Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C74899C8DD5A11EF89881460762E951A.roa
File: C74899C8DD5A11EF89881460762E951A.roa (raw, json)
Hash identifier: YVrJQyMiVqrYK0FbXw2NaJslBe8hb6asxFQaepgULlo=
Subject key identifier: DE:C7:5C:68:95:DC:0D:59:A1:02:2D:32:C1:A9:12:78:88:0C:7F:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C74899C8DD5A11EF89881460762E951A.roa
Signing time: Tue 28 Jan 2025 09:32:23 +0000
ROA not before: Tue 28 Jan 2025 09:32:19 +0000
ROA not after: Tue 04 Feb 2025 09:32:19 +0000
asID: 5065
IP address blocks: 154.206.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85152 (0x14ca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 09:32:19 2025 GMT
Not After : Feb 4 09:32:19 2025 GMT
Subject: CN=6798a427-ee21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:77:78:26:8d:38:be:51:50:fa:2d:ff:f6:
6d:2c:c5:89:98:05:56:ae:0d:5b:94:35:d6:2e:80:
4c:bd:c7:36:8a:d9:77:b3:23:99:73:6e:3b:fd:96:
59:e0:31:8a:cf:bd:53:df:96:70:31:3b:04:bc:4e:
54:c5:e5:12:78:df:6f:04:e7:c0:69:d7:29:74:94:
8b:9e:e3:f6:87:4b:92:e8:de:64:56:f6:4d:39:fd:
77:ca:4d:d5:82:9e:a0:7b:92:21:a8:31:d0:a8:54:
3f:05:eb:a8:83:fb:9c:9d:5d:ff:ff:2a:9d:27:b1:
9a:86:e7:da:e1:68:49:50:ad:8c:0a:cb:d8:76:5f:
b0:b2:ca:fd:af:a6:ad:80:71:14:b7:1b:d1:10:74:
52:82:69:8c:44:64:27:a0:d6:62:69:d4:f4:16:4c:
24:a8:0e:fc:9f:9f:87:d8:7d:9d:01:49:37:8c:7d:
0b:cc:11:b3:6c:db:b3:6d:3a:0b:61:e9:58:56:a8:
d7:a7:1e:4f:79:d3:e3:68:86:34:23:b9:16:c8:d1:
6e:bd:34:e2:f4:12:9a:21:60:7f:5c:ea:ce:ae:f7:
00:e3:1c:d7:07:7b:bc:52:1b:7f:12:04:5e:63:b5:
a7:64:b1:db:a0:bf:13:47:c0:bc:db:30:72:6b:7d:
61:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C7:5C:68:95:DC:0D:59:A1:02:2D:32:C1:A9:12:78:88:0C:7F:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C74899C8DD5A11EF89881460762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.37.0/24
Signature Algorithm: sha256WithRSAEncryption
19:82:96:27:ca:06:86:40:8b:cc:3c:3f:a6:7b:74:90:53:bb:
58:30:0c:32:db:1d:60:68:c2:05:c6:cf:0b:3c:9d:92:af:27:
b3:5f:aa:5d:b9:a9:51:13:b7:7b:eb:c5:d9:38:e5:2a:b2:83:
f3:51:e1:a8:e6:46:91:79:00:f6:61:0b:93:93:dc:2a:4e:66:
1b:d8:51:6a:8d:c7:5a:8a:88:da:4b:ff:6f:58:c6:7e:4b:f3:
6f:eb:bd:ff:99:79:3d:07:29:ee:ea:61:0e:2e:11:a1:dd:1a:
58:85:c8:7a:99:fb:68:4b:f8:4c:c5:0c:fd:a6:ba:e5:9c:9d:
17:2d:d8:64:8f:6d:6d:33:7e:55:06:04:c1:1c:93:d6:d4:e8:
16:5b:81:75:f3:6c:fe:a9:a4:0e:d8:d8:97:e9:de:4b:5d:a4:
c8:54:b6:3b:c7:36:e7:12:45:b4:16:09:08:2f:59:80:9a:a6:
c4:82:34:37:91:0d:ce:ba:9f:35:08:90:9b:a8:95:67:58:8e:
92:4f:c4:0d:9b:7b:b2:31:ca:a9:78:97:02:e4:db:3a:dc:18:
f7:b7:d1:70:93:71:77:2f:70:32:16:e4:eb:91:dc:9f:ce:7e:
f1:6e:51:cd:38:fc:be:5f:d1:1a:41:f3:77:7a:68:2e:de:88:
bd:6a:4b:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUygMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI4MDkzMjE5WhcNMjUwMjA0MDkzMjE5WjAYMRYw
FAYDVQQDEw02Nzk4YTQyNy1lZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw493eCaNOL5RUPot//ZtLMWJmAVWrg1blDXWLoBMvcc2itl3syOZc247
/ZZZ4DGKz71T35ZwMTsEvE5UxeUSeN9vBOfAadcpdJSLnuP2h0uS6N5kVvZNOf13
yk3Vgp6ge5IhqDHQqFQ/Beuog/ucnV3//yqdJ7Gahufa4WhJUK2MCsvYdl+wssr9
r6atgHEUtxvREHRSgmmMRGQnoNZiadT0FkwkqA78n5+H2H2dAUk3jH0LzBGzbNuz
bToLYelYVqjXpx5PedPjaIY0I7kWyNFuvTTi9BKaIWB/XOrOrvcA4xzXB3u8Uht/
EgReY7WnZLHboL8TR8C82zBya31h+QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN7H
XGiV3A1ZoQItMsGpEniIDH8XMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNzQ4OTlDOERENUExMUVGODk4ODE0NjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4lMA0GCSqGSIb3DQEB
CwUAA4IBAQAZgpYnygaGQIvMPD+me3SQU7tYMAwy2x1gaMIFxs8LPJ2SryezX6pd
ualRE7d768XZOOUqsoPzUeGo5kaReQD2YQuTk9wqTmYb2FFqjcdaiojaS/9vWMZ+
S/Nv673/mXk9Bynu6mEOLhGh3RpYhch6mftoS/hMxQz9prrlnJ0XLdhkj21tM35V
BgTBHJPW1OgWW4F182z+qaQO2NiX6d5LXaTIVLY7xzbnEkW0FgkIL1mAmqbEgjQ3
kQ3Oup81CJCbqJVnWI6ST8QNm3uyMcqpeJcC5Ns63Bj3t9Fwk3F3L3AyFuTrkdyf
zn7xblHNOPy+X9EaQfN3emgu3oi9akt3
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:14 2025 by rpki-client