Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90C34452D98111EFA6FB2F61762E951A.roa
File: 90C34452D98111EFA6FB2F61762E951A.roa (raw, json)
Hash identifier: lU2q04iWaUIF+ZAr81a4C4jMJkHePTegFv5TJx3lHxM=
Subject key identifier: A7:13:F7:1D:44:C3:95:57:BC:E9:5A:93:C4:7E:DD:D2:6D:C3:BA:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90C34452D98111EFA6FB2F61762E951A.roa
Signing time: Thu 23 Jan 2025 11:59:57 +0000
ROA not before: Thu 23 Jan 2025 11:59:54 +0000
ROA not after: Fri 28 Feb 2025 11:59:54 +0000
asID: 62240
IP address blocks: 154.195.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82398 (0x141de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:59:54 2025 GMT
Not After : Feb 28 11:59:54 2025 GMT
Subject: CN=67922f3d-7b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:17:18:5c:ce:a8:00:5a:71:86:db:77:bf:
8e:0f:7a:be:26:7a:bd:ac:d6:91:d4:f2:db:36:90:
e0:8d:fe:ae:62:21:af:b3:c4:de:46:38:2d:f4:13:
d8:a0:a6:60:47:7b:a5:26:5f:b4:54:b2:ff:10:b0:
3f:c9:1c:c9:1e:d6:86:ca:8c:48:9e:3d:be:ef:e4:
d5:f1:8c:5e:39:7b:f5:4b:81:83:66:8f:57:22:66:
2b:ea:bd:54:a8:1d:42:0c:3e:b2:6d:72:f3:92:ce:
63:75:ed:fb:48:22:fd:ea:1a:3a:69:8f:84:41:38:
c1:ef:2e:ca:50:35:97:97:94:a7:d9:77:aa:f2:d1:
6f:4f:d3:ac:f3:6a:be:c4:b6:d0:b7:1b:09:7b:ec:
ad:b2:dd:bd:51:41:2f:46:7c:bb:4b:f9:30:41:ad:
ad:04:39:a5:2f:b2:f6:a7:07:b5:13:d3:f2:11:5a:
7c:4e:b5:ef:5e:2f:3a:d9:05:2c:3f:e0:8c:4c:89:
c0:6d:38:a0:30:30:d4:89:b8:0e:a6:ff:90:d2:40:
e1:d9:36:2a:26:4e:e8:80:d7:31:67:89:5d:96:ba:
2d:5f:b4:0a:a6:25:c7:1e:a0:ec:e0:1f:5e:47:48:
0d:fe:8c:8b:c7:75:4f:17:ee:23:24:e1:f2:2a:2c:
1c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:13:F7:1D:44:C3:95:57:BC:E9:5A:93:C4:7E:DD:D2:6D:C3:BA:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90C34452D98111EFA6FB2F61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.177.0/24
Signature Algorithm: sha256WithRSAEncryption
32:b7:14:98:54:e7:a7:03:c8:5c:bb:73:9f:23:8b:9a:13:dd:
fe:79:87:23:1d:4c:ca:b9:d2:77:a0:4d:40:38:96:3b:d2:1e:
d2:df:ab:2c:9f:d1:ab:2f:be:97:a8:9a:5b:09:0d:75:a7:4a:
78:06:06:d3:72:17:dc:36:76:60:07:51:ed:04:d6:03:c8:a1:
40:86:5b:7f:54:fa:45:20:94:36:01:7a:87:9c:92:06:12:99:
68:6b:6c:54:c3:66:3f:e1:2d:c3:18:88:5c:f5:32:6d:88:07:
82:d0:28:e7:01:76:4a:2f:53:96:52:e7:36:cd:c3:57:ce:e1:
66:f6:f9:ed:17:c4:b0:89:76:dd:3f:b3:e1:a8:cb:08:b5:1a:
ee:a8:9b:5f:6b:2f:98:eb:eb:6f:9e:0d:a4:bb:37:df:ad:ee:
de:68:0b:c3:fa:85:97:b4:bf:66:52:cf:0a:1f:5b:51:18:dd:
35:ff:f7:7f:4b:2e:9a:59:39:ff:ce:5d:7e:a1:cd:d6:47:39:
0b:b7:e9:91:fd:21:9d:41:0c:d6:73:68:03:ff:0c:76:d8:5f:
d4:33:2a:55:51:af:ed:94:21:06:86:d3:b0:0e:41:fd:22:f7:
f9:51:4a:2f:4d:4f:d6:54:c2:f6:64:ab:ec:92:e1:51:9c:60:
5e:3c:60:e5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUHeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTE1OTU0WhcNMjUwMjI4MTE1OTU0WjAYMRYw
FAYDVQQDEw02NzkyMmYzZC03YjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqFQXGFzOqABacYbbd7+OD3q+Jnq9rNaR1PLbNpDgjf6uYiGvs8TeRjgt
9BPYoKZgR3ulJl+0VLL/ELA/yRzJHtaGyoxInj2+7+TV8YxeOXv1S4GDZo9XImYr
6r1UqB1CDD6ybXLzks5jde37SCL96ho6aY+EQTjB7y7KUDWXl5Sn2Xeq8tFvT9Os
82q+xLbQtxsJe+ytst29UUEvRny7S/kwQa2tBDmlL7L2pwe1E9PyEVp8TrXvXi86
2QUsP+CMTInAbTigMDDUibgOpv+Q0kDh2TYqJk7ogNcxZ4ldlrotX7QKpiXHHqDs
4B9eR0gN/oyLx3VPF+4jJOHyKiwcKQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKcT
9x1Ew5VXvOlak8R+3dJtw7p+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MEMzNDQ1MkQ5ODExMUVGQTZGQjJGNjE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsOxMA0GCSqGSIb3DQEB
CwUAA4IBAQAytxSYVOenA8hcu3OfI4uaE93+eYcjHUzKudJ3oE1AOJY70h7S36ss
n9GrL76XqJpbCQ11p0p4BgbTchfcNnZgB1HtBNYDyKFAhlt/VPpFIJQ2AXqHnJIG
Eploa2xUw2Y/4S3DGIhc9TJtiAeC0CjnAXZKL1OWUuc2zcNXzuFm9vntF8SwiXbd
P7PhqMsItRruqJtfay+Y6+tvng2kuzffre7eaAvD+oWXtL9mUs8KH1tRGN01//d/
Sy6aWTn/zl1+oc3WRzkLt+mR/SGdQQzWc2gD/wx22F/UMypVUa/tlCEGhtOwDkH9
Ivf5UUovTU/WVML2ZKvskuFRnGBePGDl
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:21 2025 by rpki-client