Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B093C274DA4011EFACBC5D6D762E951A.roa
File: B093C274DA4011EFACBC5D6D762E951A.roa (raw, json)
Hash identifier: wJJfrNnbNHXaedI/hS0krQSGlgMDWrmKjWH+dyow9Co=
Subject key identifier: DE:53:88:A6:46:EF:35:82:3A:C1:1B:C6:20:42:0E:5C:CC:5D:00:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B093C274DA4011EFACBC5D6D762E951A.roa
Signing time: Fri 24 Jan 2025 10:48:05 +0000
ROA not before: Fri 24 Jan 2025 10:48:01 +0000
ROA not after: Fri 28 Feb 2025 10:48:01 +0000
asID: 62240
IP address blocks: 154.196.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83385 (0x145b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:48:01 2025 GMT
Not After : Feb 28 10:48:01 2025 GMT
Subject: CN=67936fe5-36db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:de:3c:14:3b:b1:ff:9e:db:01:02:9d:ee:
01:3c:cf:c2:7e:cb:4c:04:70:30:41:3c:aa:9f:d2:
b3:b3:e6:a4:b5:3f:7b:18:aa:08:72:05:64:0f:d8:
c1:29:11:a6:73:a0:af:6b:d6:3b:2b:01:d7:5d:49:
05:f9:fe:e7:89:26:02:d1:de:64:e6:22:9d:80:ff:
9d:e7:fd:1f:6e:c5:56:cd:d6:8d:b2:a7:50:c3:8d:
a4:9f:b1:5c:c7:c5:9b:94:f0:70:b1:a8:f7:43:3c:
6f:ef:f1:a2:39:f0:2e:ac:f6:11:b8:ed:cc:93:3e:
ff:c1:6c:6f:d9:64:86:16:86:68:3f:ae:ad:38:1c:
51:99:9f:80:2e:5d:36:05:bf:30:e1:41:e2:1e:fd:
32:ff:6f:5b:9b:f1:49:66:dd:8c:0d:21:e8:a9:34:
89:2f:cd:f2:86:1c:d8:6b:f5:9a:98:09:1f:f3:97:
75:a9:d3:09:63:e1:96:2a:58:95:9e:eb:56:80:ad:
38:99:4b:45:f1:6a:c0:df:0f:9b:d1:2b:40:fc:ae:
db:4e:1b:13:6f:d1:2d:26:05:35:25:e1:01:3c:a3:
71:1d:ee:a1:93:94:ef:a7:60:66:9b:ce:59:e2:68:
76:b1:9c:e6:e0:f5:d2:ca:8f:77:8b:10:f9:e6:00:
1b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:53:88:A6:46:EF:35:82:3A:C1:1B:C6:20:42:0E:5C:CC:5D:00:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B093C274DA4011EFACBC5D6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.65.0/24
Signature Algorithm: sha256WithRSAEncryption
97:38:5a:8f:60:d8:54:30:e0:9e:82:55:cc:02:22:04:b0:f3:
07:3f:62:01:ec:98:23:45:56:e4:9a:4f:42:63:9a:6b:fd:9d:
24:e3:ef:80:11:6c:01:ce:08:98:35:c0:e9:95:e8:45:e5:44:
29:81:09:e8:00:f9:c9:3c:a5:64:8b:c3:71:fa:fa:67:7d:f3:
3b:24:9f:48:86:1d:92:88:bb:18:f6:b7:a1:bb:94:bf:2b:29:
24:28:5b:82:e0:b1:c6:85:90:22:a2:35:f9:e3:23:13:13:e9:
c6:e0:3e:e4:0b:b3:1a:ba:c2:a6:50:5b:26:6f:db:88:77:58:
6f:6d:b6:22:6f:ae:9b:f5:f8:f3:c6:3d:31:93:04:b2:96:37:
d8:0e:f0:3f:0b:5b:eb:9f:14:f7:29:2e:f9:e3:9a:e8:0b:8c:
b5:7b:c4:47:82:02:83:0f:25:7f:cd:9c:d0:34:b9:a2:e0:20:
91:b6:2a:9e:b9:42:86:0b:bf:f0:65:bf:7d:35:79:6f:59:24:
bf:89:1d:8e:67:05:e4:1f:61:d8:88:6e:80:e2:4f:86:e2:81:
ee:83:35:09:81:ed:1e:c7:2a:61:ed:26:eb:40:b6:3e:a2:fa:
5e:9b:c5:ca:e9:d7:a9:be:67:db:7d:4b:ef:3f:a3:6a:2f:6c:
01:2b:e1:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUW5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTA0ODAxWhcNMjUwMjI4MTA0ODAxWjAYMRYw
FAYDVQQDEw02NzkzNmZlNS0zNmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvjzePBQ7sf+e2wECne4BPM/CfstMBHAwQTyqn9Kzs+aktT97GKoIcgVk
D9jBKRGmc6Cva9Y7KwHXXUkF+f7niSYC0d5k5iKdgP+d5/0fbsVWzdaNsqdQw42k
n7Fcx8WblPBwsaj3Qzxv7/GiOfAurPYRuO3Mkz7/wWxv2WSGFoZoP66tOBxRmZ+A
Ll02Bb8w4UHiHv0y/29bm/FJZt2MDSHoqTSJL83yhhzYa/WamAkf85d1qdMJY+GW
KliVnutWgK04mUtF8WrA3w+b0StA/K7bThsTb9EtJgU1JeEBPKNxHe6hk5Tvp2Bm
m85Z4mh2sZzm4PXSyo93ixD55gAbFwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN5T
iKZG7zWCOsEbxiBCDlzMXQDIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMDkzQzI3NERBNDAxMUVGQUNCQzVENkQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsRBMA0GCSqGSIb3DQEB
CwUAA4IBAQCXOFqPYNhUMOCeglXMAiIEsPMHP2IB7JgjRVbkmk9CY5pr/Z0k4++A
EWwBzgiYNcDplehF5UQpgQnoAPnJPKVki8Nx+vpnffM7JJ9Ihh2SiLsY9rehu5S/
KykkKFuC4LHGhZAiojX54yMTE+nG4D7kC7MausKmUFsmb9uId1hvbbYib66b9fjz
xj0xkwSyljfYDvA/C1vrnxT3KS7545roC4y1e8RHggKDDyV/zZzQNLmi4CCRtiqe
uUKGC7/wZb99NXlvWSS/iR2OZwXkH2HYiG6A4k+G4oHugzUJge0exyph7SbrQLY+
ovpem8XK6depvmfbfUvvP6NqL2wBK+Gz
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:05 2025 by rpki-client