Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75AE8626D98211EFB8D80168762E951A.roa
File: 75AE8626D98211EFB8D80168762E951A.roa (raw, json)
Hash identifier: szYg18WfAj0ztN0UdaBIRzyFLESHhLSFaPoF6P08sZg=
Subject key identifier: A8:38:3A:52:27:8C:52:55:93:CD:3B:0E:56:FA:E2:9B:57:E5:23:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75AE8626D98211EFB8D80168762E951A.roa
Signing time: Thu 23 Jan 2025 12:06:21 +0000
ROA not before: Thu 23 Jan 2025 12:06:18 +0000
ROA not after: Fri 28 Feb 2025 12:06:18 +0000
asID: 62240
IP address blocks: 154.195.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82413 (0x141ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:06:18 2025 GMT
Not After : Feb 28 12:06:18 2025 GMT
Subject: CN=679230bd-5121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:87:3e:3b:d7:4c:a8:30:e4:7d:88:42:b5:
6e:a7:0b:34:f2:c1:ad:04:47:87:b6:8d:f8:67:68:
99:fc:f2:b3:53:e8:74:0e:47:bc:05:d2:3b:03:93:
8a:6b:1b:13:ae:84:e1:5a:e2:2d:c5:b0:e3:b4:b9:
f0:97:35:bd:e6:19:90:14:1a:ea:dd:63:5b:71:4b:
2c:6f:67:fc:08:b7:f3:68:f4:48:bb:d8:4f:23:ec:
35:57:f6:7f:c6:2d:66:c7:13:2f:3a:c7:d6:1d:46:
f4:51:f5:b1:12:a8:20:ef:6b:5a:df:aa:5d:81:16:
f6:ff:ed:5e:3a:5f:1b:9f:42:24:ad:17:0c:99:68:
4d:5b:19:89:d4:79:70:4a:42:30:5e:e9:b9:1e:ce:
5b:27:1a:66:3a:34:f3:93:6b:b4:28:35:06:48:9c:
96:9f:d6:e6:af:34:13:3f:09:b8:45:5e:cf:10:92:
52:1b:af:e9:da:5a:91:d1:00:d2:27:01:e1:c3:84:
fb:4b:e8:0b:25:a4:05:21:a3:48:81:1f:77:30:91:
ce:17:77:4c:b7:97:b7:57:74:9d:2d:d0:de:b1:3a:
b5:52:20:78:85:e5:52:31:e7:77:7e:ff:9c:f8:d4:
e6:79:11:42:c2:cd:3e:c2:03:9e:c9:db:3c:01:ed:
2f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:38:3A:52:27:8C:52:55:93:CD:3B:0E:56:FA:E2:9B:57:E5:23:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75AE8626D98211EFB8D80168762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.181.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:40:0b:b2:a2:d3:3a:76:5b:69:f3:a8:0a:30:c9:35:21:88:
0d:ee:6e:6a:fd:59:a9:ee:4e:19:e1:00:de:41:a0:02:fb:e9:
57:45:02:7b:ce:27:93:9f:27:78:29:ee:df:b5:4b:db:59:7f:
1e:6e:d2:62:8b:78:bc:98:bc:a0:36:9d:d5:1b:8c:0e:2c:73:
06:b1:16:a7:cf:63:ca:09:81:e5:08:33:c0:f8:56:23:46:6c:
29:fb:45:0b:bd:6d:70:6e:42:33:7c:ec:50:04:72:4b:75:0c:
00:2f:58:78:1e:4f:b3:e3:8c:e1:94:e6:f4:85:e8:83:3f:82:
2b:d4:95:73:fe:0e:1b:0b:45:4e:fc:f3:74:65:c9:48:06:6c:
d0:75:25:4d:b9:27:44:be:4e:5f:38:a7:8f:a3:33:c5:8f:b7:
a2:1a:e1:81:f2:22:36:e7:ee:3d:60:d3:ba:7f:ad:97:2e:e5:
bc:bc:8a:28:36:a2:b6:03:f5:e8:cf:0d:b0:3c:55:39:d3:05:
30:79:a6:15:bb:b3:5f:6a:4a:64:c3:c1:87:4c:42:7a:01:93:
76:f3:d3:74:6c:a1:ca:36:9d:b4:c4:66:f8:6a:43:66:a3:69:
45:8d:02:58:eb:bf:7c:ac:f5:51:ab:23:aa:d6:bd:b7:a0:e9:
67:12:d2:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUHtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTIwNjE4WhcNMjUwMjI4MTIwNjE4WjAYMRYw
FAYDVQQDEw02NzkyMzBiZC01MTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwhmHPjvXTKgw5H2IQrVupws08sGtBEeHto34Z2iZ/PKzU+h0Dke8BdI7
A5OKaxsTroThWuItxbDjtLnwlzW95hmQFBrq3WNbcUssb2f8CLfzaPRIu9hPI+w1
V/Z/xi1mxxMvOsfWHUb0UfWxEqgg72ta36pdgRb2/+1eOl8bn0IkrRcMmWhNWxmJ
1HlwSkIwXum5Hs5bJxpmOjTzk2u0KDUGSJyWn9bmrzQTPwm4RV7PEJJSG6/p2lqR
0QDSJwHhw4T7S+gLJaQFIaNIgR93MJHOF3dMt5e3V3SdLdDesTq1UiB4heVSMed3
fv+c+NTmeRFCws0+wgOeyds8Ae0vvQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKg4
OlInjFJVk807Dlb64ptX5SM+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NUFFODYyNkQ5ODIxMUVGQjhEODAxNjg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsO1MA0GCSqGSIb3DQEB
CwUAA4IBAQCaQAuyotM6dltp86gKMMk1IYgN7m5q/Vmp7k4Z4QDeQaAC++lXRQJ7
zieTnyd4Ke7ftUvbWX8ebtJii3i8mLygNp3VG4wOLHMGsRanz2PKCYHlCDPA+FYj
Rmwp+0ULvW1wbkIzfOxQBHJLdQwAL1h4Hk+z44zhlOb0heiDP4Ir1JVz/g4bC0VO
/PN0ZclIBmzQdSVNuSdEvk5fOKePozPFj7eiGuGB8iI25+49YNO6f62XLuW8vIoo
NqK2A/Xozw2wPFU50wUweaYVu7Nfakpkw8GHTEJ6AZN289N0bKHKNp20xGb4akNm
o2lFjQJY6798rPVRqyOq1r23oOlnEtJ6
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:11 2025 by rpki-client