Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D07728ACD97711EFAD93859F762E951A.roa
File: D07728ACD97711EFAD93859F762E951A.roa (raw, json)
Hash identifier: NM+lrh0cTmuaIk5st3m90glV67LHcR0NIlyMP9zlFYA=
Subject key identifier: 26:D8:B1:8E:53:38:D7:6D:96:54:CE:D6:37:80:AB:C1:53:00:19:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01414F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D07728ACD97711EFAD93859F762E951A.roa
Signing time: Thu 23 Jan 2025 10:50:09 +0000
ROA not before: Thu 23 Jan 2025 10:50:06 +0000
ROA not after: Fri 28 Feb 2025 10:50:06 +0000
asID: 62240
IP address blocks: 154.195.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82255 (0x1414f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:50:06 2025 GMT
Not After : Feb 28 10:50:06 2025 GMT
Subject: CN=67921ee1-a884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:59:b7:02:fb:5d:6b:c5:ce:17:5b:bf:21:
e5:08:1a:b1:ca:3b:c2:aa:09:36:f9:13:bb:8d:1c:
24:b6:19:f3:c5:79:21:d9:69:1c:f0:13:b4:34:f0:
12:68:93:e0:c7:49:0a:fd:a2:ab:a4:1f:e0:99:6c:
f6:4d:94:ca:aa:01:ff:5b:41:cb:15:4d:13:46:bb:
51:e1:d2:08:f0:4d:6f:b1:68:4d:3a:da:7a:2e:96:
f9:60:e1:42:21:e9:16:b1:de:1c:4a:1e:45:c8:e6:
d2:74:0c:4c:64:ff:64:ed:0e:4f:42:ef:df:bc:b8:
06:e4:35:23:bc:a4:aa:87:a8:6c:03:60:74:4d:3a:
75:e1:3e:6a:04:e1:bf:82:b9:d0:f9:1e:b4:d0:b6:
fe:ed:63:bc:f7:a8:6a:76:84:39:3c:f0:da:6a:b9:
ad:14:ff:9e:30:92:ed:20:bb:5e:0c:34:38:95:97:
41:b4:d8:da:3a:94:65:4c:80:b6:f2:5b:e0:5e:1f:
22:58:a2:a2:cf:a3:a5:8e:34:07:2c:84:35:56:ac:
b6:b3:0b:78:3e:8f:ac:f3:2f:b5:ab:dc:8d:4b:07:
45:7d:2a:4d:69:a6:88:48:66:37:9b:fd:78:11:65:
d1:26:f0:9d:73:b7:63:cc:7b:10:7b:11:ed:b7:47:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D8:B1:8E:53:38:D7:6D:96:54:CE:D6:37:80:AB:C1:53:00:19:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D07728ACD97711EFAD93859F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.137.0/24
Signature Algorithm: sha256WithRSAEncryption
99:de:3b:2d:87:68:2c:68:5b:f8:ad:12:e7:67:b0:b0:fd:c6:
78:a4:0b:e8:06:83:16:9c:45:f0:16:81:72:1a:2f:07:8d:ce:
78:27:8a:df:13:0b:2b:fd:8b:0c:08:0e:af:fa:f1:c3:e4:7e:
3e:2f:b7:b0:07:53:20:ef:74:5a:09:98:fe:45:cf:9d:eb:12:
56:79:f2:db:47:f8:1c:47:be:2e:d9:2e:9c:e0:d5:53:43:68:
63:6f:a8:99:70:6e:80:c7:3b:22:c0:3b:0d:18:4e:27:74:5c:
4a:9e:0c:49:9f:fd:c2:f5:a6:2d:ff:46:81:aa:40:4f:7a:24:
72:7d:54:ea:29:a6:2d:c9:5f:06:6f:49:d0:a8:e3:46:90:e2:
71:ec:bc:86:40:fa:9e:07:d2:9a:3b:90:84:68:8a:c9:a9:43:
0b:ff:94:5a:ed:e5:20:c9:ba:8b:64:7b:fe:46:97:82:cd:f0:
41:50:53:df:71:49:97:85:dc:40:66:99:4a:ea:bc:c9:11:f4:
e7:b8:f8:45:ea:e4:c1:e5:04:62:6c:7a:42:5b:9f:52:f1:8f:
ef:a1:d0:7c:58:3a:07:e4:b0:f0:20:cc:b1:39:f8:40:cf:f1:
d3:25:91:6d:52:ca:15:bf:98:1f:4c:5b:bd:2c:6a:0b:22:58:
6a:d3:40:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUFPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTA1MDA2WhcNMjUwMjI4MTA1MDA2WjAYMRYw
FAYDVQQDEw02NzkyMWVlMS1hODg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0JdZtwL7XWvFzhdbvyHlCBqxyjvCqgk2+RO7jRwkthnzxXkh2Wkc8BO0
NPASaJPgx0kK/aKrpB/gmWz2TZTKqgH/W0HLFU0TRrtR4dII8E1vsWhNOtp6Lpb5
YOFCIekWsd4cSh5FyObSdAxMZP9k7Q5PQu/fvLgG5DUjvKSqh6hsA2B0TTp14T5q
BOG/grnQ+R600Lb+7WO896hqdoQ5PPDaarmtFP+eMJLtILteDDQ4lZdBtNjaOpRl
TIC28lvgXh8iWKKiz6OljjQHLIQ1Vqy2swt4Po+s8y+1q9yNSwdFfSpNaaaISGY3
m/14EWXRJvCdc7djzHsQexHtt0cm9wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCbY
sY5TONdtllTO1jeAq8FTABnDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMDc3MjhBQ0Q5NzcxMUVGQUQ5Mzg1OUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsOJMA0GCSqGSIb3DQEB
CwUAA4IBAQCZ3jsth2gsaFv4rRLnZ7Cw/cZ4pAvoBoMWnEXwFoFyGi8Hjc54J4rf
Ewsr/YsMCA6v+vHD5H4+L7ewB1Mg73RaCZj+Rc+d6xJWefLbR/gcR74u2S6c4NVT
Q2hjb6iZcG6AxzsiwDsNGE4ndFxKngxJn/3C9aYt/0aBqkBPeiRyfVTqKaYtyV8G
b0nQqONGkOJx7LyGQPqeB9KaO5CEaIrJqUML/5Ra7eUgybqLZHv+RpeCzfBBUFPf
cUmXhdxAZplK6rzJEfTnuPhF6uTB5QRibHpCW59S8Y/vodB8WDoH5LDwIMyxOfhA
z/HTJZFtUsoVv5gfTFu9LGoLIlhq00A8
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:19:05 2025 by rpki-client