Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E932C04D98911EF837BF996762E951A.roa
File: 7E932C04D98911EF837BF996762E951A.roa (raw, json)
Hash identifier: Q+SNGj68tXtPDoJR6l6JBYiUquqOl7BTVXV6GGnUEpk=
Subject key identifier: A9:A5:6B:CB:D1:34:E6:12:C2:11:B7:79:F3:AA:39:3F:40:B9:85:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01424D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E932C04D98911EF837BF996762E951A.roa
Signing time: Thu 23 Jan 2025 12:56:43 +0000
ROA not before: Thu 23 Jan 2025 12:56:39 +0000
ROA not after: Fri 28 Feb 2025 12:56:39 +0000
asID: 62240
IP address blocks: 154.195.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82509 (0x1424d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:56:39 2025 GMT
Not After : Feb 28 12:56:39 2025 GMT
Subject: CN=67923c8b-0e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:a5:5e:c0:df:e2:28:47:b9:72:0c:47:b3:
21:1c:c6:7b:9f:97:99:ae:7b:f5:63:f7:56:34:e2:
2a:46:0e:87:07:8e:1b:dd:bf:a6:64:12:cf:b9:c3:
80:ef:02:6c:53:c0:cf:8c:7b:39:13:24:dc:72:a1:
1c:95:1f:07:c5:93:4b:7a:d3:3d:1e:f9:fe:bb:7e:
04:a0:b8:89:d0:93:70:18:18:ba:9d:f7:29:42:7c:
50:d2:f1:e6:cd:38:1e:91:9a:67:69:66:c9:b5:a1:
61:c4:3c:81:01:4f:47:54:cc:38:af:46:ec:ec:fe:
a0:8a:9c:0d:39:32:15:f6:3f:0e:61:78:4b:bb:00:
9c:1b:10:cd:d3:0e:c9:25:d7:65:dc:eb:fe:2b:9c:
d2:17:7c:00:d7:24:59:ed:91:62:b1:c4:3c:49:ed:
a1:58:fd:fd:35:18:5d:cb:82:2b:6a:4b:3e:c5:d7:
12:1b:9b:71:8a:c9:41:74:c6:46:6f:5b:1b:d1:ce:
aa:8f:d4:ef:a3:49:8a:58:40:3e:19:cd:50:fb:83:
4d:ba:6d:c6:0f:8f:88:95:ba:58:d0:f0:24:e2:cf:
69:86:ca:29:50:d3:5f:48:58:9f:fb:f9:4e:74:8c:
49:d2:11:7c:6f:54:f0:83:ef:56:ed:a6:3c:ac:74:
4a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A5:6B:CB:D1:34:E6:12:C2:11:B7:79:F3:AA:39:3F:40:B9:85:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E932C04D98911EF837BF996762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.97.0/24
Signature Algorithm: sha256WithRSAEncryption
75:9e:c8:31:b8:28:5d:bc:3b:58:f9:f3:5e:bd:ce:d7:49:d9:
c4:0c:aa:03:80:64:f8:8e:81:68:cf:fc:6f:29:d6:8f:e7:94:
60:9e:87:68:8d:dc:ec:f0:da:fb:c0:3d:1f:e6:8a:15:10:79:
d6:f8:5c:dc:66:a2:2e:43:26:ed:40:7d:29:47:26:ac:5a:b1:
2d:4e:8d:6a:c3:eb:f8:87:11:21:bf:5f:f7:2a:5d:16:9b:27:
9a:f1:3a:c8:df:f5:26:3c:f3:ad:d0:93:da:0f:a7:ed:99:07:
aa:eb:78:a0:b9:16:7d:76:64:07:77:85:9e:dd:bf:3d:91:84:
09:38:9d:e4:5c:61:0b:43:35:a8:5f:18:1a:f6:e8:aa:b7:3e:
b1:8e:c1:7b:3f:e4:46:22:f3:3e:f3:9f:15:d1:72:65:3c:f9:
45:3c:0f:4c:4f:1a:7c:fb:1d:b4:5d:d9:04:76:93:6b:4c:f1:
53:37:0a:5d:c1:76:dc:d7:bc:b7:c6:10:90:ef:e3:34:52:23:
02:8a:4c:19:ef:1d:67:5d:08:bd:28:6d:b4:89:ad:1d:32:e6:
51:13:e4:c4:e4:bd:70:39:95:30:6a:5d:d8:83:a7:d0:d8:c7:
88:ce:2f:53:bc:b3:79:26:f9:3c:68:9a:e3:83:26:57:43:15:
03:bf:e8:b4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUJNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTI1NjM5WhcNMjUwMjI4MTI1NjM5WjAYMRYw
FAYDVQQDEw02NzkyM2M4Yi0wZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxtSlXsDf4ihHuXIMR7MhHMZ7n5eZrnv1Y/dWNOIqRg6HB44b3b+mZBLP
ucOA7wJsU8DPjHs5EyTccqEclR8HxZNLetM9Hvn+u34EoLiJ0JNwGBi6nfcpQnxQ
0vHmzTgekZpnaWbJtaFhxDyBAU9HVMw4r0bs7P6gipwNOTIV9j8OYXhLuwCcGxDN
0w7JJddl3Ov+K5zSF3wA1yRZ7ZFiscQ8Se2hWP39NRhdy4Iraks+xdcSG5txislB
dMZGb1sb0c6qj9Tvo0mKWEA+Gc1Q+4NNum3GD4+IlbpY0PAk4s9phsopUNNfSFif
+/lOdIxJ0hF8b1Twg+9W7aY8rHRKUwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKml
a8vRNOYSwhG3efOqOT9AuYV3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RTkzMkMwNEQ5ODkxMUVGODM3QkY5OTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsNhMA0GCSqGSIb3DQEB
CwUAA4IBAQB1nsgxuChdvDtY+fNevc7XSdnEDKoDgGT4joFoz/xvKdaP55Rgnodo
jdzs8Nr7wD0f5ooVEHnW+FzcZqIuQybtQH0pRyasWrEtTo1qw+v4hxEhv1/3Kl0W
myea8TrI3/UmPPOt0JPaD6ftmQeq63iguRZ9dmQHd4We3b89kYQJOJ3kXGELQzWo
Xxga9uiqtz6xjsF7P+RGIvM+858V0XJlPPlFPA9MTxp8+x20XdkEdpNrTPFTNwpd
wXbc17y3xhCQ7+M0UiMCikwZ7x1nXQi9KG20ia0dMuZRE+TE5L1wOZUwal3Yg6fQ
2MeIzi9TvLN5Jvk8aJrjgyZXQxUDv+i0
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:24:17 2025 by rpki-client