Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61B54734D97511EFA0B3F790762E951A.roa
File: 61B54734D97511EFA0B3F790762E951A.roa (raw, json)
Hash identifier: CBv510VQbTOtWZwwM14pDkaJdi2mDDdHE7/7nDvtJps=
Subject key identifier: F4:47:2C:54:7D:BA:18:48:80:8A:2B:59:CB:A8:E5:9D:B2:E6:72:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014130
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61B54734D97511EFA0B3F790762E951A.roa
Signing time: Thu 23 Jan 2025 10:32:45 +0000
ROA not before: Thu 23 Jan 2025 10:32:41 +0000
ROA not after: Fri 28 Feb 2025 10:32:41 +0000
asID: 62240
IP address blocks: 154.195.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82224 (0x14130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:32:41 2025 GMT
Not After : Feb 28 10:32:41 2025 GMT
Subject: CN=67921acd-7e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:18:a5:36:cd:11:4a:3e:e2:8b:6d:b2:58:db:
9d:69:99:f7:31:85:ae:a6:5b:de:1d:f7:18:66:b1:
49:3f:82:bc:6b:ed:a6:9d:e8:ad:9f:0f:7f:ac:f3:
39:21:6b:99:0e:55:3c:1d:38:68:91:8a:b8:be:07:
41:8f:1f:4a:de:11:19:a0:1e:10:a5:08:52:a5:a1:
ff:2f:78:01:4a:fc:b7:7c:66:fb:25:3e:04:63:53:
69:81:8d:24:4e:60:c2:6a:66:9c:da:69:d9:79:69:
b8:1a:d6:69:da:ca:eb:ab:e3:02:1f:7e:68:22:bf:
4c:ae:63:59:48:6e:52:25:69:f2:30:1b:ae:be:37:
8b:da:b5:b8:2a:dc:a8:1d:e9:7b:65:4d:77:d3:b8:
b1:6b:0a:c2:0b:a4:84:a5:ea:4a:a1:ec:d8:08:fe:
9b:10:5d:3b:85:c6:cc:bb:d5:8b:0b:f8:ec:ea:4d:
6e:5b:97:e0:11:fe:4a:a1:53:2b:f6:a0:93:8e:7e:
e3:6c:b7:5c:fe:30:c2:14:8c:3f:d2:0a:ca:67:66:
0b:a9:10:58:3c:25:b7:a4:ce:9c:24:fa:15:72:e4:
27:3d:88:a1:37:ca:52:ef:9e:2f:21:c0:8e:e1:ef:
a3:a7:c4:1e:2a:6f:e8:32:19:32:93:be:3c:a0:07:
c6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:47:2C:54:7D:BA:18:48:80:8A:2B:59:CB:A8:E5:9D:B2:E6:72:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61B54734D97511EFA0B3F790762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.3.0/24
Signature Algorithm: sha256WithRSAEncryption
14:2e:5f:30:13:af:18:ec:83:8b:1e:47:2f:94:02:1d:50:17:
12:5f:b3:c9:93:56:77:f9:56:18:14:c7:fc:8a:a9:6c:98:f8:
fc:93:8d:d6:4a:49:76:bc:6f:4c:92:81:db:6b:59:ca:43:b2:
16:41:5e:cf:c0:24:e8:c3:60:45:60:88:1e:52:b1:c6:33:0e:
97:79:d9:4e:8a:3e:46:52:01:c1:6e:24:a3:a9:6f:55:ba:d3:
02:c2:9b:38:73:c6:82:85:4d:54:88:dc:d0:a8:9c:91:75:a7:
51:aa:fd:62:22:07:1e:e0:9b:81:45:0a:44:01:0e:42:fd:b7:
a3:b7:05:3f:a5:82:37:5b:ad:97:33:6b:3f:22:bb:08:3c:01:
d3:da:55:dd:23:1a:8e:c8:1f:98:11:09:38:46:52:a8:a9:38:
3e:b5:99:93:0d:82:06:c1:04:b5:2e:04:02:21:5a:d9:cd:a0:
17:dd:e0:a6:9f:72:e4:12:89:e5:8d:ba:6c:b8:0b:0e:b3:7a:
ec:bd:b5:9e:6f:6c:78:79:57:b3:f7:98:22:52:a0:80:41:39:
a3:14:f7:c8:a0:0f:58:3b:76:6b:ee:c3:56:b7:4e:6c:af:10:
d5:da:0d:3a:b8:66:ce:a7:ff:a0:fa:c2:1a:88:f5:3d:d4:25:
74:d7:9d:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUEwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTAzMjQxWhcNMjUwMjI4MTAzMjQxWjAYMRYw
FAYDVQQDEw02NzkyMWFjZC03ZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwxilNs0RSj7ii22yWNudaZn3MYWuplveHfcYZrFJP4K8a+2mneitnw9/
rPM5IWuZDlU8HThokYq4vgdBjx9K3hEZoB4QpQhSpaH/L3gBSvy3fGb7JT4EY1Np
gY0kTmDCamac2mnZeWm4GtZp2srrq+MCH35oIr9MrmNZSG5SJWnyMBuuvjeL2rW4
KtyoHel7ZU1307ixawrCC6SEpepKoezYCP6bEF07hcbMu9WLC/js6k1uW5fgEf5K
oVMr9qCTjn7jbLdc/jDCFIw/0grKZ2YLqRBYPCW3pM6cJPoVcuQnPYihN8pS754v
IcCO4e+jp8QeKm/oMhkyk748oAfGMQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPRH
LFR9uhhIgIorWcuo5Z2y5nLcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MUI1NDczNEQ5NzUxMUVGQTBCM0Y3OTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsMDMA0GCSqGSIb3DQEB
CwUAA4IBAQAULl8wE68Y7IOLHkcvlAIdUBcSX7PJk1Z3+VYYFMf8iqlsmPj8k43W
Skl2vG9MkoHba1nKQ7IWQV7PwCTow2BFYIgeUrHGMw6XedlOij5GUgHBbiSjqW9V
utMCwps4c8aChU1UiNzQqJyRdadRqv1iIgce4JuBRQpEAQ5C/bejtwU/pYI3W62X
M2s/IrsIPAHT2lXdIxqOyB+YEQk4RlKoqTg+tZmTDYIGwQS1LgQCIVrZzaAX3eCm
n3LkEonljbpsuAsOs3rsvbWeb2x4eVez95giUqCAQTmjFPfIoA9YO3Zr7sNWt05s
rxDV2g06uGbOp/+g+sIaiPU91CV0150I
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:23:49 2025 by rpki-client