Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74D85DEED56D11EF819E3E86762E951A.roa
File: 74D85DEED56D11EF819E3E86762E951A.roa (raw, json)
Hash identifier: zRHaRVUdshXI/aZO+xmIfl2sdLJgtCTMfVoroQT8Ql8=
Subject key identifier: 68:A1:7A:C4:AC:CC:4A:A5:87:E4:92:30:58:3B:4B:D7:75:1D:58:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D98
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74D85DEED56D11EF819E3E86762E951A.roa
Signing time: Sat 18 Jan 2025 07:25:56 +0000
ROA not before: Sat 18 Jan 2025 07:25:53 +0000
ROA not after: Sat 22 Feb 2025 07:25:53 +0000
asID: 18013
IP address blocks: 154.202.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81304 (0x13d98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 07:25:53 2025 GMT
Not After : Feb 22 07:25:53 2025 GMT
Subject: CN=678b5784-4893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f2:5c:e3:64:b8:e8:1e:28:98:08:a6:e9:5e:
10:fa:d8:ee:91:c6:b8:74:81:5a:83:2b:83:38:36:
ec:2b:6f:1f:f8:bf:5c:fb:53:59:13:09:62:9f:51:
69:70:89:4e:cb:7f:b4:1f:f6:59:ca:e4:32:6b:ae:
77:88:07:1d:69:7c:b8:18:17:7f:0e:a5:b8:13:52:
4d:d5:19:49:b8:19:a3:ef:89:a9:ca:f9:27:10:88:
cb:76:18:ba:06:08:85:08:7d:9e:ac:f9:e8:6c:a8:
3c:a1:10:23:ec:8f:7e:ad:54:33:64:e4:d5:3c:9a:
ed:c3:d8:56:10:94:22:51:f0:18:8f:ed:37:53:97:
20:a0:f2:64:e4:d0:39:ab:87:fe:24:ee:34:46:a5:
06:3b:5d:82:f3:77:fb:86:4b:b9:1f:7b:db:97:98:
91:89:be:e8:eb:53:74:e5:01:64:17:4d:f2:db:8f:
d9:ba:09:28:40:eb:5b:2b:e1:f2:93:5c:5c:c3:1a:
8a:51:72:fa:6d:1c:b1:1e:95:3c:19:1d:6a:eb:b2:
72:bf:8c:ce:ef:8f:cf:7d:78:c5:1e:0c:58:db:c8:
e8:ed:8e:f4:b0:58:2f:dd:23:0f:a9:e5:28:47:a8:
b3:f6:d4:15:28:ca:a8:c3:60:34:f6:5f:6a:86:8a:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A1:7A:C4:AC:CC:4A:A5:87:E4:92:30:58:3B:4B:D7:75:1D:58:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74D85DEED56D11EF819E3E86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.120.0/21
Signature Algorithm: sha256WithRSAEncryption
95:78:ca:53:e4:91:58:cc:a3:c2:a4:a0:ee:86:a4:d2:6f:7e:
f9:2b:0e:bf:43:ed:48:e1:17:c2:a2:b8:8f:ae:b0:77:a4:a4:
9d:93:70:db:65:5d:43:08:86:10:bf:a0:34:90:ab:5e:85:c6:
6a:6a:ab:ba:21:e8:6c:b9:c5:b0:44:1e:1e:21:d9:a6:26:95:
17:bd:30:5d:3f:dc:e4:29:69:aa:04:e3:9b:94:a5:f0:b2:59:
8b:74:16:92:7f:c1:d6:37:dc:70:e6:d5:c9:22:2d:dc:3b:57:
fb:2b:cc:dd:a4:50:8e:e3:2d:81:c5:31:a1:e1:a0:2d:d3:be:
37:cb:8f:c5:95:61:6b:67:6d:58:de:62:63:02:62:11:7a:f7:
99:69:70:05:3d:06:c1:f0:ff:ab:b7:69:bc:d9:ca:01:57:dc:
0a:9e:67:30:b7:1a:83:a3:c5:f3:c5:83:16:ec:f8:6c:cc:de:
09:4e:72:25:4c:d7:e0:89:2a:51:99:e8:8a:f1:0e:40:57:e5:
e1:03:b3:f7:0a:0b:58:f6:62:6b:b7:aa:9e:b4:e9:12:98:53:
a6:ae:cf:bc:29:6f:2f:b0:f9:88:67:60:d2:77:a4:f9:16:6f:
92:80:0e:74:30:4b:44:e3:7d:d7:a8:c0:69:aa:be:34:ea:70:
d4:9b:79:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT2YMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE4MDcyNTUzWhcNMjUwMjIyMDcyNTUzWjAYMRYw
FAYDVQQDEw02NzhiNTc4NC00ODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3vJc42S46B4omAim6V4Q+tjukca4dIFagyuDODbsK28f+L9c+1NZEwli
n1FpcIlOy3+0H/ZZyuQya653iAcdaXy4GBd/DqW4E1JN1RlJuBmj74mpyvknEIjL
dhi6BgiFCH2erPnobKg8oRAj7I9+rVQzZOTVPJrtw9hWEJQiUfAYj+03U5cgoPJk
5NA5q4f+JO40RqUGO12C83f7hku5H3vbl5iRib7o61N05QFkF03y24/ZugkoQOtb
K+Hyk1xcwxqKUXL6bRyxHpU8GR1q67Jyv4zO74/PfXjFHgxY28jo7Y70sFgv3SMP
qeUoR6iz9tQVKMqow2A09l9qhop9rwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGih
esSszEqlh+SSMFg7S9d1HViWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NEQ4NURFRUQ1NkQxMUVGODE5RTNFODY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmsp4MA0GCSqGSIb3DQEB
CwUAA4IBAQCVeMpT5JFYzKPCpKDuhqTSb375Kw6/Q+1I4RfCoriPrrB3pKSdk3Db
ZV1DCIYQv6A0kKtehcZqaqu6IehsucWwRB4eIdmmJpUXvTBdP9zkKWmqBOOblKXw
slmLdBaSf8HWN9xw5tXJIi3cO1f7K8zdpFCO4y2BxTGh4aAt0743y4/FlWFrZ21Y
3mJjAmIReveZaXAFPQbB8P+rt2m82coBV9wKnmcwtxqDo8XzxYMW7PhszN4JTnIl
TNfgiSpRmeiK8Q5AV+XhA7P3CgtY9mJrt6qetOkSmFOmrs+8KW8vsPmIZ2DSd6T5
Fm+SgA50MEtE433XqMBpqr406nDUm3mz
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:33:06 2025 by rpki-client