Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A7EEE22DA5A11EFBE3E259C762E951A.roa
File: 9A7EEE22DA5A11EFBE3E259C762E951A.roa (raw, json)
Hash identifier: gvlq9KvqsTXnQjYvoRB3qSZCsiRNF18+ka59C5ZFNco=
Subject key identifier: F9:C1:62:F2:55:4E:B7:10:65:62:51:E5:C9:5E:A4:21:EB:BD:CD:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A7EEE22DA5A11EFBE3E259C762E951A.roa
Signing time: Fri 24 Jan 2025 13:53:35 +0000
ROA not before: Fri 24 Jan 2025 13:53:31 +0000
ROA not after: Fri 28 Feb 2025 13:53:31 +0000
asID: 62240
IP address blocks: 154.195.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83905 (0x147c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:53:31 2025 GMT
Not After : Feb 28 13:53:31 2025 GMT
Subject: CN=67939b5e-7725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:95:d8:6c:10:86:43:d8:7d:5b:09:b1:2d:09:
6f:74:8a:26:40:f5:b2:94:b9:b3:69:c5:0a:ba:dd:
be:5c:a6:d4:7b:0a:df:2f:06:ee:df:21:87:7f:fa:
ff:e6:19:2a:20:21:d7:18:30:7b:48:d4:bc:3e:99:
d6:f1:f0:28:a1:1e:97:03:10:8b:41:f3:b1:bb:53:
bc:1d:6e:ae:61:cb:a4:68:dd:07:73:2c:5b:3e:ec:
a1:88:55:79:cb:85:bc:f9:74:87:2b:4c:8e:a2:45:
67:f8:e7:6f:36:41:2b:2b:d9:8e:96:92:67:45:37:
9c:6f:ce:43:03:db:b1:40:6f:97:32:e9:9b:d3:a7:
80:fb:b6:57:c1:9a:10:28:8a:59:99:e7:9c:59:2f:
ff:f1:d4:13:17:98:84:cf:0f:3b:41:45:da:0c:81:
f7:27:1d:9f:c2:ff:d2:ae:03:34:83:a9:1f:d8:93:
e7:2f:a8:aa:5c:69:52:07:23:06:e2:df:8e:1c:88:
64:a6:69:6f:b1:8b:89:60:40:d3:a2:4b:7f:d3:be:
cc:68:c0:15:e8:7b:ae:7a:20:b0:4b:31:b2:1e:7a:
1f:81:59:56:b2:cd:4c:05:85:08:08:7f:0a:1c:f2:
2e:28:e8:e3:91:b5:d3:d1:3a:8a:a9:8b:75:a8:63:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C1:62:F2:55:4E:B7:10:65:62:51:E5:C9:5E:A4:21:EB:BD:CD:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A7EEE22DA5A11EFBE3E259C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.96.0/19
Signature Algorithm: sha256WithRSAEncryption
77:3e:43:14:d8:df:b8:68:e3:8e:81:a9:8c:47:f5:c7:29:7d:
17:3a:1a:1a:c8:6d:43:3e:64:7c:05:de:f3:30:f6:aa:e9:21:
58:70:ad:eb:97:0b:10:6e:e7:3d:61:95:a6:38:94:fb:22:e8:
0f:d0:82:b3:91:5a:32:78:ac:19:a0:36:83:29:87:cf:29:cf:
9b:cb:00:7b:82:c3:fc:95:6d:01:2c:20:b7:0e:4f:f2:1a:14:
41:2f:20:e1:93:5c:64:8f:d3:a7:f2:bc:3b:d2:47:f1:4a:6c:
58:f2:27:fc:ea:e1:7e:f7:a6:61:70:c1:20:3c:47:de:84:bc:
3c:e3:b1:3d:61:10:09:7f:0c:55:ee:bb:33:00:99:d7:ee:0f:
7b:63:96:9e:a5:50:b3:f0:7d:d0:b0:a3:de:42:24:e9:1a:ff:
08:b7:c1:0a:73:c6:60:17:c5:91:0e:3b:62:a2:58:a0:5f:34:
42:bd:99:c7:e0:95:06:fa:b4:9d:8b:fd:53:c5:7f:48:2e:ed:
ba:11:06:31:7f:75:f8:0e:c0:4b:69:69:f5:66:3f:7e:a5:d0:
4c:c0:fc:fa:f7:70:dc:2c:3a:44:1c:7e:a0:b5:2a:13:d6:60:
7d:58:e4:ed:1c:3c:31:22:f1:19:ba:0d:b4:07:02:45:a1:7c:
10:ad:9c:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUfBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTM1MzMxWhcNMjUwMjI4MTM1MzMxWjAYMRYw
FAYDVQQDEw02NzkzOWI1ZS03NzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2ZXYbBCGQ9h9WwmxLQlvdIomQPWylLmzacUKut2+XKbUewrfLwbu3yGH
f/r/5hkqICHXGDB7SNS8PpnW8fAooR6XAxCLQfOxu1O8HW6uYcukaN0HcyxbPuyh
iFV5y4W8+XSHK0yOokVn+OdvNkErK9mOlpJnRTecb85DA9uxQG+XMumb06eA+7ZX
wZoQKIpZmeecWS//8dQTF5iEzw87QUXaDIH3Jx2fwv/SrgM0g6kf2JPnL6iqXGlS
ByMG4t+OHIhkpmlvsYuJYEDTokt/077MaMAV6HuueiCwSzGyHnofgVlWss1MBYUI
CH8KHPIuKOjjkbXT0TqKqYt1qGMFDwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPnB
YvJVTrcQZWJR5clepCHrvc0eMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QTdFRUUyMkRBNUExMUVGQkUzRTI1OUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmsNgMA0GCSqGSIb3DQEB
CwUAA4IBAQB3PkMU2N+4aOOOgamMR/XHKX0XOhoayG1DPmR8Bd7zMPaq6SFYcK3r
lwsQbuc9YZWmOJT7IugP0IKzkVoyeKwZoDaDKYfPKc+bywB7gsP8lW0BLCC3Dk/y
GhRBLyDhk1xkj9On8rw70kfxSmxY8if86uF+96ZhcMEgPEfehLw847E9YRAJfwxV
7rszAJnX7g97Y5aepVCz8H3QsKPeQiTpGv8It8EKc8ZgF8WRDjtioligXzRCvZnH
4JUG+rSdi/1TxX9ILu26EQYxf3X4DsBLaWn1Zj9+pdBMwPz693DcLDpEHH6gtSoT
1mB9WOTtHDwxIvEZug20BwJFoXwQrZzj
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:40 2025 by rpki-client