Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2957DB8AD5A11EFA8131BB5762E951A.roa
File: C2957DB8AD5A11EFA8131BB5762E951A.roa (raw, json)
Hash identifier: GNdc05pQJyBOs55GN8yWMix6r2Q2u+1wY0KyVEdzYdc=
Subject key identifier: 6C:65:B9:55:6E:41:14:BD:6E:CC:14:7D:08:91:A3:9F:85:04:F4:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0114E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2957DB8AD5A11EFA8131BB5762E951A.roa
Signing time: Thu 28 Nov 2024 07:31:19 +0000
ROA not before: Thu 28 Nov 2024 07:31:16 +0000
ROA not after: Tue 11 Feb 2025 07:31:16 +0000
asID: 5650
IP address blocks: 154.194.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70883 (0x114e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 28 07:31:16 2024 GMT
Not After : Feb 11 07:31:16 2025 GMT
Subject: CN=67481c47-ff26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:ce:0d:36:99:33:82:ce:69:ab:ec:92:03:
f0:57:70:ce:c4:17:2d:c4:7c:c0:e2:0e:97:e9:27:
de:db:a2:10:46:32:e5:80:6a:05:7d:d8:b1:ad:65:
19:1b:a2:6f:13:c0:42:79:02:f7:25:d5:16:07:96:
d3:03:3e:23:52:7e:42:43:d3:88:ad:3e:30:b8:72:
85:b0:f1:17:46:0b:40:22:2d:21:04:61:b1:a9:e3:
e1:67:7f:97:66:53:a4:05:91:9d:09:23:a4:d3:b5:
02:33:9e:01:1e:01:e1:f4:8e:7f:50:f2:d3:d3:51:
78:c1:e3:4d:ce:5e:17:94:7f:85:58:8c:ef:1c:7c:
6c:4f:57:8b:48:92:58:a3:61:a2:e9:c2:21:e0:51:
77:2d:84:c7:f8:9e:2e:7d:55:7b:f9:a3:fc:de:38:
4c:e7:e1:29:04:a0:4c:eb:2f:2b:03:de:d6:ea:82:
c0:d3:0a:ae:24:12:85:e6:e8:04:21:4d:44:e8:92:
31:0d:b6:56:53:0a:53:02:6c:9a:84:3c:35:05:b1:
ad:96:04:ba:0e:8b:c8:46:ea:a4:6c:ab:9f:b8:ce:
1a:4e:12:a6:1b:e7:3e:58:66:05:1f:71:9c:b6:7f:
e9:c8:b0:23:73:b1:2a:57:ff:4a:63:90:7a:2c:e0:
9e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:65:B9:55:6E:41:14:BD:6E:CC:14:7D:08:91:A3:9F:85:04:F4:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2957DB8AD5A11EFA8131BB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:6a:68:7c:52:bf:dc:b3:17:68:77:83:af:81:65:f7:cc:1f:
f4:66:23:6e:32:73:d6:58:65:3d:72:5b:f4:5f:f1:00:63:f8:
54:fe:05:de:74:a9:8e:0e:09:1b:2b:34:a6:93:33:c5:ca:37:
c4:05:0f:46:ef:0a:b4:91:5f:0b:7e:87:d6:5b:3a:62:25:3d:
4a:81:93:59:d2:08:a5:ab:64:4f:2f:c9:4d:66:70:31:d3:d9:
d3:95:07:c2:3c:df:81:9b:6d:8f:e7:70:91:af:9d:7f:ea:76:
c7:b3:6a:99:74:2d:31:66:4a:ed:ec:0b:5f:17:24:0d:4a:5f:
1b:20:6b:5f:2b:b0:4a:3d:ad:fc:55:15:7e:6e:4b:07:fb:c0:
7b:c9:10:e4:f3:71:3d:24:9f:f4:1c:96:35:16:47:9b:c7:ff:
9a:85:2d:57:42:6c:93:4f:98:65:1e:3a:5d:b8:1e:0a:fc:08:
4c:42:84:a6:95:91:32:68:d0:c2:30:cb:ec:37:be:09:eb:5e:
76:73:4d:92:29:76:b7:0b:0c:99:00:0a:63:30:5c:ea:11:1a:
97:f3:76:6a:78:2d:7c:8d:20:a1:10:39:f0:ed:79:98:60:6b:
c5:ea:f5:34:5f:3d:56:c1:cf:7c:f9:26:b4:05:c7:33:19:b4:
79:46:dd:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARTjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTI4MDczMTE2WhcNMjUwMjExMDczMTE2WjAYMRYw
FAYDVQQDEw02NzQ4MWM0Ny1mZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA35rODTaZM4LOaavskgPwV3DOxBctxHzA4g6X6Sfe26IQRjLlgGoFfdix
rWUZG6JvE8BCeQL3JdUWB5bTAz4jUn5CQ9OIrT4wuHKFsPEXRgtAIi0hBGGxqePh
Z3+XZlOkBZGdCSOk07UCM54BHgHh9I5/UPLT01F4weNNzl4XlH+FWIzvHHxsT1eL
SJJYo2Gi6cIh4FF3LYTH+J4ufVV7+aP83jhM5+EpBKBM6y8rA97W6oLA0wquJBKF
5ugEIU1E6JIxDbZWUwpTAmyahDw1BbGtlgS6DovIRuqkbKufuM4aThKmG+c+WGYF
H3Gctn/pyLAjc7EqV/9KY5B6LOCeWQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGxl
uVVuQRS9bswUfQiRo5+FBPTaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMjk1N0RCOEFENUExMUVGQTgxMzFCQjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsIUMA0GCSqGSIb3DQEB
CwUAA4IBAQCpamh8Ur/csxdod4OvgWX3zB/0ZiNuMnPWWGU9clv0X/EAY/hU/gXe
dKmODgkbKzSmkzPFyjfEBQ9G7wq0kV8LfofWWzpiJT1KgZNZ0gilq2RPL8lNZnAx
09nTlQfCPN+Bm22P53CRr51/6nbHs2qZdC0xZkrt7AtfFyQNSl8bIGtfK7BKPa38
VRV+bksH+8B7yRDk83E9JJ/0HJY1Fkebx/+ahS1XQmyTT5hlHjpduB4K/AhMQoSm
lZEyaNDCMMvsN74J6152c02SKXa3CwyZAApjMFzqERqX83ZqeC18jSChEDnw7XmY
YGvF6vU0Xz1Wwc98+Sa0BcczGbR5Rt3R
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:04:57 2025 by rpki-client