJ
Er6/YrZYQZhLfvvuHAxKs3T89iDNrQBk8IeiVy/HMUYy9gF3rDUir7eRZ1bciBwu
cBHgTuIyB71JF4jajbey+QPO2AdghwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCHX
NU7ULpKwq9XAeLza05PyjFs0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RUVFRTZFNkQ5OEQxMUVGOERBRTFDQjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsQVMA0GCSqGSIb3DQEB
CwUAA4IBAQBJmSmzDSKob3TbQYSyhxAJsFbAeN6H2s+ElUzrEmlrmCENjgk6ZaKB
UTmuf8rJHvgraBVKPh736gexLnV026KKHv2r95x1SZupMkN6mfWXdCJePvjgU6E5
bNNlWuLHS5tw+/6PrXd2b7rbykIeCTWJHuBFnv636BuUj8pE2OqlPSQ8Qgj0C74Y
8CgJfgm8lQE5cpz9jz5YtacLtFVExWWeOpSP3RtEdRHkMCUdasmVsKUlezT+hMKv
t+Cv/A4i2DVUamStfE9G9kDSzqmKp5JU/58b6IDl8CR5VNN5lmGUkkjwdbq68SQm
xkt1Yjh7Vye+t6WSzgeMO5tuHiGexuJX
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:29:00 2025 by rpki-client