Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69C30524D72C11EFB0EF676D762E951A.roa
File: 69C30524D72C11EFB0EF676D762E951A.roa (raw, json)
Hash identifier: LDA0o9XNK7V/btYORwIzj0fusO53vSLJRfSMN344+50=
Subject key identifier: BF:0B:62:7C:8E:E7:D5:3A:32:C9:CC:77:F2:76:E7:3E:3A:3C:43:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69C30524D72C11EFB0EF676D762E951A.roa
Signing time: Mon 20 Jan 2025 12:45:22 +0000
ROA not before: Mon 20 Jan 2025 12:45:19 +0000
ROA not after: Sat 01 Feb 2025 12:45:19 +0000
asID: 6079
IP address blocks: 154.83.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81452 (0x13e2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 20 12:45:19 2025 GMT
Not After : Feb 1 12:45:19 2025 GMT
Subject: CN=678e4562-7f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:96:16:e2:b8:61:79:82:6b:a4:8b:cf:10:
90:f7:95:f5:be:ea:f7:1b:65:fb:f1:3d:71:df:37:
c3:74:65:53:be:7c:19:ee:4b:d4:7a:af:aa:78:22:
37:ea:de:da:f0:d5:78:82:97:8a:14:4c:5a:c9:8d:
c1:7c:22:aa:16:b7:9e:b5:1f:80:7e:0a:31:38:1b:
ec:7b:bc:3b:94:2d:20:b8:45:ea:13:52:01:9e:d9:
05:6e:5b:43:05:5f:13:8f:57:8d:68:bd:a8:1e:12:
1e:3c:73:76:6c:29:3d:ad:b9:1f:7b:89:8e:3f:ba:
ff:6c:e8:58:93:0d:73:61:b4:61:07:ac:1c:c1:84:
19:7f:93:02:2c:98:19:73:81:35:a7:88:18:9b:4b:
33:cf:1f:a7:3f:a5:5a:2c:1f:a4:bc:4f:6f:0a:ce:
2b:0a:7c:e7:bd:7a:c2:85:22:36:94:5c:9c:2d:10:
46:7f:e6:4e:5e:29:53:07:61:cf:6a:be:e5:24:ef:
03:19:58:3a:b6:05:41:54:14:11:b8:13:71:3e:7d:
5b:06:cf:ff:32:02:0f:a7:7c:e3:09:a6:7e:7e:3c:
5e:12:e3:40:a5:b9:48:6d:58:32:61:4c:97:9f:90:
b0:df:96:48:28:d3:b9:b8:55:54:86:15:48:6c:ff:
43:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0B:62:7C:8E:E7:D5:3A:32:C9:CC:77:F2:76:E7:3E:3A:3C:43:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69C30524D72C11EFB0EF676D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.48.0/20
Signature Algorithm: sha256WithRSAEncryption
11:bf:7a:0b:36:d8:a8:61:85:71:d1:ad:91:00:e7:95:0c:e3:
34:79:40:23:e3:1f:52:13:b1:00:63:6c:b3:7a:e6:05:ec:c9:
f7:1b:87:f1:07:fe:ff:68:00:88:a8:13:26:ac:ba:b4:46:08:
01:12:f0:32:00:48:92:60:d7:64:4b:1f:d5:de:7e:42:3e:9f:
93:71:91:5e:87:58:19:c6:e6:8c:d8:7b:a6:bf:6c:d0:0d:0e:
c6:67:d1:74:67:ad:93:25:e6:d5:06:18:8f:7c:fc:0d:21:5d:
f5:a6:f5:d5:d7:24:ba:9f:bc:92:c9:20:46:16:dd:a0:69:f0:
9b:e8:55:ad:05:8a:6c:c9:ef:1f:c2:86:36:4e:bf:d2:e2:bd:
6c:e9:7c:58:ab:28:f2:ee:44:2f:64:62:cc:1e:04:79:da:ec:
c6:5b:29:a1:63:f9:8f:10:87:53:c5:4c:ff:66:c2:5e:f7:33:
0d:e3:70:a0:8d:fe:7c:f9:24:d4:ad:8a:f7:14:7f:ff:40:6d:
f7:31:91:57:6d:2c:8c:44:34:70:3f:84:18:46:b8:b2:f7:e8:
fa:d0:48:aa:48:a4:43:af:4c:9b:9c:74:e3:95:f1:96:b5:07:
28:e3:7a:7f:c3:5d:5f:5b:0c:2c:c0:0d:36:50:b4:aa:50:77:
73:9c:1c:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT4sMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIwMTI0NTE5WhcNMjUwMjAxMTI0NTE5WjAYMRYw
FAYDVQQDEw02NzhlNDU2Mi03Zjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuEqWFuK4YXmCa6SLzxCQ95X1vur3G2X78T1x3zfDdGVTvnwZ7kvUeq+q
eCI36t7a8NV4gpeKFExayY3BfCKqFreetR+AfgoxOBvse7w7lC0guEXqE1IBntkF
bltDBV8Tj1eNaL2oHhIePHN2bCk9rbkfe4mOP7r/bOhYkw1zYbRhB6wcwYQZf5MC
LJgZc4E1p4gYm0szzx+nP6VaLB+kvE9vCs4rCnznvXrChSI2lFycLRBGf+ZOXilT
B2HPar7lJO8DGVg6tgVBVBQRuBNxPn1bBs//MgIPp3zjCaZ+fjxeEuNApblIbVgy
YUyXn5Cw35ZIKNO5uFVUhhVIbP9DOwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL8L
YnyO59U6MsnMd/J25z46PEMXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82OUMzMDUyNEQ3MkMxMUVGQjBFRjY3NkQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmlMwMA0GCSqGSIb3DQEB
CwUAA4IBAQARv3oLNtioYYVx0a2RAOeVDOM0eUAj4x9SE7EAY2yzeuYF7Mn3G4fx
B/7/aACIqBMmrLq0RggBEvAyAEiSYNdkSx/V3n5CPp+TcZFeh1gZxuaM2Humv2zQ
DQ7GZ9F0Z62TJebVBhiPfPwNIV31pvXV1yS6n7ySySBGFt2gafCb6FWtBYpsye8f
woY2Tr/S4r1s6XxYqyjy7kQvZGLMHgR52uzGWymhY/mPEIdTxUz/ZsJe9zMN43Cg
jf58+STUrYr3FH//QG33MZFXbSyMRDRwP4QYRriy9+j60EiqSKRDr0ybnHTjlfGW
tQco43p/w11fWwwswA02ULSqUHdznBw3
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:37:39 2025 by rpki-client