Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8194FE0CD98711EF9399038B762E951A.roa
File: 8194FE0CD98711EF9399038B762E951A.roa (raw, json)
Hash identifier: b5rtS3O/tlD7cDxfh+PNgVvk/bkp2DgL5RO6jh8j/20=
Subject key identifier: D8:32:2A:78:8A:6B:35:1D:DA:62:C0:73:BC:05:3A:E0:47:65:9E:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014231
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8194FE0CD98711EF9399038B762E951A.roa
Signing time: Thu 23 Jan 2025 12:42:29 +0000
ROA not before: Thu 23 Jan 2025 12:42:25 +0000
ROA not after: Fri 28 Feb 2025 12:42:25 +0000
asID: 62240
IP address blocks: 154.195.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82481 (0x14231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:42:25 2025 GMT
Not After : Feb 28 12:42:25 2025 GMT
Subject: CN=67923935-56e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:5a:b6:f8:d5:fa:52:a4:23:c0:a9:de:fe:
94:4f:c6:cf:c3:54:5a:49:ee:ed:13:6a:6e:a5:f9:
05:c5:7a:93:2a:ef:91:30:5c:5a:e3:24:ab:fa:c3:
0a:bd:96:5a:59:d5:90:e0:a9:a3:2d:f9:85:a4:c2:
5c:ee:58:34:4c:a8:34:3d:05:c6:55:8f:ee:94:d7:
1e:f3:ca:a7:73:78:38:dc:18:87:0a:8c:a6:3f:f2:
7d:34:4e:4c:23:82:04:4b:29:56:ae:df:e7:6b:44:
6e:cc:85:8c:a8:d5:f7:43:d6:59:fd:7b:04:c7:2d:
5d:6a:59:2b:84:0a:8e:24:00:fa:a7:6a:de:89:f6:
ff:5e:f8:bf:4b:79:08:64:1a:dc:53:d3:a9:a7:7e:
c8:ee:51:87:fe:ec:e5:56:11:48:11:d4:9e:86:fc:
6d:e7:32:28:7e:f6:03:e3:a2:ab:49:73:c6:76:d4:
22:9d:f9:8b:39:59:88:6b:12:4e:dd:83:cc:0e:3f:
89:8b:4b:a3:a1:a1:f7:b0:c3:53:3d:40:00:ef:61:
42:d9:92:1c:75:32:29:82:6b:89:64:77:72:40:df:
64:c1:e6:6c:79:56:62:1e:d4:d4:bc:17:cd:b2:64:
8f:9b:f9:2f:4a:6c:20:7d:ab:68:70:c8:90:37:ad:
92:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:32:2A:78:8A:6B:35:1D:DA:62:C0:73:BC:05:3A:E0:47:65:9E:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8194FE0CD98711EF9399038B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.26.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:89:20:10:f9:fb:b1:73:f4:58:9c:19:8d:82:de:c2:12:79:
76:bc:ab:d2:df:02:02:70:d0:ac:76:7a:e7:ac:2f:d7:de:86:
03:ff:17:5c:11:90:b8:0f:cc:bf:43:fc:6b:7e:d8:c4:93:73:
69:aa:99:63:4a:b9:b8:1e:21:8e:eb:8b:bb:23:a9:29:34:56:
a9:89:38:3a:89:7e:6b:45:98:ba:60:ff:af:54:01:87:3e:3d:
26:57:cb:66:33:2f:4c:c2:12:f0:19:04:04:e5:2b:cf:2b:0f:
74:45:36:dd:10:ff:06:58:f8:f0:35:f1:10:95:61:e1:0d:61:
e4:be:f5:1e:4e:10:19:bc:24:f2:da:88:82:0e:bc:d3:a5:9c:
ad:04:87:1e:a5:29:5d:cd:5b:e6:39:05:05:16:f0:6b:6a:02:
8a:c4:02:0e:22:28:3b:83:af:ed:a9:a1:b4:35:c2:8f:71:f1:
34:84:db:1f:bd:08:c7:31:52:16:2d:f0:4f:81:d9:61:46:78:
29:73:94:f6:da:4c:93:3b:be:ce:26:fa:09:30:12:6a:84:83:
bc:69:34:8a:b8:b2:9e:09:d2:0a:43:41:08:52:35:de:f2:61:
ff:42:d5:3f:e8:00:74:1a:e5:5e:44:a8:97:d0:3a:ba:ed:1c:
78:0a:8f:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUIxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTI0MjI1WhcNMjUwMjI4MTI0MjI1WjAYMRYw
FAYDVQQDEw02NzkyMzkzNS01NmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw99atvjV+lKkI8Cp3v6UT8bPw1RaSe7tE2pupfkFxXqTKu+RMFxa4ySr
+sMKvZZaWdWQ4KmjLfmFpMJc7lg0TKg0PQXGVY/ulNce88qnc3g43BiHCoymP/J9
NE5MI4IESylWrt/na0RuzIWMqNX3Q9ZZ/XsExy1dalkrhAqOJAD6p2reifb/Xvi/
S3kIZBrcU9Opp37I7lGH/uzlVhFIEdSehvxt5zIofvYD46KrSXPGdtQinfmLOVmI
axJO3YPMDj+Ji0ujoaH3sMNTPUAA72FC2ZIcdTIpgmuJZHdyQN9kweZseVZiHtTU
vBfNsmSPm/kvSmwgfatocMiQN62SYQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNgy
KniKazUd2mLAc7wFOuBHZZ5YMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MTk0RkUwQ0Q5ODcxMUVGOTM5OTAzOEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsMaMA0GCSqGSIb3DQEB
CwUAA4IBAQCciSAQ+fuxc/RYnBmNgt7CEnl2vKvS3wICcNCsdnrnrC/X3oYD/xdc
EZC4D8y/Q/xrftjEk3NpqpljSrm4HiGO64u7I6kpNFapiTg6iX5rRZi6YP+vVAGH
Pj0mV8tmMy9MwhLwGQQE5SvPKw90RTbdEP8GWPjwNfEQlWHhDWHkvvUeThAZvCTy
2oiCDrzTpZytBIcepSldzVvmOQUFFvBragKKxAIOIig7g6/tqaG0NcKPcfE0hNsf
vQjHMVIWLfBPgdlhRngpc5T22kyTO77OJvoJMBJqhIO8aTSKuLKeCdIKQ0EIUjXe
8mH/QtU/6AB0GuVeRKiX0Dq67Rx4Co+a
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:29:44 2025 by rpki-client