Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CCA85A4DFF011EFBBE49549762E951A.roa
File: 6CCA85A4DFF011EFBBE49549762E951A.roa (raw, json)
Hash identifier: V/wVOGBV74ritce4P33GaB9i/WIr8vPmwCRCLX6eJC8=
Subject key identifier: 16:DA:38:6B:F2:E9:7A:4B:29:F1:82:24:70:81:F4:DE:E8:63:D2:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CCA85A4DFF011EFBBE49549762E951A.roa
Signing time: Fri 31 Jan 2025 16:28:38 +0000
ROA not before: Fri 31 Jan 2025 16:28:35 +0000
ROA not after: Sat 08 Feb 2025 16:28:35 +0000
asID: 135600
IP address blocks: 154.196.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85537 (0x14e21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 16:28:35 2025 GMT
Not After : Feb 8 16:28:35 2025 GMT
Subject: CN=679cfa36-1c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:24:42:87:c2:a3:08:17:ab:6a:ed:a4:b5:
e9:3d:26:a7:e2:66:17:03:4d:ca:f3:65:c9:c4:aa:
83:e0:2e:b5:45:ee:7e:14:5e:e9:0c:04:0b:72:02:
10:2e:0c:b1:b2:11:a1:26:70:72:4d:bf:28:d9:1c:
3c:11:41:7c:de:65:db:4a:cb:84:1b:7a:9a:7c:6a:
8c:8b:26:50:93:ce:cb:15:31:ce:05:22:99:12:10:
e4:5d:ce:57:6e:74:d9:01:66:9a:3e:ee:ab:1e:55:
37:eb:a8:f8:9f:93:a0:65:a5:7c:2d:1b:1e:30:04:
d5:4b:b7:12:56:a6:ce:ac:e7:56:3a:f8:a7:02:63:
42:24:d6:86:6d:61:e6:2b:30:86:e2:98:46:31:f1:
bc:b0:07:0d:c5:b8:cb:a0:c1:3d:07:3d:eb:8c:39:
1a:e5:86:24:7b:33:26:e6:fc:6c:cb:a7:f9:0a:5f:
5c:cf:09:a1:36:b2:cd:0c:e9:64:3c:9e:f6:cd:60:
26:8d:31:58:88:8e:c8:e0:a9:da:d0:5a:4a:7f:6b:
c1:78:ec:46:f3:d1:05:64:4b:76:d4:2f:ed:5c:69:
35:9f:6b:ca:b3:19:fe:21:17:33:0d:c9:fc:9f:42:
a7:b3:3b:ef:7c:ac:db:56:6e:aa:8b:9a:70:6c:e6:
62:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DA:38:6B:F2:E9:7A:4B:29:F1:82:24:70:81:F4:DE:E8:63:D2:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CCA85A4DFF011EFBBE49549762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.240.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:92:b7:cf:a1:f5:03:c3:0f:9f:b4:df:c8:56:1a:d2:cf:4c:
d4:aa:76:69:08:9d:6f:b2:e0:9e:9f:05:6f:bb:4e:4d:7c:db:
4b:84:58:f9:64:2e:b2:ce:f5:50:28:3b:9b:ad:45:1d:3f:4c:
c6:b9:c6:e6:33:71:67:2c:da:48:23:5b:d4:9f:19:7c:25:32:
0c:73:9a:19:ff:ce:90:2e:44:2f:cf:11:6b:29:ab:7e:21:de:
8f:ef:ea:52:da:26:53:14:6d:c0:3a:e1:08:16:10:5e:95:75:
64:32:b8:69:60:e7:61:de:09:29:50:94:c1:76:23:38:77:76:
95:68:c4:ed:c1:1d:0a:d7:7f:c4:48:40:40:70:71:32:63:11:
b6:9c:3a:c3:63:66:27:5a:37:ce:b9:fb:b8:d5:10:f3:d2:e9:
b2:12:0e:3c:14:e5:18:40:e8:9b:67:b2:ea:f1:17:09:02:13:
13:dd:d6:39:3a:ca:65:8f:98:07:8b:ef:9e:d6:2d:c7:89:55:
f5:0b:0f:c5:6b:6d:1c:8d:f5:07:39:0f:96:71:c8:72:55:3c:
44:1c:1e:fe:4d:b5:c2:51:bf:2e:a8:03:c6:67:d8:40:88:eb:
96:dc:a5:67:f0:be:1c:8d:73:63:10:1a:73:80:38:ea:c8:e0:
99:e9:2f:75
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU4hMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTMxMTYyODM1WhcNMjUwMjA4MTYyODM1WjAYMRYw
FAYDVQQDEw02NzljZmEzNi0xYzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxxckQofCowgXq2rtpLXpPSan4mYXA03K82XJxKqD4C61Re5+FF7pDAQL
cgIQLgyxshGhJnByTb8o2Rw8EUF83mXbSsuEG3qafGqMiyZQk87LFTHOBSKZEhDk
Xc5XbnTZAWaaPu6rHlU366j4n5OgZaV8LRseMATVS7cSVqbOrOdWOvinAmNCJNaG
bWHmKzCG4phGMfG8sAcNxbjLoME9Bz3rjDka5YYkezMm5vxsy6f5Cl9czwmhNrLN
DOlkPJ72zWAmjTFYiI7I4Kna0FpKf2vBeOxG89EFZEt21C/tXGk1n2vKsxn+IRcz
Dcn8n0KnszvvfKzbVm6qi5pwbOZi1QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBba
OGvy6XpLKfGCJHCB9N7oY9LPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82Q0NBODVBNERGRjAxMUVGQkJFNDk1NDk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsTwMA0GCSqGSIb3DQEB
CwUAA4IBAQAMkrfPofUDww+ftN/IVhrSz0zUqnZpCJ1vsuCenwVvu05NfNtLhFj5
ZC6yzvVQKDubrUUdP0zGucbmM3FnLNpII1vUnxl8JTIMc5oZ/86QLkQvzxFrKat+
Id6P7+pS2iZTFG3AOuEIFhBelXVkMrhpYOdh3gkpUJTBdiM4d3aVaMTtwR0K13/E
SEBAcHEyYxG2nDrDY2YnWjfOufu41RDz0umyEg48FOUYQOibZ7Lq8RcJAhMT3dY5
Osplj5gHi++e1i3HiVX1Cw/Fa20cjfUHOQ+WcchyVTxEHB7+TbXCUb8uqAPGZ9hA
iOuW3KVn8L4cjXNjEBpzgDjqyOCZ6S91
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:44:00 2025 by rpki-client