Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7984E35ADA0711EF94A7FB6E762E951A.roa
File: 7984E35ADA0711EF94A7FB6E762E951A.roa (raw, json)
Hash identifier: l37hxlMdl9gqACvPKW15VhU3fIVH1PjhcPre++/DIy8=
Subject key identifier: F6:37:0D:B0:0E:D8:2C:84:BD:AE:59:88:F5:80:68:46:18:02:45:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7984E35ADA0711EF94A7FB6E762E951A.roa
Signing time: Fri 24 Jan 2025 03:58:31 +0000
ROA not before: Fri 24 Jan 2025 03:58:27 +0000
ROA not after: Sat 01 Mar 2025 03:58:27 +0000
asID: 44559
IP address blocks: 154.81.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82862 (0x143ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 03:58:27 2025 GMT
Not After : Mar 1 03:58:27 2025 GMT
Subject: CN=67930fe7-c900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c4:3b:73:9e:49:55:db:a4:85:6f:0c:2e:dc:
3a:59:5b:e8:8b:2e:76:77:a3:94:7c:51:10:c3:a8:
0e:5f:0b:87:53:98:fc:c6:ee:55:4d:d7:f3:ca:da:
12:99:40:5f:61:e2:9c:bb:b7:ae:d2:7f:36:f6:51:
db:c9:fa:04:52:65:1e:93:fa:d0:c9:e6:7c:a9:91:
67:3f:8f:10:dd:ab:16:32:21:02:df:36:fc:85:08:
87:f4:bb:a6:c3:98:a9:1b:e4:73:71:03:10:b9:71:
94:3d:d1:64:e2:67:56:38:0b:d2:93:19:8c:78:3b:
22:a8:c4:66:ec:bf:af:77:78:4e:2a:80:62:8d:32:
17:fa:01:42:ab:d5:56:dc:4b:b1:e8:fd:38:ca:23:
94:98:90:0e:bb:ed:27:26:15:46:6b:ee:14:2c:6c:
15:f5:20:7e:27:17:3b:65:ee:22:a6:e8:33:c6:1b:
76:34:37:91:7e:a8:29:2a:de:8d:b4:1c:1e:17:f7:
88:9d:17:89:22:68:3a:21:90:24:d4:7a:fc:9f:a0:
4d:93:5d:82:e8:6a:06:ac:21:7c:5e:68:25:51:e8:
71:b9:ca:22:2a:a2:33:bb:03:ff:a2:7e:35:46:e9:
2d:e7:90:00:98:81:d0:9a:c9:83:76:d7:3d:43:05:
b4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:37:0D:B0:0E:D8:2C:84:BD:AE:59:88:F5:80:68:46:18:02:45:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7984E35ADA0711EF94A7FB6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.194.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:2a:b6:bf:f0:f6:a0:ba:ec:69:5b:5e:f7:a6:38:e1:80:f0:
f6:2b:c8:42:5c:d4:d0:1b:f5:59:7d:37:49:60:1c:f6:12:0e:
bb:b2:4a:ac:14:cf:1f:cd:0e:5c:7b:1a:cb:51:37:f5:33:7f:
49:78:3b:19:bd:59:b5:c9:ea:75:06:79:d8:0e:c4:f9:a6:c2:
8d:cb:ea:4f:cc:ad:7a:08:99:93:8b:6f:a1:5d:f1:09:8a:f3:
34:f1:44:db:75:af:cf:56:71:3b:2e:98:cd:0c:f2:f0:a1:ea:
de:a5:84:e3:2b:cc:8c:eb:8d:2b:0a:0a:83:6a:7e:76:52:e3:
f4:66:45:73:7e:a4:5c:dc:cf:76:d9:2e:3f:9c:f0:a2:a8:b6:
63:24:41:0d:6a:08:e0:aa:de:cb:37:23:cd:15:d7:a9:8d:e7:
cc:f3:5a:b1:36:09:52:0c:a3:e6:08:2e:fb:9f:b2:de:7c:01:
6f:a1:74:63:cc:77:d7:fb:9e:a9:b9:d5:ac:a0:a8:95:74:05:
f5:e3:29:cb:9f:11:1c:1f:bf:39:6a:34:bd:9b:0d:0d:e3:d2:
ad:be:dc:39:d8:01:fa:95:d0:6b:af:10:7f:76:73:46:63:3e:
33:7e:fb:2f:26:4e:24:a6:c0:9b:62:d6:7c:3b:af:09:56:a9:
43:6b:13:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUOuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MDM1ODI3WhcNMjUwMzAxMDM1ODI3WjAYMRYw
FAYDVQQDEw02NzkzMGZlNy1jOTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3sQ7c55JVdukhW8MLtw6WVvoiy52d6OUfFEQw6gOXwuHU5j8xu5VTdfz
ytoSmUBfYeKcu7eu0n829lHbyfoEUmUek/rQyeZ8qZFnP48Q3asWMiEC3zb8hQiH
9Lumw5ipG+RzcQMQuXGUPdFk4mdWOAvSkxmMeDsiqMRm7L+vd3hOKoBijTIX+gFC
q9VW3Eux6P04yiOUmJAOu+0nJhVGa+4ULGwV9SB+Jxc7Ze4ipugzxht2NDeRfqgp
Kt6NtBweF/eInReJImg6IZAk1Hr8n6BNk12C6GoGrCF8XmglUehxucoiKqIzuwP/
on41Rukt55AAmIHQmsmDdtc9QwW0xQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPY3
DbAO2CyEva5ZiPWAaEYYAkU5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OTg0RTM1QURBMDcxMUVGOTRBN0ZCNkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlHCMA0GCSqGSIb3DQEB
CwUAA4IBAQB6Kra/8PaguuxpW173pjjhgPD2K8hCXNTQG/VZfTdJYBz2Eg67skqs
FM8fzQ5cexrLUTf1M39JeDsZvVm1yep1BnnYDsT5psKNy+pPzK16CJmTi2+hXfEJ
ivM08UTbda/PVnE7LpjNDPLwoerepYTjK8yM640rCgqDan52UuP0ZkVzfqRc3M92
2S4/nPCiqLZjJEENagjgqt7LNyPNFdepjefM81qxNglSDKPmCC77n7LefAFvoXRj
zHfX+56pudWsoKiVdAX14ynLnxEcH785ajS9mw0N49Ktvtw52AH6ldBrrxB/dnNG
Yz4zfvsvJk4kpsCbYtZ8O68JVqlDaxPp
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:06:57 2025 by rpki-client