Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81290AAED97211EF91C6CA7C762E951A.roa
File: 81290AAED97211EF91C6CA7C762E951A.roa (raw, json)
Hash identifier: 97o2NmkXGHmzT4rM7IU04JGCAE/Vlw0VQghO7LajsEo=
Subject key identifier: 80:C7:DD:EF:2B:69:63:81:1E:6F:51:36:78:31:03:F9:F9:51:10:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014118
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81290AAED97211EF91C6CA7C762E951A.roa
Signing time: Thu 23 Jan 2025 10:12:09 +0000
ROA not before: Thu 23 Jan 2025 10:12:05 +0000
ROA not after: Fri 28 Feb 2025 10:12:05 +0000
asID: 62240
IP address blocks: 154.194.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82200 (0x14118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:12:05 2025 GMT
Not After : Feb 28 10:12:05 2025 GMT
Subject: CN=679215f9-873b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:37:55:d1:ac:a6:ed:e4:c5:2b:3d:48:5d:3d:
0f:e8:70:a7:00:ef:fd:09:f0:98:1a:7c:8c:d3:d2:
45:fe:3a:c3:8d:1c:58:59:cb:45:51:83:b0:34:4f:
25:3c:90:ae:e8:35:59:0e:47:9b:de:b2:2a:17:cc:
a8:41:fc:09:6c:a6:1f:66:77:96:4e:28:e1:87:62:
43:97:3f:cc:66:c6:27:b9:ec:84:1b:41:e7:43:fc:
b2:a6:fe:5b:cd:2c:e8:a7:b7:ca:03:b5:a7:ea:62:
be:0c:a5:ba:28:0e:53:6e:b4:a0:5a:ce:43:55:af:
1b:42:38:5a:81:ba:cd:dd:8a:e1:e8:b3:e8:dc:a8:
8a:43:f1:ee:09:ca:57:eb:59:21:4c:8a:b2:cc:f4:
ac:f1:d5:7a:d5:38:86:37:1c:83:d5:9c:58:42:73:
a3:74:da:7b:25:8c:6f:2e:3b:7d:92:b1:c0:a8:aa:
44:86:04:9d:f9:ff:e4:53:ce:07:a4:a3:5b:db:8f:
de:9b:ca:cf:c8:91:ab:10:83:c5:9a:2f:b0:0c:79:
8f:03:95:ba:a3:3e:c0:40:88:ee:e7:be:08:a2:0f:
f9:87:f4:02:90:e1:59:63:73:36:29:00:69:2f:2f:
3f:04:3a:de:60:b6:e8:91:88:ed:2e:2a:5b:15:d6:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C7:DD:EF:2B:69:63:81:1E:6F:51:36:78:31:03:F9:F9:51:10:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81290AAED97211EF91C6CA7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.88.0/24
Signature Algorithm: sha256WithRSAEncryption
32:1e:af:49:33:03:4f:7f:db:0c:9f:8b:37:ab:80:20:a0:ea:
aa:f9:cf:64:1c:d9:7b:93:11:01:09:17:1c:56:36:57:30:38:
83:da:a8:2a:89:b8:e4:28:d2:c5:11:b4:67:84:dc:85:34:cb:
e6:77:d7:6b:ba:a7:67:18:34:fb:65:0b:88:37:2d:e5:36:ae:
a7:b2:58:bb:d6:6b:e2:b6:38:41:b3:87:1b:fb:64:c4:55:30:
28:8f:e9:54:2b:b3:79:da:4f:0f:ec:6f:63:70:74:ac:8e:6b:
9b:e9:b1:ba:6d:f1:4a:a2:b3:43:9d:56:47:1e:b8:45:f8:e7:
28:e2:bc:f8:66:8a:a7:14:94:4a:b0:cf:77:50:ea:e1:b4:c9:
db:21:7e:1f:28:8e:a4:14:28:56:54:67:62:78:e6:45:4a:74:
7d:4b:e0:ac:c5:1c:13:b8:ab:f5:7a:fb:1b:c5:c3:67:94:2b:
94:45:71:df:42:cd:ee:9b:1b:dc:02:a0:5e:6d:c4:6d:5a:5d:
8c:60:16:5c:7d:60:5d:34:36:f4:81:01:14:b6:24:c0:f9:ef:
3c:82:c3:c3:eb:56:38:1c:b8:2e:b5:80:5c:bd:97:38:ce:53:
9b:c4:23:f8:ef:f3:60:77:ff:7d:66:08:bb:f9:cd:be:c5:68:
0e:7f:77:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUEYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTAxMjA1WhcNMjUwMjI4MTAxMjA1WjAYMRYw
FAYDVQQDEw02NzkyMTVmOS04NzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4DdV0aym7eTFKz1IXT0P6HCnAO/9CfCYGnyM09JF/jrDjRxYWctFUYOw
NE8lPJCu6DVZDkeb3rIqF8yoQfwJbKYfZneWTijhh2JDlz/MZsYnueyEG0HnQ/yy
pv5bzSzop7fKA7Wn6mK+DKW6KA5TbrSgWs5DVa8bQjhagbrN3Yrh6LPo3KiKQ/Hu
CcpX61khTIqyzPSs8dV61TiGNxyD1ZxYQnOjdNp7JYxvLjt9krHAqKpEhgSd+f/k
U84HpKNb24/em8rPyJGrEIPFmi+wDHmPA5W6oz7AQIju574Iog/5h/QCkOFZY3M2
KQBpLy8/BDreYLbokYjtLipbFdak/wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIDH
3e8raWOBHm9RNngxA/n5URA/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MTI5MEFBRUQ5NzIxMUVGOTFDNkNBN0M3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJYMA0GCSqGSIb3DQEB
CwUAA4IBAQAyHq9JMwNPf9sMn4s3q4AgoOqq+c9kHNl7kxEBCRccVjZXMDiD2qgq
ibjkKNLFEbRnhNyFNMvmd9druqdnGDT7ZQuINy3lNq6nsli71mvitjhBs4cb+2TE
VTAoj+lUK7N52k8P7G9jcHSsjmub6bG6bfFKorNDnVZHHrhF+Oco4rz4ZoqnFJRK
sM93UOrhtMnbIX4fKI6kFChWVGdieOZFSnR9S+CsxRwTuKv1evsbxcNnlCuURXHf
Qs3umxvcAqBebcRtWl2MYBZcfWBdNDb0gQEUtiTA+e88gsPD61Y4HLgutYBcvZc4
zlObxCP47/Ngd/99Zgi7+c2+xWgOf3dx
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:22:49 2025 by rpki-client