Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEC2E0FAD9CE11EF90EA975E762E951A.roa
File: AEC2E0FAD9CE11EF90EA975E762E951A.roa (raw, json)
Hash identifier: EUeHpIHJDtNGxcV2avYbTACf8Pb3EetUBlyPbuT/5YI=
Subject key identifier: 00:63:27:13:8C:87:0A:87:31:1C:D9:0E:BB:D0:45:36:60:CA:D3:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEC2E0FAD9CE11EF90EA975E762E951A.roa
Signing time: Thu 23 Jan 2025 21:11:59 +0000
ROA not before: Fri 24 Jan 2025 21:11:55 +0000
ROA not after: Fri 28 Feb 2025 21:11:55 +0000
asID: 62240
IP address blocks: 154.196.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82687 (0x142ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:11:55 2025 GMT
Not After : Feb 28 21:11:55 2025 GMT
Subject: CN=6792b09f-aaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:e0:41:57:63:e9:7d:dc:52:c7:14:8c:b6:
3c:a3:5c:df:2c:a6:dd:97:b7:7e:49:c8:d6:fd:9a:
38:60:66:f7:e6:36:60:c6:0f:2d:c7:a2:a1:80:ce:
6a:94:8f:0f:f1:3e:e0:bc:8d:e0:6f:2d:5b:a0:53:
47:0c:8b:bf:9d:53:20:a1:4a:ed:fb:27:e2:1c:5e:
f9:5d:6b:47:72:8a:72:94:47:98:39:d7:c3:6b:33:
48:df:20:b7:ec:ca:21:0b:46:ec:97:6d:ff:18:d8:
79:a2:96:4e:4e:c7:f2:be:01:5f:de:02:f3:9d:65:
8e:0e:a4:4a:45:c3:02:7a:4d:3f:2f:2b:f2:dc:0d:
dd:03:26:3b:f6:2f:68:4f:06:90:09:f0:db:82:39:
3b:f5:c5:2c:5a:2a:3a:85:fe:80:7a:9b:82:78:07:
65:05:a9:ca:19:20:7b:11:0a:be:5d:a8:60:01:c2:
e3:9d:97:9b:e6:a8:a7:e5:7f:65:aa:4e:07:7b:66:
70:ed:73:e2:2d:6c:01:ff:38:24:15:d2:eb:ca:c3:
4b:20:1e:94:93:9e:27:e9:bb:98:2a:94:58:2a:74:
a9:b4:32:7e:e2:0f:18:f3:5a:1d:2f:cc:18:f5:5f:
3f:05:af:0c:c7:98:76:8f:3e:c4:c3:6e:5f:b1:6e:
53:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:63:27:13:8C:87:0A:87:31:1C:D9:0E:BB:D0:45:36:60:CA:D3:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEC2E0FAD9CE11EF90EA975E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.75.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d3:f3:ca:a9:45:49:1d:9c:b5:f1:84:c2:c4:8b:ea:e4:b1:
72:c7:e7:c3:34:9e:09:d5:05:d2:e3:d6:dd:81:39:5f:51:9b:
38:ee:ef:0c:cd:1b:52:c0:67:0e:07:a3:8a:1c:97:62:49:14:
fb:40:5a:6e:f0:01:d9:55:ab:9d:f9:35:f6:4c:b1:41:d2:0e:
d1:dc:9e:81:9d:21:47:ae:28:5b:a2:79:6f:77:99:35:ba:ba:
0c:c1:6d:f5:9f:34:71:61:0c:67:c1:f6:6c:09:61:c1:27:64:
e2:0f:64:86:10:91:30:8a:e9:84:61:25:0c:af:4d:7d:a6:62:
e4:62:39:e9:ec:27:cb:1f:93:60:7b:8a:d1:9d:a1:06:a3:1b:
5a:95:79:71:2f:05:b9:df:09:62:dc:6c:9b:d5:56:0c:c9:9b:
8d:e4:09:0c:f4:f2:8b:a9:93:41:4f:b6:3b:f8:8e:8a:a0:bb:
f1:ce:9f:a8:53:45:72:aa:f7:12:fb:21:75:0e:37:94:35:7f:
40:04:36:96:58:94:3c:d7:c9:b3:a8:ae:18:88:ab:c0:58:3d:
1c:db:57:11:54:f0:26:5b:8d:b7:9c:da:6b:98:40:3c:0e:68:
82:88:b0:3b:a7:7d:71:ed:4a:bf:10:37:ea:3c:b6:c4:f0:e4:
fe:12:de:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUL/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MjExMTU1WhcNMjUwMjI4MjExMTU1WjAYMRYw
FAYDVQQDEw02NzkyYjA5Zi1hYWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqprgQVdj6X3cUscUjLY8o1zfLKbdl7d+ScjW/Zo4YGb35jZgxg8tx6Kh
gM5qlI8P8T7gvI3gby1boFNHDIu/nVMgoUrt+yfiHF75XWtHcopylEeYOdfDazNI
3yC37MohC0bsl23/GNh5opZOTsfyvgFf3gLznWWODqRKRcMCek0/Lyvy3A3dAyY7
9i9oTwaQCfDbgjk79cUsWio6hf6AepuCeAdlBanKGSB7EQq+XahgAcLjnZeb5qin
5X9lqk4He2Zw7XPiLWwB/zgkFdLrysNLIB6Uk54n6buYKpRYKnSptDJ+4g8Y81od
L8wY9V8/Ba8Mx5h2jz7Ew25fsW5TbwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFABj
JxOMhwqHMRzZDrvQRTZgytMlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRUMyRTBGQUQ5Q0UxMUVGOTBFQTk3NUU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsRLMA0GCSqGSIb3DQEB
CwUAA4IBAQCx0/PKqUVJHZy18YTCxIvq5LFyx+fDNJ4J1QXS49bdgTlfUZs47u8M
zRtSwGcOB6OKHJdiSRT7QFpu8AHZVaud+TX2TLFB0g7R3J6BnSFHrihbonlvd5k1
uroMwW31nzRxYQxnwfZsCWHBJ2TiD2SGEJEwiumEYSUMr019pmLkYjnp7CfLH5Ng
e4rRnaEGoxtalXlxLwW53wli3Gyb1VYMyZuN5AkM9PKLqZNBT7Y7+I6KoLvxzp+o
U0VyqvcS+yF1DjeUNX9ABDaWWJQ818mzqK4YiKvAWD0c21cRVPAmW423nNprmEA8
DmiCiLA7p31x7Uq/EDfqPLbE8OT+Et5L
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:35 2025 by rpki-client