Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/662CE608D9D111EFA00F9871762E951A.roa
File: 662CE608D9D111EFA00F9871762E951A.roa (raw, json)
Hash identifier: Rk76/ubKRHiVGlL1igwbjZ/0cUvWJW5jnIV2lI7xgpw=
Subject key identifier: 93:14:7B:51:F6:F8:7F:F2:C0:1E:FA:C0:62:E4:B0:1B:F7:E3:A3:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014313
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/662CE608D9D111EFA00F9871762E951A.roa
Signing time: Thu 23 Jan 2025 21:31:26 +0000
ROA not before: Fri 24 Jan 2025 21:31:22 +0000
ROA not after: Fri 28 Feb 2025 21:31:22 +0000
asID: 62240
IP address blocks: 154.196.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82707 (0x14313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:31:22 2025 GMT
Not After : Feb 28 21:31:22 2025 GMT
Subject: CN=6792b52e-298a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:4b:07:53:21:69:ae:b8:73:6b:d4:3a:ab:
e9:12:99:d0:c5:72:9e:91:b2:1f:62:10:ee:3f:97:
99:f0:17:e3:0b:72:4f:e8:45:54:eb:82:06:0c:00:
2b:04:cd:b6:42:fe:30:fe:a3:26:99:d8:59:44:9a:
f1:8c:d6:3a:2b:67:17:2c:e4:d1:e2:16:44:f7:f5:
5f:e2:e8:c4:31:26:de:34:f1:29:53:7d:a8:37:45:
52:eb:09:23:54:98:d7:58:b8:d3:c6:da:5c:af:b2:
f5:88:a7:f7:c7:14:cd:68:3a:9d:7f:ba:aa:fd:88:
06:e0:d2:37:de:e6:24:fe:d1:ec:1f:45:1a:12:d3:
e4:3a:85:2a:b6:3a:c7:cc:00:94:3c:4b:06:e7:91:
48:e4:60:f6:63:f0:75:67:c9:8d:6f:5d:53:f2:a3:
27:b1:f1:6d:80:fd:2f:8e:8e:17:e1:1c:e6:90:d6:
07:57:da:02:72:64:96:b9:5e:b3:3f:da:df:dc:15:
68:b3:0f:ae:09:a4:45:30:33:8d:d3:54:09:00:22:
1b:5d:18:eb:85:9a:99:6c:fd:19:42:aa:76:c5:28:
54:06:06:5e:1a:6c:7b:f3:45:2b:76:de:dd:74:5f:
b7:a1:d1:dc:ef:3b:d5:6a:76:ba:e4:9e:4a:e4:d2:
82:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:14:7B:51:F6:F8:7F:F2:C0:1E:FA:C0:62:E4:B0:1B:F7:E3:A3:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/662CE608D9D111EFA00F9871762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.83.0/24
Signature Algorithm: sha256WithRSAEncryption
03:42:fb:49:4c:f1:c0:ef:ee:08:21:0a:0c:e7:7c:db:79:62:
7c:30:5f:25:6b:30:f6:ce:f9:44:80:72:71:ae:c2:00:35:67:
c7:cf:eb:b7:25:b8:82:09:72:bd:0f:72:23:f1:8a:f4:0f:3d:
59:ff:ac:5e:37:61:28:b1:62:03:63:b6:04:92:51:32:9e:45:
af:64:79:f5:a7:ae:57:70:d7:4d:de:7e:7d:ce:ff:c2:3e:8c:
6f:d3:f2:c6:40:f6:b0:6c:eb:15:91:17:fd:88:ba:60:4a:94:
49:2a:e3:7a:19:13:dd:b4:c6:9f:0a:65:6b:0a:f8:9c:c4:7a:
25:8e:25:e5:b8:fd:ef:03:76:e9:45:17:a8:52:e0:10:c8:32:
f9:60:33:a4:02:96:ea:e0:ac:de:a9:27:47:97:13:64:63:84:
22:15:f6:20:cb:c9:fe:52:ee:ae:d1:90:a9:c9:6f:b1:58:83:
b0:07:5a:33:d7:7b:94:3d:2c:57:e1:dd:6b:e2:3d:bc:5d:ea:
ac:a8:6a:01:34:0c:e8:0a:f2:56:a2:c0:46:4d:e5:21:1c:4c:
fe:29:db:79:71:8e:bb:ad:6c:59:00:8c:bd:f3:8d:35:ca:96:
61:c3:90:36:cc:c0:00:8d:b8:00:da:87:c5:75:af:64:7a:00:
05:41:35:d9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUMTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MjEzMTIyWhcNMjUwMjI4MjEzMTIyWjAYMRYw
FAYDVQQDEw02NzkyYjUyZS0yOThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApO5LB1Mhaa64c2vUOqvpEpnQxXKekbIfYhDuP5eZ8BfjC3JP6EVU64IG
DAArBM22Qv4w/qMmmdhZRJrxjNY6K2cXLOTR4hZE9/Vf4ujEMSbeNPEpU32oN0VS
6wkjVJjXWLjTxtpcr7L1iKf3xxTNaDqdf7qq/YgG4NI33uYk/tHsH0UaEtPkOoUq
tjrHzACUPEsG55FI5GD2Y/B1Z8mNb11T8qMnsfFtgP0vjo4X4RzmkNYHV9oCcmSW
uV6zP9rf3BVosw+uCaRFMDON01QJACIbXRjrhZqZbP0ZQqp2xShUBgZeGmx780Ur
dt7ddF+3odHc7zvVana65J5K5NKCawIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJMU
e1H2+H/ywB76wGLksBv346OTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NjJDRTYwOEQ5RDExMUVGQTAwRjk4NzE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsRTMA0GCSqGSIb3DQEB
CwUAA4IBAQADQvtJTPHA7+4IIQoM53zbeWJ8MF8lazD2zvlEgHJxrsIANWfHz+u3
JbiCCXK9D3Ij8Yr0Dz1Z/6xeN2EosWIDY7YEklEynkWvZHn1p65XcNdN3n59zv/C
Poxv0/LGQPawbOsVkRf9iLpgSpRJKuN6GRPdtMafCmVrCvicxHoljiXluP3vA3bp
RReoUuAQyDL5YDOkApbq4KzeqSdHlxNkY4QiFfYgy8n+Uu6u0ZCpyW+xWIOwB1oz
13uUPSxX4d1r4j28XeqsqGoBNAzoCvJWosBGTeUhHEz+Kdt5cY67rWxZAIy98401
ypZhw5A2zMAAjbgA2ofFda9kegAFQTXZ
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:10 2025 by rpki-client