Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCD1369EDA5711EFA1E78689762E951A.roa
File: CCD1369EDA5711EFA1E78689762E951A.roa (raw, json)
Hash identifier: N89rYjEIZlyMHShzTtLrIhS03NkFU9xfZIqfq39ZLps=
Subject key identifier: 06:5E:89:F6:FA:ED:0C:A6:4E:2F:CB:44:31:41:06:BC:CF:79:67:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014785
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCD1369EDA5711EFA1E78689762E951A.roa
Signing time: Fri 24 Jan 2025 13:33:30 +0000
ROA not before: Fri 24 Jan 2025 13:33:27 +0000
ROA not after: Fri 28 Feb 2025 13:33:27 +0000
asID: 62240
IP address blocks: 154.194.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83845 (0x14785)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:33:27 2025 GMT
Not After : Feb 28 13:33:27 2025 GMT
Subject: CN=679396aa-290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:7c:c9:25:cc:27:fd:90:8e:1e:38:f4:9b:
e8:23:e4:29:19:e4:aa:80:5a:1a:d7:59:ad:56:26:
99:86:cc:42:56:af:ac:47:6d:b0:6d:1d:99:be:58:
18:9c:58:9a:d3:7a:f1:74:bf:e0:22:ac:53:0b:c4:
be:18:cc:b8:3c:28:f2:05:d9:9d:21:b8:43:95:5d:
4a:9f:de:84:f6:7a:43:e1:25:f5:d1:69:3d:9b:92:
31:41:79:51:66:17:47:4b:97:ee:c4:fe:ca:cf:d0:
41:59:e4:ff:c9:68:81:2b:a1:e5:66:d5:3f:e1:ef:
5c:e3:b2:d1:3b:a5:dd:d4:02:01:ec:2f:65:bb:4a:
cf:c0:21:1d:d0:82:a2:3c:a9:ef:66:0a:8d:f4:9f:
15:5d:40:41:ab:28:55:c1:ec:d1:38:db:f0:db:46:
73:4d:c4:2f:52:36:17:17:48:7f:9e:b7:14:2d:82:
d6:2b:a1:1e:ff:0d:83:58:d5:df:9f:00:21:ce:21:
a2:e6:ba:26:bd:04:46:d5:da:43:f8:8f:af:a6:a6:
c5:01:78:05:1e:a1:1b:64:c9:96:8c:0d:1d:75:e3:
a7:e2:ac:79:0a:f2:71:0d:dd:5d:5a:90:5a:5c:64:
86:5d:c5:4f:7a:d4:d5:09:d6:68:d3:a4:d8:e5:f2:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5E:89:F6:FA:ED:0C:A6:4E:2F:CB:44:31:41:06:BC:CF:79:67:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCD1369EDA5711EFA1E78689762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.4.0/24
Signature Algorithm: sha256WithRSAEncryption
91:5d:fe:5a:d5:ad:6e:9a:76:8f:3d:de:5c:33:2d:6a:46:76:
52:46:bd:eb:22:c1:4e:51:2e:ed:3d:7d:ff:b3:59:7c:d9:76:
50:3d:cd:6b:fe:1f:f5:fd:c1:71:f4:00:45:17:a3:a6:8c:7c:
b8:bf:e0:97:2b:bb:eb:84:d7:ac:48:a8:08:7b:25:04:75:d9:
a1:0d:89:e1:27:7d:f4:11:6b:c1:8e:35:15:da:b9:17:28:88:
58:b3:d1:20:12:9d:1a:bb:ae:0d:59:72:27:9f:38:7d:ec:9b:
2c:db:9a:08:57:05:d4:a9:4e:64:a0:a4:1c:66:20:5c:2c:83:
e1:00:b9:bc:88:8d:e9:72:56:51:f7:54:ea:1f:80:dd:3e:d0:
10:5d:e6:f8:0a:2e:46:7b:47:d0:8b:0d:24:d0:0b:73:b5:4c:
8d:1b:65:d1:9c:02:ab:40:b6:a8:9c:53:94:1e:0d:22:dd:87:
fb:e1:72:16:2c:94:40:94:4f:c7:3e:d2:5c:08:7a:3b:c5:1a:
57:ac:9d:75:7e:07:b9:67:ed:cb:87:c2:d3:ce:8f:3e:13:ad:
54:90:9c:5e:6a:ae:91:cf:cd:a4:93:d2:14:f4:86:a4:f8:d0:
32:b2:5d:55:e0:9c:e4:81:dd:ed:63:0f:e9:20:2c:f5:3a:11:
ea:de:36:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUeFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTMzMzI3WhcNMjUwMjI4MTMzMzI3WjAYMRYw
FAYDVQQDEw02NzkzOTZhYS0yOTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1/J8ySXMJ/2Qjh449JvoI+QpGeSqgFoa11mtViaZhsxCVq+sR22wbR2Z
vlgYnFia03rxdL/gIqxTC8S+GMy4PCjyBdmdIbhDlV1Kn96E9npD4SX10Wk9m5Ix
QXlRZhdHS5fuxP7Kz9BBWeT/yWiBK6HlZtU/4e9c47LRO6Xd1AIB7C9lu0rPwCEd
0IKiPKnvZgqN9J8VXUBBqyhVwezRONvw20ZzTcQvUjYXF0h/nrcULYLWK6Ee/w2D
WNXfnwAhziGi5romvQRG1dpD+I+vpqbFAXgFHqEbZMmWjA0ddeOn4qx5CvJxDd1d
WpBaXGSGXcVPetTVCdZo06TY5fI8YwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAZe
ifb67QymTi/LRDFBBrzPeWc0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQ0QxMzY5RURBNTcxMUVGQTFFNzg2ODk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsIEMA0GCSqGSIb3DQEB
CwUAA4IBAQCRXf5a1a1umnaPPd5cMy1qRnZSRr3rIsFOUS7tPX3/s1l82XZQPc1r
/h/1/cFx9ABFF6OmjHy4v+CXK7vrhNesSKgIeyUEddmhDYnhJ330EWvBjjUV2rkX
KIhYs9EgEp0au64NWXInnzh97Jss25oIVwXUqU5koKQcZiBcLIPhALm8iI3pclZR
91TqH4DdPtAQXeb4Ci5Ge0fQiw0k0AtztUyNG2XRnAKrQLaonFOUHg0i3Yf74XIW
LJRAlE/HPtJcCHo7xRpXrJ11fge5Z+3Lh8LTzo8+E61UkJxeaq6Rz82kk9IU9Iak
+NAysl1V4Jzkgd3tYw/pICz1OhHq3jZA
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:04 2025 by rpki-client