Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A465A734CCCA11EF8A9D6559762E951A.roa
File: A465A734CCCA11EF8A9D6559762E951A.roa (raw, json)
Hash identifier: rTMSgtGzaHA1HfZZjSocVx2iZeeLgC9Hz2IXf7ow+x4=
Subject key identifier: 4C:52:CF:03:E4:6C:8A:31:98:C2:CA:93:9B:64:93:B8:5A:5C:CB:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01365B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A465A734CCCA11EF8A9D6559762E951A.roa
Signing time: Tue 07 Jan 2025 07:40:18 +0000
ROA not before: Tue 07 Jan 2025 07:40:15 +0000
ROA not after: Thu 13 Feb 2025 07:40:15 +0000
asID: 203020
IP address blocks: 154.207.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79451 (0x1365b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 07:40:15 2025 GMT
Not After : Feb 13 07:40:15 2025 GMT
Subject: CN=677cda62-dbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:40:1d:b4:66:76:bc:aa:af:78:a4:81:9d:
64:d6:6e:27:e6:80:aa:f9:64:1e:f1:a5:39:fb:38:
dd:f0:ae:6e:a9:6a:b7:13:17:71:0f:41:e3:0a:1f:
af:8f:d3:cc:99:21:d5:ce:bd:20:93:30:78:19:ee:
e0:38:89:c2:23:ba:31:b9:19:47:b0:56:d5:36:14:
94:c0:75:9a:20:b7:c0:1c:9b:d4:b0:25:43:21:0e:
7f:ce:f8:8f:2d:8a:b8:e5:c7:90:15:84:b8:24:e2:
79:5a:67:b3:4f:d4:d6:77:6b:f9:4f:ca:91:6d:e9:
5d:44:88:fe:f9:e8:b7:45:29:25:8d:13:a8:c4:c5:
70:9d:c3:00:87:6f:86:fb:5d:1f:ba:27:14:28:9f:
4c:64:3f:fa:f3:d8:31:92:8f:b0:5e:90:31:f1:5e:
dc:52:79:00:a8:d4:1b:9c:64:1f:86:da:68:1a:ca:
65:0b:19:ab:9d:f7:78:ad:67:06:09:3f:95:37:4f:
64:bc:00:ed:44:ae:f2:b8:01:8f:f4:89:90:3b:99:
45:8b:51:03:74:7d:fc:4b:1b:60:56:42:ed:bb:50:
e8:e2:fe:40:a6:98:1c:64:e5:46:5a:12:04:c4:80:
59:e7:d2:b6:49:e8:b3:28:46:d2:47:b2:e4:65:f7:
4d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:52:CF:03:E4:6C:8A:31:98:C2:CA:93:9B:64:93:B8:5A:5C:CB:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A465A734CCCA11EF8A9D6559762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.52.0/23
Signature Algorithm: sha256WithRSAEncryption
56:74:a4:31:ba:65:a6:4d:0a:4b:ad:8c:79:6f:e1:46:07:fb:
d1:a3:ef:d9:22:3d:6c:08:fd:8a:62:62:0f:83:43:9c:44:08:
44:09:0d:84:8c:51:68:22:95:1f:87:06:05:ad:b0:81:5e:9f:
b1:aa:82:49:86:58:b1:1d:47:6f:6b:7a:31:54:ff:75:d4:fa:
19:08:a3:77:fa:37:b5:60:d6:f3:2d:40:35:9d:51:3a:05:a6:
01:87:55:1f:0d:15:37:02:b4:f1:14:4a:7e:7d:70:f6:d8:c7:
cd:93:99:06:f0:00:16:ff:7a:72:d6:6b:c8:db:fb:e5:8f:bf:
1e:8b:4e:24:bb:98:17:a3:0c:51:d2:05:b5:d9:a7:91:0e:ef:
19:39:3a:eb:40:79:b2:16:84:f7:c7:52:10:a2:08:96:e5:c8:
a3:d5:03:57:3d:04:f3:bf:87:6e:ce:fa:38:e6:47:ee:ec:10:
76:31:d6:d9:6b:2d:47:07:75:ca:7d:ab:4e:6b:5f:70:bd:ae:
63:c9:a1:11:4b:80:7a:7d:bd:a3:ed:3d:04:19:d2:09:04:d1:
c8:ae:71:d7:a3:a5:21:38:1e:cb:cc:84:62:6f:23:8b:2c:95:
49:b3:58:db:94:64:10:4d:7e:56:84:15:71:67:64:d1:8f:cb:
da:d7:e4:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATZbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA3MDc0MDE1WhcNMjUwMjEzMDc0MDE1WjAYMRYw
FAYDVQQDEw02NzdjZGE2Mi1kYmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwFZAHbRmdryqr3ikgZ1k1m4n5oCq+WQe8aU5+zjd8K5uqWq3ExdxD0Hj
Ch+vj9PMmSHVzr0gkzB4Ge7gOInCI7oxuRlHsFbVNhSUwHWaILfAHJvUsCVDIQ5/
zviPLYq45ceQFYS4JOJ5WmezT9TWd2v5T8qRbeldRIj++ei3RSkljROoxMVwncMA
h2+G+10fuicUKJ9MZD/689gxko+wXpAx8V7cUnkAqNQbnGQfhtpoGsplCxmrnfd4
rWcGCT+VN09kvADtRK7yuAGP9ImQO5lFi1EDdH38SxtgVkLtu1Do4v5AppgcZOVG
WhIExIBZ59K2SeizKEbSR7LkZfdN7wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFExS
zwPkbIoxmMLKk5tkk7haXMvZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNDY1QTczNENDQ0ExMUVGOEE5RDY1NTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms80MA0GCSqGSIb3DQEB
CwUAA4IBAQBWdKQxumWmTQpLrYx5b+FGB/vRo+/ZIj1sCP2KYmIPg0OcRAhECQ2E
jFFoIpUfhwYFrbCBXp+xqoJJhlixHUdva3oxVP911PoZCKN3+je1YNbzLUA1nVE6
BaYBh1UfDRU3ArTxFEp+fXD22MfNk5kG8AAW/3py1mvI2/vlj78ei04ku5gXowxR
0gW12aeRDu8ZOTrrQHmyFoT3x1IQogiW5cij1QNXPQTzv4duzvo45kfu7BB2MdbZ
ay1HB3XKfatOa19wva5jyaERS4B6fb2j7T0EGdIJBNHIrnHXo6UhOB7LzIRibyOL
LJVJs1jblGQQTX5WhBVxZ2TRj8va1+QM
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:13:06 2025 by rpki-client