Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67EF5708DA3211EF91D6068A762E951A.roa
File: 67EF5708DA3211EF91D6068A762E951A.roa (raw, json)
Hash identifier: BqmBTexgovvvk2ZHTNco0cfE/b47PZaJnTqT8iRsjBw=
Subject key identifier: DA:18:99:0F:6F:24:D1:6B:45:E4:7A:C0:67:92:B8:91:79:C4:40:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67EF5708DA3211EF91D6068A762E951A.roa
Signing time: Fri 24 Jan 2025 09:05:50 +0000
ROA not before: Fri 24 Jan 2025 09:05:46 +0000
ROA not after: Fri 28 Feb 2025 09:05:46 +0000
asID: 62240
IP address blocks: 154.194.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83125 (0x144b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:05:46 2025 GMT
Not After : Feb 28 09:05:46 2025 GMT
Subject: CN=679357ee-7f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:04:2e:68:dc:18:0c:00:84:71:56:d2:5f:
2a:6a:80:cf:60:65:e7:c2:9c:1c:63:d1:b1:a3:d3:
bf:04:0e:7e:b0:42:b7:6a:93:00:fe:69:1a:66:64:
c5:d7:0b:5c:76:bc:c8:42:80:d4:2e:ff:aa:88:0f:
b6:13:b0:01:b1:bb:d7:3f:7a:fa:ca:a7:87:8e:e8:
d1:56:a2:b0:03:49:f4:f0:94:28:e3:5a:a3:d1:ed:
dc:66:e8:89:52:a4:bc:04:95:38:a9:f9:63:ee:b8:
88:e9:80:e3:15:6a:97:3e:21:1b:9a:41:ca:bd:48:
70:56:d8:f1:f8:33:33:4f:44:c0:5d:98:2c:b2:52:
83:ca:87:71:93:6a:d6:0f:39:fa:6d:de:59:d4:bf:
52:f5:7b:b7:54:04:15:13:ef:68:19:7e:1c:cc:c1:
ef:29:54:d9:68:b8:78:65:ac:0b:27:1e:cc:4a:b0:
0b:78:21:03:2b:bc:16:52:00:0e:0e:9d:47:cc:fa:
31:49:be:df:b8:d0:51:0b:2f:cb:74:84:fe:6d:b1:
97:90:d5:fd:39:7b:7c:ce:fc:82:3a:ed:78:c6:77:
98:7b:9f:2d:3e:c2:cb:7b:87:17:ef:8f:55:ae:ef:
1c:8a:f6:c5:74:01:8c:93:e9:07:67:94:fc:45:73:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:18:99:0F:6F:24:D1:6B:45:E4:7A:C0:67:92:B8:91:79:C4:40:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67EF5708DA3211EF91D6068A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.99.0/24
Signature Algorithm: sha256WithRSAEncryption
48:b4:b7:c0:0e:d9:88:d1:ee:f6:27:83:d7:0c:7b:57:b7:15:
b5:22:25:bd:ec:70:e0:a2:06:02:98:37:68:51:5b:bb:d3:d5:
70:85:f5:1e:cc:61:37:9e:06:c6:89:3e:8e:d6:9d:c5:0c:c9:
c6:84:af:cc:db:e0:29:d1:34:90:1b:60:0e:4a:75:5d:cf:cb:
c2:73:e1:2d:ca:f2:6d:d8:d1:c7:d2:c1:c7:6b:7b:aa:d3:4f:
30:72:7d:ef:33:98:f3:31:b0:43:05:b6:bf:c4:09:27:6a:d8:
bb:91:15:ae:00:aa:6f:fb:2f:f1:66:4a:c1:a8:e4:d3:21:c1:
ea:bf:fa:ba:2d:fd:ea:24:ba:dc:c9:0b:4b:ae:7d:a3:93:56:
d4:22:e1:6d:ac:4a:76:7d:64:8c:1b:a5:10:52:1d:13:41:80:
83:75:9f:81:df:71:d5:00:92:80:25:cc:bb:b7:7a:ad:b4:13:
2f:d9:ed:a8:bb:fa:4c:80:8e:56:dd:80:a0:9f:6b:ab:04:df:
98:61:a7:72:b9:61:98:1a:61:66:cb:fb:88:2d:95:f0:f8:e2:
3d:eb:7f:f3:14:ea:4c:d0:e4:0a:23:77:b0:48:16:74:d1:44:
30:60:b1:20:2e:39:1a:d1:a7:63:80:b9:e4:5f:6f:8f:cf:ce:
47:71:ed:e6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUS1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MDkwNTQ2WhcNMjUwMjI4MDkwNTQ2WjAYMRYw
FAYDVQQDEw02NzkzNTdlZS03ZjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3okELmjcGAwAhHFW0l8qaoDPYGXnwpwcY9Gxo9O/BA5+sEK3apMA/mka
ZmTF1wtcdrzIQoDULv+qiA+2E7ABsbvXP3r6yqeHjujRVqKwA0n08JQo41qj0e3c
ZuiJUqS8BJU4qflj7riI6YDjFWqXPiEbmkHKvUhwVtjx+DMzT0TAXZgsslKDyodx
k2rWDzn6bd5Z1L9S9Xu3VAQVE+9oGX4czMHvKVTZaLh4ZawLJx7MSrALeCEDK7wW
UgAODp1HzPoxSb7fuNBRCy/LdIT+bbGXkNX9OXt8zvyCOu14xneYe58tPsLLe4cX
749Vru8civbFdAGMk+kHZ5T8RXNrsQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNoY
mQ9vJNFrReR6wGeSuJF5xEBnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82N0VGNTcwOERBMzIxMUVGOTFENjA2OEE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJjMA0GCSqGSIb3DQEB
CwUAA4IBAQBItLfADtmI0e72J4PXDHtXtxW1IiW97HDgogYCmDdoUVu709VwhfUe
zGE3ngbGiT6O1p3FDMnGhK/M2+Ap0TSQG2AOSnVdz8vCc+EtyvJt2NHH0sHHa3uq
008wcn3vM5jzMbBDBba/xAknati7kRWuAKpv+y/xZkrBqOTTIcHqv/q6Lf3qJLrc
yQtLrn2jk1bUIuFtrEp2fWSMG6UQUh0TQYCDdZ+B33HVAJKAJcy7t3qttBMv2e2o
u/pMgI5W3YCgn2urBN+YYadyuWGYGmFmy/uILZXw+OI963/zFOpM0OQKI3ewSBZ0
0UQwYLEgLjka0adjgLnkX2+Pz85Hce3m
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:21 2025 by rpki-client