Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C0454C4DD6011EF8CCF0086762E951A.roa
File: 7C0454C4DD6011EF8CCF0086762E951A.roa (raw, json)
Hash identifier: pkjWmKc8kI7ej80qDdKSqvEPt8puXXrePeEqODSgzcs=
Subject key identifier: EB:0F:57:96:E0:1A:2B:4C:F9:BD:65:13:52:48:5F:C9:CA:7E:80:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C0454C4DD6011EF8CCF0086762E951A.roa
Signing time: Tue 28 Jan 2025 10:13:14 +0000
ROA not before: Tue 28 Jan 2025 10:13:10 +0000
ROA not after: Sun 09 Feb 2025 10:13:10 +0000
asID: 39600
IP address blocks: 154.94.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85180 (0x14cbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 10:13:10 2025 GMT
Not After : Feb 9 10:13:10 2025 GMT
Subject: CN=6798adba-188b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:ec:b9:86:f3:05:0b:c3:77:e1:99:1e:36:
9a:5e:58:c3:97:cc:aa:65:b5:b4:8b:c6:79:7a:e4:
06:c5:0f:c6:ef:1f:5c:48:eb:9b:bc:0c:ec:22:9a:
5e:7c:c0:5a:ff:f9:07:11:16:47:e3:07:30:36:ac:
05:a5:2c:65:d9:91:9f:d0:54:2c:4b:7e:5b:b9:07:
b9:31:6a:1a:22:7f:3e:db:fa:d8:8f:34:35:8f:7d:
9f:c6:9e:0a:cc:d4:b3:b0:be:f2:87:19:61:83:79:
45:62:49:12:5f:4d:8f:e5:a8:66:4b:5d:fa:89:68:
df:d9:d6:76:7c:0a:1c:ee:1e:57:1a:ac:d6:6a:51:
68:5e:a5:8a:e5:3f:e9:6b:7a:52:f7:4c:ce:50:12:
b4:a0:75:c8:9d:76:fa:89:43:84:b5:f4:40:38:a1:
99:89:e1:c2:aa:de:a4:3b:f6:94:e0:96:37:30:65:
d8:f4:fb:53:d5:53:3c:a8:2a:56:3d:1b:62:b3:05:
31:a6:71:a3:d9:82:9d:66:67:ff:94:88:99:2f:d5:
57:45:98:fe:9d:04:4f:7c:db:a2:17:95:db:d4:32:
e3:e8:b1:01:80:db:01:d8:be:36:8b:cd:33:a1:9e:
60:19:3a:c6:98:15:98:2c:c6:e3:50:1c:52:68:b1:
c8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0F:57:96:E0:1A:2B:4C:F9:BD:65:13:52:48:5F:C9:CA:7E:80:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C0454C4DD6011EF8CCF0086762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.24.0/21
Signature Algorithm: sha256WithRSAEncryption
15:23:ac:92:eb:db:96:21:08:d7:9e:2b:ca:9e:32:a4:d5:98:
57:51:48:4d:f1:78:bb:ac:8b:7c:e5:a9:35:1e:5c:47:71:bf:
ab:5a:4c:68:f7:da:66:da:16:52:df:b0:0b:64:26:3f:62:df:
0a:c6:c6:a5:80:2a:01:b1:f7:5c:25:f3:c6:78:ad:48:2d:2b:
69:fb:5c:d0:02:a1:29:49:f0:e8:aa:a3:43:b0:54:90:2c:d1:
b0:4f:64:1b:34:36:c3:7c:e1:29:3e:9c:e5:df:72:7d:9c:b9:
f3:59:32:1b:23:31:a5:07:ea:4b:42:d1:82:cf:6c:4b:8a:05:
33:91:be:e1:09:3f:02:62:62:fd:17:34:be:77:dc:47:fc:c0:
9b:d6:11:ce:52:42:3f:db:09:86:15:f7:3d:39:33:44:c3:c6:
6f:29:a5:44:0f:f9:94:37:cb:6b:2e:91:8d:a5:5b:1b:10:51:
11:6d:2b:bf:45:5a:ea:24:e4:e7:ee:a2:f6:5b:96:c1:49:77:
7a:07:c6:9b:73:b7:a6:68:4b:d5:9a:85:63:7f:1a:df:48:e2:
f4:62:08:e5:65:5b:ba:63:34:ba:64:86:61:3e:3a:91:ee:80:
34:f4:13:e7:ac:26:37:aa:9e:c3:06:71:df:e3:8d:aa:99:77:
bc:70:ed:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUy8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI4MTAxMzEwWhcNMjUwMjA5MTAxMzEwWjAYMRYw
FAYDVQQDEw02Nzk4YWRiYS0xODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvJTsuYbzBQvDd+GZHjaaXljDl8yqZbW0i8Z5euQGxQ/G7x9cSOubvAzs
IppefMBa//kHERZH4wcwNqwFpSxl2ZGf0FQsS35buQe5MWoaIn8+2/rYjzQ1j32f
xp4KzNSzsL7yhxlhg3lFYkkSX02P5ahmS136iWjf2dZ2fAoc7h5XGqzWalFoXqWK
5T/pa3pS90zOUBK0oHXInXb6iUOEtfRAOKGZieHCqt6kO/aU4JY3MGXY9PtT1VM8
qCpWPRtiswUxpnGj2YKdZmf/lIiZL9VXRZj+nQRPfNuiF5Xb1DLj6LEBgNsB2L42
i80zoZ5gGTrGmBWYLMbjUBxSaLHIVwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOsP
V5bgGitM+b1lE1JIX8nKfoD2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83QzA0NTRDNERENjAxMUVGOENDRjAwODY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDml4YMA0GCSqGSIb3DQEB
CwUAA4IBAQAVI6yS69uWIQjXnivKnjKk1ZhXUUhN8Xi7rIt85ak1HlxHcb+rWkxo
99pm2hZS37ALZCY/Yt8KxsalgCoBsfdcJfPGeK1ILStp+1zQAqEpSfDoqqNDsFSQ
LNGwT2QbNDbDfOEpPpzl33J9nLnzWTIbIzGlB+pLQtGCz2xLigUzkb7hCT8CYmL9
FzS+d9xH/MCb1hHOUkI/2wmGFfc9OTNEw8ZvKaVED/mUN8trLpGNpVsbEFERbSu/
RVrqJOTn7qL2W5bBSXd6B8abc7emaEvVmoVjfxrfSOL0YgjlZVu6YzS6ZIZhPjqR
7oA09BPnrCY3qp7DBnHf442qmXe8cO14
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:04:33 2025 by rpki-client