Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6AE4676D99011EFB7EA7B48762E951A.roa
File: B6AE4676D99011EFB7EA7B48762E951A.roa (raw, json)
Hash identifier: C63bzI+KcYXfidV6jbPZC+vH57yubIcKpZ5pliHzhbY=
Subject key identifier: B5:6C:E4:66:E4:F4:78:55:95:17:3D:A5:D1:4C:5C:90:08:BA:90:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01428C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6AE4676D99011EFB7EA7B48762E951A.roa
Signing time: Thu 23 Jan 2025 13:48:24 +0000
ROA not before: Thu 23 Jan 2025 13:48:19 +0000
ROA not after: Fri 28 Feb 2025 13:48:19 +0000
asID: 62240
IP address blocks: 154.196.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82572 (0x1428c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 13:48:19 2025 GMT
Not After : Feb 28 13:48:19 2025 GMT
Subject: CN=679248a8-179c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:53:4e:8a:05:7c:15:ba:50:d8:1c:f5:36:
f0:76:31:c5:df:1c:e9:a4:c4:3e:4d:4d:8d:a2:87:
15:2d:4f:b4:2e:7d:ad:d1:54:f9:69:a4:ba:07:49:
b6:14:e0:69:69:e3:83:8a:5a:25:b1:1e:0b:fe:dd:
27:f7:2f:3a:f1:43:eb:ae:eb:df:18:9a:fb:29:97:
27:b0:a2:63:a9:73:8f:1d:42:09:e4:79:42:58:44:
45:03:d2:7b:ab:6b:e3:14:2d:cf:80:4e:aa:8f:8c:
39:8f:90:53:8b:1b:31:7a:fb:fe:b2:41:cf:1e:98:
16:8d:4a:e6:d3:4b:41:9f:b1:c5:cf:22:7b:ec:53:
2a:d7:b7:f8:4f:1a:50:62:b4:e9:31:df:93:43:cd:
c8:75:10:b6:42:f8:88:9d:77:f8:a9:d9:5a:e4:cc:
d9:b2:79:c8:bb:b0:66:0a:40:30:42:c4:79:b8:c3:
a2:a7:04:bc:2d:8b:ee:71:dd:17:6a:6e:67:39:7f:
16:db:f9:8f:1c:59:41:b5:c7:e8:d8:7d:a7:b9:3a:
ec:2c:15:42:a4:e5:8e:e5:f3:7b:8f:40:5c:da:ce:
96:1e:57:fc:c5:73:17:0f:39:46:1a:1f:0b:33:a9:
e6:8c:71:a9:a0:23:cd:ee:18:25:56:a4:03:05:79:
2a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6C:E4:66:E4:F4:78:55:95:17:3D:A5:D1:4C:5C:90:08:BA:90:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6AE4676D99011EFB7EA7B48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.26.0/24
Signature Algorithm: sha256WithRSAEncryption
06:fe:7a:bd:31:c8:3c:af:1f:10:9b:f4:83:a9:dc:13:4f:6b:
4e:ee:97:91:25:bb:69:cb:de:a4:ea:58:81:ea:3e:14:82:f3:
1d:bb:b4:59:18:75:a0:37:53:cf:3a:06:09:94:0e:20:ee:5d:
5b:e1:16:1f:69:1d:65:6f:2a:18:05:69:35:b8:22:fb:c0:52:
e8:f8:6f:0d:a1:d7:d7:be:73:72:bc:55:d8:d9:6d:3b:7e:33:
0b:4e:e6:a1:77:0b:39:a7:ce:e1:7f:02:d5:3d:51:f3:6e:25:
30:8b:dc:a6:bd:42:c0:36:8d:67:f9:47:d2:9b:86:ce:1c:b5:
cc:8f:78:4c:8c:cc:28:5e:2d:66:97:15:21:fd:78:c1:f0:28:
57:b1:50:ce:70:1e:93:9a:e6:83:de:ea:b1:8f:64:5e:86:bc:
80:d4:d3:94:98:2a:fb:16:e3:37:a9:6b:81:88:d7:0b:82:65:
2c:cc:77:59:14:b7:6d:27:b2:70:41:8b:a4:3a:47:dc:91:9d:
a6:bd:e4:43:35:2a:d7:f8:b7:16:33:09:8c:0c:5c:83:09:e3:
52:1c:92:3f:c0:18:a8:47:9d:bc:8e:a1:b9:2c:77:34:20:9e:
58:0c:5f:31:52:7e:88:96:82:04:1f:f6:ee:ab:da:51:40:a9:
4f:6e:50:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUKMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTM0ODE5WhcNMjUwMjI4MTM0ODE5WjAYMRYw
FAYDVQQDEw02NzkyNDhhOC0xNzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp2tTTooFfBW6UNgc9TbwdjHF3xzppMQ+TU2NoocVLU+0Ln2t0VT5aaS6
B0m2FOBpaeODilolsR4L/t0n9y868UPrruvfGJr7KZcnsKJjqXOPHUIJ5HlCWERF
A9J7q2vjFC3PgE6qj4w5j5BTixsxevv+skHPHpgWjUrm00tBn7HFzyJ77FMq17f4
TxpQYrTpMd+TQ83IdRC2QviInXf4qdla5MzZsnnIu7BmCkAwQsR5uMOipwS8LYvu
cd0Xam5nOX8W2/mPHFlBtcfo2H2nuTrsLBVCpOWO5fN7j0Bc2s6WHlf8xXMXDzlG
Gh8LM6nmjHGpoCPN7hglVqQDBXkq8QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLVs
5Gbk9HhVlRc9pdFMXJAIupDmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNkFFNDY3NkQ5OTAxMUVGQjdFQTdCNDg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsQaMA0GCSqGSIb3DQEB
CwUAA4IBAQAG/nq9Mcg8rx8Qm/SDqdwTT2tO7peRJbtpy96k6liB6j4UgvMdu7RZ
GHWgN1PPOgYJlA4g7l1b4RYfaR1lbyoYBWk1uCL7wFLo+G8NodfXvnNyvFXY2W07
fjMLTuahdws5p87hfwLVPVHzbiUwi9ymvULANo1n+UfSm4bOHLXMj3hMjMwoXi1m
lxUh/XjB8ChXsVDOcB6TmuaD3uqxj2RehryA1NOUmCr7FuM3qWuBiNcLgmUszHdZ
FLdtJ7JwQYukOkfckZ2mveRDNSrX+LcWMwmMDFyDCeNSHJI/wBioR528jqG5LHc0
IJ5YDF8xUn6IloIEH/buq9pRQKlPblBk
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:21:50 2025 by rpki-client