Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C530EA3CDC0611EF8902F364762E951A.roa
File: C530EA3CDC0611EF8902F364762E951A.roa (raw, json)
Hash identifier: 5E8EJXFqXbB4MgIx08fCIuH9uWtiuPoqegxCEfSKp5o=
Subject key identifier: 7C:7B:AB:4D:0F:74:A0:7A:BB:56:24:0A:55:91:16:AE:37:D8:3E:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C530EA3CDC0611EF8902F364762E951A.roa
Signing time: Sun 26 Jan 2025 16:58:31 +0000
ROA not before: Sun 26 Jan 2025 16:58:27 +0000
ROA not after: Thu 20 Feb 2025 16:58:27 +0000
asID: 142062
IP address blocks: 154.86.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84742 (0x14b06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 16:58:27 2025 GMT
Not After : Feb 20 16:58:27 2025 GMT
Subject: CN=679669b7-4e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:e6:f4:23:30:3e:93:ef:84:81:a3:d6:b5:
f4:d6:b9:7f:46:29:a2:6e:93:64:d7:17:0b:57:c8:
08:87:ab:1e:f1:20:a4:82:96:9b:0b:3b:67:61:4c:
59:ae:8a:3f:30:dd:0b:eb:c0:4e:8d:54:48:b2:bd:
b3:54:53:a8:f8:0b:bc:df:86:4c:63:8a:b9:ac:0b:
6c:34:dd:2d:bc:c2:7b:ef:95:9d:84:01:99:2f:65:
cf:c9:2e:90:ba:51:99:27:6a:ae:bf:b9:8c:30:01:
ac:77:65:4b:89:df:66:56:f9:70:31:6a:67:4e:e5:
c8:ee:43:55:cc:83:b8:f8:e8:ce:4a:82:5e:4d:8e:
f0:30:02:c7:8e:6c:e7:88:ca:a0:ff:75:3d:38:df:
7e:f8:6a:f2:64:f0:af:d5:f6:d7:d6:04:0a:9a:65:
3e:67:5f:30:36:e3:72:86:8c:6f:3d:78:25:e6:95:
34:bf:e3:1a:be:a9:eb:8d:42:be:bf:2a:d5:8a:75:
60:0c:72:c7:47:e6:10:e0:50:4f:f2:ff:13:94:5b:
2d:a4:76:19:0c:5d:11:0f:d3:e2:b3:f4:fc:60:8a:
26:21:a1:f8:22:e0:cc:be:bc:72:2e:20:b5:f4:67:
b1:1e:a1:da:1c:06:8a:05:0a:fe:52:65:94:c7:ea:
03:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7B:AB:4D:0F:74:A0:7A:BB:56:24:0A:55:91:16:AE:37:D8:3E:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C530EA3CDC0611EF8902F364762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:73:0e:3a:64:6e:a9:f7:74:75:75:eb:0d:4c:73:0e:2f:ac:
71:92:a0:54:38:2e:f0:3a:0a:0b:2b:ac:75:58:70:17:bc:bc:
04:db:ab:0f:d1:cd:29:71:55:b9:09:6d:79:1e:6e:17:2e:7d:
39:85:8f:94:46:ba:78:dc:4d:25:de:17:80:01:91:9f:e4:96:
60:ef:57:70:2f:20:01:59:f3:08:0c:f3:0b:06:f9:26:92:56:
bb:91:aa:06:ec:d1:70:df:b1:90:48:a5:f3:a4:cb:cf:fc:50:
03:87:5c:b9:8a:a6:77:e3:51:de:1f:5d:50:03:20:e9:19:5f:
85:d9:30:fc:31:60:e6:2f:13:95:87:c3:14:9d:e1:4a:9d:82:
2f:dd:aa:e9:e3:69:fe:d8:56:d8:11:a5:00:ac:51:d8:a8:db:
96:de:ef:07:07:6f:a6:55:ee:94:ef:13:d3:65:b6:0a:d8:e0:
f5:d6:d5:b9:dc:29:00:b0:2c:fb:8a:96:fb:f2:44:28:8b:af:
2c:f1:e3:79:10:e5:ff:de:8f:a8:ac:62:72:5d:4d:2e:ba:a2:
a0:3a:49:6f:c9:da:32:40:ef:1c:f3:ba:b3:29:d6:a9:76:77:
56:c9:28:74:d0:61:35:46:c5:df:41:46:eb:9a:75:5b:b7:88:
bb:5d:2f:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUsGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI2MTY1ODI3WhcNMjUwMjIwMTY1ODI3WjAYMRYw
FAYDVQQDEw02Nzk2NjliNy00ZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw2Xm9CMwPpPvhIGj1rX01rl/RimibpNk1xcLV8gIh6se8SCkgpabCztn
YUxZroo/MN0L68BOjVRIsr2zVFOo+Au834ZMY4q5rAtsNN0tvMJ775WdhAGZL2XP
yS6QulGZJ2quv7mMMAGsd2VLid9mVvlwMWpnTuXI7kNVzIO4+OjOSoJeTY7wMALH
jmzniMqg/3U9ON9++GryZPCv1fbX1gQKmmU+Z18wNuNyhoxvPXgl5pU0v+Mavqnr
jUK+vyrVinVgDHLHR+YQ4FBP8v8TlFstpHYZDF0RD9Pis/T8YIomIaH4IuDMvrxy
LiC19GexHqHaHAaKBQr+UmWUx+oDswIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHx7
q00PdKB6u1YkClWRFq432D4HMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNTMwRUEzQ0RDMDYxMUVGODkwMkYzNjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlZcMA0GCSqGSIb3DQEB
CwUAA4IBAQCmcw46ZG6p93R1desNTHMOL6xxkqBUOC7wOgoLK6x1WHAXvLwE26sP
0c0pcVW5CW15Hm4XLn05hY+URrp43E0l3heAAZGf5JZg71dwLyABWfMIDPMLBvkm
kla7kaoG7NFw37GQSKXzpMvP/FADh1y5iqZ341HeH11QAyDpGV+F2TD8MWDmLxOV
h8MUneFKnYIv3arp42n+2FbYEaUArFHYqNuW3u8HB2+mVe6U7xPTZbYK2OD11tW5
3CkAsCz7ipb78kQoi68s8eN5EOX/3o+orGJyXU0uuqKgOklvydoyQO8c87qzKdap
dndWySh00GE1RsXfQUbrmnVbt4i7XS+O
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:44 2025 by rpki-client