Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CCA3332D56911EFB54EE66A762E951A.roa
File: 7CCA3332D56911EFB54EE66A762E951A.roa (raw, json)
Hash identifier: p5IP/ger7mbfXa9PSVeG4zP8ScilglGK3yfYQeX386w=
Subject key identifier: 39:CF:77:43:B0:A2:0D:44:44:01:58:44:8D:5A:B4:3C:0D:0B:D9:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CCA3332D56911EFB54EE66A762E951A.roa
Signing time: Sat 18 Jan 2025 06:57:31 +0000
ROA not before: Sat 18 Jan 2025 06:57:28 +0000
ROA not after: Sat 22 Feb 2025 06:57:28 +0000
asID: 54600
IP address blocks: 154.202.118.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81288 (0x13d88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 06:57:28 2025 GMT
Not After : Feb 22 06:57:28 2025 GMT
Subject: CN=678b50db-08b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:8b:bd:91:7c:f9:29:ae:36:ee:a3:bf:27:
ff:58:ed:d1:84:e0:62:9e:26:5a:bd:12:ee:4b:d6:
51:57:5e:25:a5:28:28:eb:be:b4:a0:a4:74:b2:6d:
79:41:79:9a:5e:34:97:4d:44:37:1c:a9:26:47:bd:
57:92:bd:88:87:45:72:4f:e2:0f:00:ce:70:4c:c6:
72:b5:7d:3e:54:58:83:59:9c:51:e2:09:d6:02:8b:
81:bc:08:57:9e:fb:d6:fc:db:31:8a:9f:ff:3d:7a:
3a:3e:b0:2f:63:ae:df:17:6a:30:8f:ce:a7:60:1b:
45:ab:4c:d7:9b:a5:a7:3b:0b:93:ee:2f:2f:aa:f8:
44:2a:12:2b:2d:ed:9f:3b:bc:8a:09:05:cf:70:b4:
00:dd:d4:03:ed:cb:f2:c9:38:02:2b:0d:b7:c3:4a:
5d:f3:e4:6f:e5:34:bf:4c:02:84:90:2e:78:aa:79:
89:d3:f2:a1:68:9d:09:82:44:8c:7b:bf:a3:ed:63:
5e:74:df:e0:48:50:b8:11:7a:89:64:0b:ad:a1:b9:
c4:7a:e0:a1:4e:6f:42:6c:4b:57:90:29:9d:69:68:
b8:38:2d:35:f5:38:af:7b:de:f5:7d:d5:13:2b:40:
75:51:98:59:28:43:bf:8d:5a:ac:ea:19:88:52:6b:
de:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CF:77:43:B0:A2:0D:44:44:01:58:44:8D:5A:B4:3C:0D:0B:D9:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CCA3332D56911EFB54EE66A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.118.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:70:59:ef:b6:08:a5:3c:ba:9a:a4:8d:57:7e:8e:f4:e8:22:
c1:d2:af:ac:f1:5d:1c:5e:62:51:9b:49:8f:6c:ee:ae:50:16:
dd:07:0d:5e:f3:15:8f:75:2b:3f:fa:4a:64:d0:00:e4:eb:0a:
90:66:9d:ca:59:ce:c8:61:d3:ef:71:86:64:ed:7b:21:72:4a:
4c:12:f9:b1:6e:d0:b3:8c:c0:c3:d2:bb:28:36:6a:fc:97:5a:
47:d3:5c:07:18:2a:ae:e7:e8:49:a6:5e:4c:2c:50:a1:14:3b:
78:dd:74:c8:1a:cb:5a:72:5c:03:3b:6f:77:ed:36:2c:39:b4:
ca:03:a8:83:b9:92:36:98:2a:7f:58:7a:f6:be:e5:cf:9f:0a:
67:1e:56:43:45:dc:a1:dd:d0:4a:e7:0e:86:92:b7:de:a9:56:
5f:be:6a:62:58:fd:25:d4:a2:5c:a5:e4:d6:3b:ac:e4:c8:ea:
d9:b4:4d:dd:1b:cd:b3:9f:2f:42:af:35:64:eb:1c:50:44:0d:
29:f6:2c:13:03:8b:f1:d1:e6:1c:83:3b:e5:c7:63:cc:06:a2:
67:81:d8:2e:c2:0b:9b:72:a1:1f:ab:c8:c8:9f:9b:44:75:cb:
6d:78:56:3b:c4:47:01:3a:33:51:2d:00:14:0a:74:7a:4b:73:
44:c4:28:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT2IMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE4MDY1NzI4WhcNMjUwMjIyMDY1NzI4WjAYMRYw
FAYDVQQDEw02NzhiNTBkYi0wOGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz+GLvZF8+SmuNu6jvyf/WO3RhOBiniZavRLuS9ZRV14lpSgo6760oKR0
sm15QXmaXjSXTUQ3HKkmR71Xkr2Ih0VyT+IPAM5wTMZytX0+VFiDWZxR4gnWAouB
vAhXnvvW/Nsxip//PXo6PrAvY67fF2owj86nYBtFq0zXm6WnOwuT7i8vqvhEKhIr
Le2fO7yKCQXPcLQA3dQD7cvyyTgCKw23w0pd8+Rv5TS/TAKEkC54qnmJ0/KhaJ0J
gkSMe7+j7WNedN/gSFC4EXqJZAutobnEeuChTm9CbEtXkCmdaWi4OC019Tive971
fdUTK0B1UZhZKEO/jVqs6hmIUmve5wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDnP
d0Owog1ERAFYRI1atDwNC9neMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83Q0NBMzMzMkQ1NjkxMUVGQjU0RUU2NkE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsp2MA0GCSqGSIb3DQEB
CwUAA4IBAQCgcFnvtgilPLqapI1Xfo706CLB0q+s8V0cXmJRm0mPbO6uUBbdBw1e
8xWPdSs/+kpk0ADk6wqQZp3KWc7IYdPvcYZk7XshckpMEvmxbtCzjMDD0rsoNmr8
l1pH01wHGCqu5+hJpl5MLFChFDt43XTIGstaclwDO2937TYsObTKA6iDuZI2mCp/
WHr2vuXPnwpnHlZDRdyh3dBK5w6GkrfeqVZfvmpiWP0l1KJcpeTWO6zkyOrZtE3d
G82zny9CrzVk6xxQRA0p9iwTA4vx0eYcgzvlx2PMBqJngdguwgubcqEfq8jIn5tE
dctteFY7xEcBOjNRLQAUCnR6S3NExCj4
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:27:27 2025 by rpki-client