Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7287182DA4611EFAB34C094762E951A.roa
File: C7287182DA4611EFAB34C094762E951A.roa (raw, json)
Hash identifier: 2NsJ3abQRaVv8aTBNnXFR3HbZnCWNflyAyxLatqD6jw=
Subject key identifier: 64:66:6A:7D:CF:78:54:30:7D:F1:4C:08:AF:94:EC:8E:F9:E4:00:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014617
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7287182DA4611EFAB34C094762E951A.roa
Signing time: Fri 24 Jan 2025 11:31:40 +0000
ROA not before: Fri 24 Jan 2025 11:31:36 +0000
ROA not after: Fri 28 Feb 2025 11:31:36 +0000
asID: 62240
IP address blocks: 154.196.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83479 (0x14617)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:31:36 2025 GMT
Not After : Feb 28 11:31:36 2025 GMT
Subject: CN=67937a1b-15b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:03:82:01:95:5a:79:74:9d:58:0e:59:3f:
8a:ea:a9:bc:43:5f:f5:18:c8:ff:e9:58:75:8a:66:
33:c0:b4:d4:bb:c7:7f:88:6f:de:dd:53:a8:be:29:
52:48:1a:18:7b:39:2e:f2:40:7c:f1:8b:38:c7:8d:
2e:82:fd:a0:12:f8:c0:c4:16:94:ab:b1:1d:ce:b3:
45:f8:6c:57:11:49:3b:bc:04:3f:fd:d1:b3:99:71:
12:75:7e:15:64:01:19:43:f1:5a:e2:5f:20:a3:ec:
53:7e:88:64:d8:06:3f:2c:9f:13:aa:64:bb:e3:45:
bf:61:be:e3:eb:04:d3:fd:89:e6:8d:b2:16:c1:ca:
e1:21:af:77:5c:6a:af:12:a9:48:75:1c:54:b2:64:
58:25:df:32:25:96:cd:8c:c7:73:e7:5b:35:aa:47:
2f:e5:ad:20:2e:db:d9:03:43:17:cd:dd:df:2d:f1:
6b:b8:f8:16:ea:77:9d:e0:58:16:67:b4:fc:7b:81:
3c:db:07:1c:11:c2:45:19:bf:b4:8e:e4:6c:45:1b:
d3:e5:1c:82:00:48:35:08:85:82:ef:e1:f8:93:10:
6e:84:61:78:65:a4:ee:0d:08:d2:4d:66:72:91:5b:
eb:d3:52:48:9f:65:a1:75:81:86:18:a2:6c:7e:81:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:66:6A:7D:CF:78:54:30:7D:F1:4C:08:AF:94:EC:8E:F9:E4:00:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7287182DA4611EFAB34C094762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.85.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ea:8e:47:58:5e:fa:46:66:eb:e1:65:41:0a:cf:a6:85:27:
7f:9e:13:b4:12:0e:05:92:87:57:0b:b8:d5:8f:da:1c:76:83:
19:93:fd:bf:32:04:9a:e0:82:85:02:28:9c:d9:5a:19:81:1d:
90:3b:83:8e:fa:d2:3a:df:32:29:50:5a:d6:bf:63:6b:ac:c7:
62:76:1c:d9:9c:1d:fd:61:01:04:8e:9b:ea:84:35:7c:e6:1c:
d0:42:41:7e:7c:57:4a:2e:3b:01:f6:6e:1f:61:6c:1d:b0:78:
5f:58:12:4d:86:22:ff:18:87:fc:c3:bd:64:3b:ef:10:e3:13:
0c:c6:12:39:65:e6:93:fa:2d:67:bb:f6:25:0e:e9:3c:de:05:
d3:37:8a:06:4c:8b:47:5e:7c:97:bd:4b:21:f3:2f:f0:39:03:
0d:49:3d:80:b3:fe:a4:30:7a:66:21:94:d2:3f:cc:d8:1d:31:
f4:03:4d:9f:0c:e8:fe:41:41:1e:37:6d:99:c2:fc:28:e2:26:
89:dc:05:bc:bc:6f:7b:92:7e:b1:1c:5c:1f:7f:6e:1a:a5:d2:
6b:2b:da:4d:ff:48:e0:77:3e:a8:1a:da:a8:34:6b:87:4d:60:
14:ed:4b:5d:82:80:cf:8a:6f:00:5c:24:ae:6a:ff:dd:b4:84:
a6:cc:38:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUYXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTEzMTM2WhcNMjUwMjI4MTEzMTM2WjAYMRYw
FAYDVQQDEw02NzkzN2ExYi0xNWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmu0DggGVWnl0nVgOWT+K6qm8Q1/1GMj/6Vh1imYzwLTUu8d/iG/e3VOo
vilSSBoYezku8kB88Ys4x40ugv2gEvjAxBaUq7EdzrNF+GxXEUk7vAQ//dGzmXES
dX4VZAEZQ/Fa4l8go+xTfohk2AY/LJ8TqmS740W/Yb7j6wTT/YnmjbIWwcrhIa93
XGqvEqlIdRxUsmRYJd8yJZbNjMdz51s1qkcv5a0gLtvZA0MXzd3fLfFruPgW6ned
4FgWZ7T8e4E82wccEcJFGb+0juRsRRvT5RyCAEg1CIWC7+H4kxBuhGF4ZaTuDQjS
TWZykVvr01JIn2WhdYGGGKJsfoER2QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGRm
an3PeFQwffFMCK+U7I755AARMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNzI4NzE4MkRBNDYxMUVGQUIzNEMwOTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsRVMA0GCSqGSIb3DQEB
CwUAA4IBAQB96o5HWF76Rmbr4WVBCs+mhSd/nhO0Eg4FkodXC7jVj9ocdoMZk/2/
MgSa4IKFAiic2VoZgR2QO4OO+tI63zIpUFrWv2NrrMdidhzZnB39YQEEjpvqhDV8
5hzQQkF+fFdKLjsB9m4fYWwdsHhfWBJNhiL/GIf8w71kO+8Q4xMMxhI5ZeaT+i1n
u/YlDuk83gXTN4oGTItHXnyXvUsh8y/wOQMNST2As/6kMHpmIZTSP8zYHTH0A02f
DOj+QUEeN22Zwvwo4iaJ3AW8vG97kn6xHFwff24apdJrK9pN/0jgdz6oGtqoNGuH
TWAU7UtdgoDPim8AXCSuav/dtISmzDgx
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:08 2025 by rpki-client