Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0DEC84CDA4911EFA7E525A9762E951A.roa
File: B0DEC84CDA4911EFA7E525A9762E951A.roa (raw, json)
Hash identifier: V3P5aEXP01QHWK206CJc2/yJ4kWpJhRSSaeTK/pK3Jk=
Subject key identifier: 99:BD:CD:3E:C8:67:77:3F:FC:82:FE:03:1C:6A:A9:47:99:A2:30:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014653
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0DEC84CDA4911EFA7E525A9762E951A.roa
Signing time: Fri 24 Jan 2025 11:52:31 +0000
ROA not before: Fri 24 Jan 2025 11:52:26 +0000
ROA not after: Fri 28 Feb 2025 11:52:26 +0000
asID: 62240
IP address blocks: 154.195.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83539 (0x14653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:52:26 2025 GMT
Not After : Feb 28 11:52:26 2025 GMT
Subject: CN=67937eff-8f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b2:5c:c1:ec:61:9c:63:f1:82:f7:9b:59:fe:
9b:cb:2b:e9:1d:bb:d8:b6:11:e6:d6:e5:44:1d:54:
bc:71:9a:f9:22:8e:be:cc:86:3c:09:69:88:e0:65:
f7:a1:bc:23:38:32:ea:76:18:31:67:70:68:45:45:
a7:3a:38:21:99:9e:87:d8:18:05:77:16:d2:c0:f9:
46:7b:82:bb:43:0a:53:25:99:d7:54:93:69:b1:08:
55:2f:26:68:75:f8:76:ee:43:58:c4:02:f7:b0:fe:
30:7d:79:3e:34:80:9e:e0:3f:a3:2e:ba:37:d8:a3:
3c:05:f0:0a:20:1e:7a:12:c3:20:39:3c:15:4b:ef:
9b:f2:af:f4:c0:2f:13:58:45:04:09:73:fc:2f:6e:
10:04:7d:2a:a9:94:ce:41:e6:d8:b8:11:f4:30:95:
8c:2a:5f:43:2c:42:dd:e6:22:ca:79:6b:32:72:09:
2e:70:71:4a:82:01:75:d1:0b:9b:3b:29:c6:a5:e6:
76:bd:de:fd:63:79:bb:ad:9f:1b:f5:e7:b7:c9:ef:
93:93:2c:69:db:b4:7f:0e:4f:a4:d1:3b:ad:cc:7e:
11:9e:27:62:5c:ad:68:62:0c:f1:d1:4a:7d:41:6d:
7a:70:5e:af:88:1c:c2:2e:91:b3:19:21:e1:69:a0:
ae:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BD:CD:3E:C8:67:77:3F:FC:82:FE:03:1C:6A:A9:47:99:A2:30:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0DEC84CDA4911EFA7E525A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.113.0/24
Signature Algorithm: sha256WithRSAEncryption
93:37:e1:98:55:76:78:ca:30:69:d7:f9:ff:a8:ef:58:12:3a:
a9:af:18:22:a5:96:68:d8:11:1a:d0:d2:d4:41:05:58:7e:1b:
15:38:7e:27:c3:ee:11:0a:59:8c:82:a4:61:2f:45:ef:13:98:
f5:ce:e9:cb:cb:77:54:1b:28:9d:49:c7:56:73:52:c0:5e:57:
48:bf:b1:5b:a9:aa:c7:7b:c4:a2:28:ae:9c:9a:28:a4:a9:4e:
66:4a:27:19:30:cf:0b:c9:fd:5c:26:47:99:1f:20:5e:4f:8e:
5a:02:03:22:fa:72:09:32:a1:6a:60:d3:2b:33:56:09:01:11:
cf:e5:67:f8:ff:24:ed:0f:4c:67:d9:ec:bf:cb:64:25:72:3c:
35:ef:4f:3a:fb:51:ee:fe:23:fb:d2:8a:ee:e9:21:e8:42:96:
99:21:1f:c8:ae:97:2f:22:29:d6:1d:ff:fe:51:09:3e:a9:aa:
23:62:a0:37:28:2f:d9:de:eb:32:2b:e3:a7:f5:e7:d1:02:52:
69:ce:60:29:d8:ea:58:44:f2:a2:33:8f:fb:88:9b:8b:1d:d6:
7f:ff:ab:5f:94:2d:c0:f0:65:8a:b0:3a:f4:7d:b4:68:7a:c7:
93:ff:c3:dd:39:de:e5:28:64:9f:70:10:17:00:2f:f0:66:7c:
ea:b0:82:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUZTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTE1MjI2WhcNMjUwMjI4MTE1MjI2WjAYMRYw
FAYDVQQDEw02NzkzN2VmZi04ZjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwrJcwexhnGPxgvebWf6byyvpHbvYthHm1uVEHVS8cZr5Io6+zIY8CWmI
4GX3obwjODLqdhgxZ3BoRUWnOjghmZ6H2BgFdxbSwPlGe4K7QwpTJZnXVJNpsQhV
LyZodfh27kNYxAL3sP4wfXk+NICe4D+jLro32KM8BfAKIB56EsMgOTwVS++b8q/0
wC8TWEUECXP8L24QBH0qqZTOQebYuBH0MJWMKl9DLELd5iLKeWsycgkucHFKggF1
0QubOynGpeZ2vd79Y3m7rZ8b9ee3ye+Tkyxp27R/Dk+k0TutzH4RnidiXK1oYgzx
0Up9QW16cF6viBzCLpGzGSHhaaCuuwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJm9
zT7IZ3c//IL+AxxqqUeZojCcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMERFQzg0Q0RBNDkxMUVGQTdFNTI1QTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsNxMA0GCSqGSIb3DQEB
CwUAA4IBAQCTN+GYVXZ4yjBp1/n/qO9YEjqprxgipZZo2BEa0NLUQQVYfhsVOH4n
w+4RClmMgqRhL0XvE5j1zunLy3dUGyidScdWc1LAXldIv7FbqarHe8SiKK6cmiik
qU5mSicZMM8Lyf1cJkeZHyBeT45aAgMi+nIJMqFqYNMrM1YJARHP5Wf4/yTtD0xn
2ey/y2Qlcjw17086+1Hu/iP70oru6SHoQpaZIR/IrpcvIinWHf/+UQk+qaojYqA3
KC/Z3usyK+On9efRAlJpzmAp2OpYRPKiM4/7iJuLHdZ//6tflC3A8GWKsDr0fbRo
eseT/8PdOd7lKGSfcBAXAC/wZnzqsIIT
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:17 2025 by rpki-client