Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66C8D140D72D11EF90E1CC73762E951A.roa
File: 66C8D140D72D11EF90E1CC73762E951A.roa (raw, json)
Hash identifier: V9RJCKcUGhrVvHgXUJ0OXF5kfmBiGX0qn7s6928Fofc=
Subject key identifier: E6:79:7A:64:F7:5C:86:14:4E:25:46:9B:A8:D9:23:69:FC:2E:B4:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66C8D140D72D11EF90E1CC73762E951A.roa
Signing time: Mon 20 Jan 2025 12:52:27 +0000
ROA not before: Mon 20 Jan 2025 12:52:23 +0000
ROA not after: Sat 01 Feb 2025 12:52:23 +0000
asID: 6079
IP address blocks: 154.207.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81460 (0x13e34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 20 12:52:23 2025 GMT
Not After : Feb 1 12:52:23 2025 GMT
Subject: CN=678e470b-58a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c8:c5:44:ef:fd:1d:14:65:ad:20:da:f6:21:
0c:8d:0b:d3:4f:ea:d0:02:5b:0a:6b:f3:7e:5f:59:
ad:ec:94:df:f2:d3:de:ca:f6:20:fe:fe:6e:5f:30:
89:69:6d:0a:0b:8c:2d:06:9e:12:e0:5d:c2:ed:2c:
47:57:d1:1c:67:93:e5:cd:7c:34:16:46:cf:45:eb:
26:82:ca:13:63:ba:4b:b7:1e:bf:0a:71:95:76:1e:
6e:12:f2:8d:5a:39:d0:cb:a5:b0:cc:ed:96:46:ba:
50:9d:59:bf:f0:ea:3c:06:41:68:8a:f3:ca:ee:08:
7a:79:4d:34:85:2b:de:1e:ec:8d:e3:d5:9e:03:e7:
c4:11:cb:5f:fc:84:0e:50:43:17:2d:a1:59:36:b8:
65:0b:a7:e2:f2:48:d4:72:88:9e:c2:da:eb:07:c6:
1b:43:12:e1:54:ad:26:20:f3:26:a3:be:41:e0:6c:
ab:de:28:75:ff:a6:12:fc:ad:56:1f:c8:6c:88:eb:
b1:c0:2a:53:bb:d3:88:e1:df:b1:89:6c:06:3d:9a:
a0:17:08:7b:4f:77:b5:ef:48:be:19:75:c4:f6:82:
3b:a1:dd:4b:f8:8a:6d:78:4f:f8:66:2c:02:74:cd:
7d:c1:c2:23:bb:b3:d4:fa:70:e9:8c:0a:c0:cb:e0:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:79:7A:64:F7:5C:86:14:4E:25:46:9B:A8:D9:23:69:FC:2E:B4:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66C8D140D72D11EF90E1CC73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:f2:c0:18:e5:d5:f4:f5:c6:c9:69:19:1d:f4:22:45:c8:68:
66:62:9d:c9:82:98:54:26:79:85:68:86:43:38:42:bf:33:ab:
44:46:14:c5:fe:15:b5:a7:b5:96:ff:cb:ed:0a:71:35:95:0d:
86:43:23:fe:ba:d5:7b:e1:1d:14:0b:d9:27:c4:84:78:9d:79:
a2:f7:21:a9:31:c8:74:c3:36:9a:d5:c2:69:c8:c3:ec:9e:a5:
32:11:5d:89:a4:1c:6a:9a:70:25:d3:57:7d:58:d5:e0:bc:5f:
b8:8d:91:e1:25:3f:05:45:a8:4e:38:e6:3a:12:1c:2a:eb:ba:
5b:83:6f:87:47:06:e2:4e:89:bc:a4:1a:92:5e:dd:88:80:94:
9f:55:60:11:b3:b0:93:64:02:6c:b3:0f:43:06:5f:1f:e1:78:
10:51:d9:74:b3:a2:41:04:c7:95:f9:95:80:13:d4:3e:bd:a5:
11:22:bf:0e:3d:e0:d8:25:cc:55:ac:33:b8:58:34:e1:42:f7:
07:16:4a:ac:83:92:c6:cc:8f:cb:8d:ab:e6:f3:9c:b6:4f:96:
79:6a:69:2a:a9:3e:5c:0e:11:91:a6:0b:77:23:46:5f:84:eb:
8c:66:5f:d1:9b:33:8e:5f:12:82:ab:4c:96:35:25:3e:5b:f6:
2c:ae:0a:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT40MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIwMTI1MjIzWhcNMjUwMjAxMTI1MjIzWjAYMRYw
FAYDVQQDEw02NzhlNDcwYi01OGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4sjFRO/9HRRlrSDa9iEMjQvTT+rQAlsKa/N+X1mt7JTf8tPeyvYg/v5u
XzCJaW0KC4wtBp4S4F3C7SxHV9EcZ5PlzXw0FkbPResmgsoTY7pLtx6/CnGVdh5u
EvKNWjnQy6WwzO2WRrpQnVm/8Oo8BkFoivPK7gh6eU00hSveHuyN49WeA+fEEctf
/IQOUEMXLaFZNrhlC6fi8kjUcoiewtrrB8YbQxLhVK0mIPMmo75B4Gyr3ih1/6YS
/K1WH8hsiOuxwCpTu9OI4d+xiWwGPZqgFwh7T3e170i+GXXE9oI7od1L+IpteE/4
ZiwCdM19wcIju7PU+nDpjArAy+BPXQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOZ5
emT3XIYUTiVGm6jZI2n8LrQTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NkM4RDE0MEQ3MkQxMUVGOTBFMUNDNzM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFms8AMA0GCSqGSIb3DQEB
CwUAA4IBAQBK8sAY5dX09cbJaRkd9CJFyGhmYp3JgphUJnmFaIZDOEK/M6tERhTF
/hW1p7WW/8vtCnE1lQ2GQyP+utV74R0UC9knxIR4nXmi9yGpMch0wzaa1cJpyMPs
nqUyEV2JpBxqmnAl01d9WNXgvF+4jZHhJT8FRahOOOY6Ehwq67pbg2+HRwbiTom8
pBqSXt2IgJSfVWARs7CTZAJssw9DBl8f4XgQUdl0s6JBBMeV+ZWAE9Q+vaURIr8O
PeDYJcxVrDO4WDThQvcHFkqsg5LGzI/Ljavm85y2T5Z5amkqqT5cDhGRpgt3I0Zf
hOuMZl/RmzOOXxKCq0yWNSU+W/YsrgoJ
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:21:30 2025 by rpki-client