Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA272514C6CC11EF9D6214B9762E951A.roa
File: CA272514C6CC11EF9D6214B9762E951A.roa (raw, json)
Hash identifier: a5tTvaFWPGoxkmjznrR0784o/nn4izVNlWdeQ1UDX/A=
Subject key identifier: 5A:E9:5C:32:1C:1C:F2:DA:71:4B:27:26:EF:14:FA:44:39:B0:8A:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0130E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA272514C6CC11EF9D6214B9762E951A.roa
Signing time: Mon 30 Dec 2024 16:40:34 +0000
ROA not before: Mon 30 Dec 2024 16:40:30 +0000
ROA not after: Sun 02 Feb 2025 16:40:30 +0000
asID: 54600
IP address blocks: 154.202.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78052 (0x130e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 30 16:40:30 2024 GMT
Not After : Feb 2 16:40:30 2025 GMT
Subject: CN=6772cd02-8f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:20:34:b5:f6:2c:17:53:9d:56:35:34:1f:
40:dc:9c:bc:4b:b2:2c:18:a7:f4:ab:06:14:77:cb:
c6:d7:6b:5b:ff:7e:b5:c2:22:a3:ec:d9:67:4d:3f:
ca:78:c3:98:c8:13:03:a8:ac:b3:70:c7:82:ee:1f:
24:63:9a:03:89:9f:06:f9:80:55:de:e3:13:2b:67:
49:c3:a9:17:09:7c:66:72:48:a0:0f:fe:69:10:f5:
43:02:da:19:82:ba:bc:5c:bf:8d:c2:a8:fb:fe:07:
b4:9f:84:b2:bf:95:88:1c:53:f9:0c:fe:47:78:88:
82:90:a7:ea:21:47:03:cf:3a:4b:aa:f2:9d:d2:93:
26:ed:50:2d:ad:5e:72:80:36:04:15:5f:f0:ea:5b:
86:e4:d2:a8:86:77:f9:17:11:31:b4:bf:4e:d2:fe:
ff:72:8c:ba:21:62:f2:2d:32:09:43:8c:15:3b:0c:
0b:0b:fc:23:55:83:f7:3c:6f:82:25:e2:66:6d:fe:
82:a5:61:18:90:0d:06:25:c3:ea:bd:d4:b4:19:67:
df:99:58:a5:6f:d1:58:df:95:8f:0e:3f:ae:52:7d:
c8:b4:e8:8a:95:9e:f6:58:04:f2:bb:4b:b2:d6:38:
41:d8:52:e6:f2:67:42:da:4c:4d:06:ba:ab:17:53:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E9:5C:32:1C:1C:F2:DA:71:4B:27:26:EF:14:FA:44:39:B0:8A:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA272514C6CC11EF9D6214B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.144.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:cf:e7:e5:58:a7:6d:86:91:2a:bf:c2:18:7d:48:e3:aa:ab:
83:02:22:32:2f:93:c4:2f:8a:37:04:33:33:2f:40:2c:25:4a:
42:8d:c2:50:42:bd:19:66:46:c3:ff:fd:82:f8:2f:29:19:21:
18:7b:67:f9:f4:f4:c1:c3:fc:1e:9b:21:8c:78:94:33:ce:38:
fd:8e:8d:dc:10:c8:c5:57:bb:37:2f:0f:fd:3e:7f:98:1d:1d:
f0:5e:d2:a3:b9:b3:5d:29:21:29:12:fd:58:8a:72:1c:49:bb:
c2:08:c9:c5:b4:a8:cf:a5:54:49:05:e8:16:31:6f:b0:8d:c7:
57:ea:dd:00:f8:69:56:cd:d7:c2:0c:99:0f:1f:8f:a1:b3:75:
93:b4:6c:5f:df:5b:41:b0:78:a3:97:23:3f:2e:cd:05:82:f6:
a0:15:d0:ca:96:09:17:8c:f8:85:cf:16:cd:a2:5d:6c:f6:d6:
00:39:c3:dd:cf:b0:6e:c0:d0:ed:ee:47:1a:41:a5:0c:52:79:
79:ca:14:00:33:9d:dc:42:12:4a:93:79:7d:4b:6b:d4:a9:d5:
ac:c7:8f:1f:b3:40:5e:0a:d6:e0:3d:dc:3f:90:ca:6c:ff:4d:
b3:9e:84:e0:a3:08:22:14:90:83:cd:ad:78:ee:96:9e:69:20:
0e:94:75:a9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATDkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjMwMTY0MDMwWhcNMjUwMjAyMTY0MDMwWjAYMRYw
FAYDVQQDEw02NzcyY2QwMi04ZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqqYgNLX2LBdTnVY1NB9A3Jy8S7IsGKf0qwYUd8vG12tb/361wiKj7Nln
TT/KeMOYyBMDqKyzcMeC7h8kY5oDiZ8G+YBV3uMTK2dJw6kXCXxmckigD/5pEPVD
AtoZgrq8XL+Nwqj7/ge0n4Syv5WIHFP5DP5HeIiCkKfqIUcDzzpLqvKd0pMm7VAt
rV5ygDYEFV/w6luG5NKohnf5FxExtL9O0v7/coy6IWLyLTIJQ4wVOwwLC/wjVYP3
PG+CJeJmbf6CpWEYkA0GJcPqvdS0GWffmVilb9FY35WPDj+uUn3ItOiKlZ72WATy
u0uy1jhB2FLm8mdC2kxNBrqrF1OwQQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFrp
XDIcHPLacUsnJu8U+kQ5sIocMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQTI3MjUxNEM2Q0MxMUVGOUQ2MjE0Qjk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmsqQMA0GCSqGSIb3DQEB
CwUAA4IBAQAtz+flWKdthpEqv8IYfUjjqquDAiIyL5PEL4o3BDMzL0AsJUpCjcJQ
Qr0ZZkbD//2C+C8pGSEYe2f59PTBw/wemyGMeJQzzjj9jo3cEMjFV7s3Lw/9Pn+Y
HR3wXtKjubNdKSEpEv1YinIcSbvCCMnFtKjPpVRJBegWMW+wjcdX6t0A+GlWzdfC
DJkPH4+hs3WTtGxf31tBsHijlyM/Ls0FgvagFdDKlgkXjPiFzxbNol1s9tYAOcPd
z7BuwNDt7kcaQaUMUnl5yhQAM53cQhJKk3l9S2vUqdWsx48fs0BeCtbgPdw/kMps
/02znoTgowgiFJCDza147paeaSAOlHWp
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:20:45 2025 by rpki-client