Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F956C60D96F11EFAC68636A762E951A.roa
File: 9F956C60D96F11EFAC68636A762E951A.roa (raw, json)
Hash identifier: VpfLudJ94tfiHkd5BLBFzjwVzbL97KWzQUCxEvf/jt8=
Subject key identifier: 96:CA:BB:B0:8D:E3:47:91:2A:D7:40:F1:B0:E8:F7:D9:F7:DA:75:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014102
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F956C60D96F11EFAC68636A762E951A.roa
Signing time: Thu 23 Jan 2025 09:51:31 +0000
ROA not before: Thu 23 Jan 2025 09:51:28 +0000
ROA not after: Fri 28 Feb 2025 09:51:28 +0000
asID: 62240
IP address blocks: 154.194.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82178 (0x14102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:51:28 2025 GMT
Not After : Feb 28 09:51:28 2025 GMT
Subject: CN=67921123-0a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:db:8a:a3:71:05:c0:86:69:d1:42:52:7d:f2:
78:a8:79:67:fd:29:0b:f9:16:c0:de:20:eb:a5:9d:
89:3c:94:46:2d:11:24:a8:7e:e8:d6:24:99:7d:91:
4d:6f:b2:62:e8:06:19:c4:27:79:c4:a0:62:28:10:
41:0e:66:1d:51:bf:4f:58:8f:1d:33:af:2d:6b:5d:
98:3b:11:58:3b:01:21:41:ad:43:c1:7e:a2:8c:ac:
3f:63:a4:7a:ea:78:e7:ea:84:b0:e2:0e:20:13:06:
b7:6c:0d:54:e6:de:0a:cc:70:a8:0d:bd:89:db:bf:
70:52:b6:d3:b4:ba:1e:19:03:5b:fe:57:a2:9f:fd:
ae:4a:59:fe:9c:99:99:88:80:cf:85:e0:af:8e:7b:
7e:2b:da:e4:f1:4d:ad:06:4d:fc:96:3d:3f:b5:0c:
9b:a8:39:86:71:ca:de:9c:0e:94:a2:eb:0d:c1:e2:
9d:82:21:80:15:31:9c:34:45:f7:b3:35:7f:f6:0b:
2f:56:b4:04:76:66:4c:6c:40:b4:d8:2f:ce:4e:3d:
d7:38:07:88:b3:08:c1:e1:65:77:16:60:20:55:85:
12:ac:da:c3:80:1a:64:9c:3b:52:f3:22:0f:22:9c:
00:6e:35:dc:0c:c5:8b:fa:63:a9:dd:5a:f3:78:59:
58:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CA:BB:B0:8D:E3:47:91:2A:D7:40:F1:B0:E8:F7:D9:F7:DA:75:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F956C60D96F11EFAC68636A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.123.0/24
Signature Algorithm: sha256WithRSAEncryption
68:4a:73:f1:66:f8:09:94:32:bb:54:18:bf:f7:bb:43:af:a0:
b3:3b:1b:d3:69:09:81:81:b4:c2:9d:41:4d:5b:a0:ba:31:1a:
b1:88:01:fe:0c:db:2b:14:70:9e:6f:66:c6:df:ee:dc:e3:d7:
a2:8e:61:fc:3d:41:43:17:05:0e:21:01:24:29:82:87:af:a7:
f7:f7:55:de:b0:9d:57:93:92:7d:87:fe:c3:bc:06:8b:6d:e2:
c3:0e:51:3b:9f:74:6a:41:74:6f:ac:9f:c6:20:0b:ef:d1:79:
99:3b:f9:75:15:5e:6b:c3:66:3d:7d:18:8e:e7:f8:ae:71:19:
62:77:82:cc:75:7c:2d:33:9d:df:ba:e6:9e:cd:d8:de:19:a3:
4c:73:14:24:04:ab:c3:dd:b3:7e:6b:54:9e:b7:c2:a1:56:00:
7e:cd:6a:60:30:d6:65:94:dc:4c:24:84:a8:54:27:f7:63:ae:
bb:ed:09:36:77:b8:01:66:c1:3a:cd:87:30:07:81:64:8d:f8:
cc:38:f4:59:e8:a7:fc:47:e3:da:06:a1:38:ff:90:84:71:e6:
41:fa:f3:7e:cd:6f:ef:67:ee:2a:c2:bb:b2:5b:04:26:39:96:
5e:4c:5c:50:3c:22:d8:79:55:8b:64:62:50:37:7d:8b:17:2c:
cd:52:d5:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUECMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMDk1MTI4WhcNMjUwMjI4MDk1MTI4WjAYMRYw
FAYDVQQDEw02NzkyMTEyMy0wYTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0tuKo3EFwIZp0UJSffJ4qHln/SkL+RbA3iDrpZ2JPJRGLREkqH7o1iSZ
fZFNb7Ji6AYZxCd5xKBiKBBBDmYdUb9PWI8dM68ta12YOxFYOwEhQa1DwX6ijKw/
Y6R66njn6oSw4g4gEwa3bA1U5t4KzHCoDb2J279wUrbTtLoeGQNb/lein/2uSln+
nJmZiIDPheCvjnt+K9rk8U2tBk38lj0/tQybqDmGccrenA6UousNweKdgiGAFTGc
NEX3szV/9gsvVrQEdmZMbEC02C/OTj3XOAeIswjB4WV3FmAgVYUSrNrDgBpknDtS
8yIPIpwAbjXcDMWL+mOp3VrzeFlYGwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJbK
u7CN40eRKtdA8bDo99n32nWTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85Rjk1NkM2MEQ5NkYxMUVGQUM2ODYzNkE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJ7MA0GCSqGSIb3DQEB
CwUAA4IBAQBoSnPxZvgJlDK7VBi/97tDr6CzOxvTaQmBgbTCnUFNW6C6MRqxiAH+
DNsrFHCeb2bG3+7c49eijmH8PUFDFwUOIQEkKYKHr6f391XesJ1Xk5J9h/7DvAaL
beLDDlE7n3RqQXRvrJ/GIAvv0XmZO/l1FV5rw2Y9fRiO5/iucRlid4LMdXwtM53f
uuaezdjeGaNMcxQkBKvD3bN+a1Set8KhVgB+zWpgMNZllNxMJISoVCf3Y6677Qk2
d7gBZsE6zYcwB4FkjfjMOPRZ6Kf8R+PaBqE4/5CEceZB+vN+zW/vZ+4qwruyWwQm
OZZeTFxQPCLYeVWLZGJQN32LFyzNUtWR
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:54:18 2025 by rpki-client