Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D68ECDFEDCC811EFAC530282762E951A.roa
File: D68ECDFEDCC811EFAC530282762E951A.roa (raw, json)
Hash identifier: xA0FcIuNUfDn0EJyc/jYMYzVL2KeJ5PIV0WZrDyepxM=
Subject key identifier: C5:F1:A1:16:4F:64:B7:35:EA:5D:D7:33:7C:6D:86:66:7E:0D:91:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C65
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D68ECDFEDCC811EFAC530282762E951A.roa
Signing time: Mon 27 Jan 2025 16:07:43 +0000
ROA not before: Mon 27 Jan 2025 16:07:38 +0000
ROA not after: Wed 12 Feb 2025 16:07:38 +0000
asID: 138456
IP address blocks: 154.194.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85093 (0x14c65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 16:07:38 2025 GMT
Not After : Feb 12 16:07:38 2025 GMT
Subject: CN=6797af4e-611f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:88:dd:ac:34:48:3c:58:87:e2:01:a3:dd:
32:a7:63:49:9d:56:60:ab:7d:ce:aa:b4:5f:4f:5f:
62:dd:6f:8f:8b:c1:be:b4:64:d7:30:af:6a:b9:72:
53:06:ab:d7:02:c7:b6:d7:6a:cd:e0:1f:59:45:18:
38:d1:62:e0:b2:d3:ea:e4:5a:4b:40:0e:96:44:24:
eb:82:b5:01:89:fb:23:96:c7:1b:98:52:2a:f5:4c:
a4:ac:7b:6d:92:d3:cb:f8:b7:77:9c:87:0c:55:2d:
94:8c:54:e9:48:43:55:b9:cf:7c:43:20:9f:f1:1a:
6d:15:fa:1d:c0:06:1f:76:15:b7:82:fc:3d:4e:51:
22:45:26:8e:78:d3:a3:5f:b2:53:8f:d7:5c:52:48:
36:6d:cf:33:37:f1:53:0f:26:67:1f:52:02:66:97:
bb:70:b7:5b:c8:56:ab:cd:ec:98:ae:05:25:35:be:
f4:2d:67:28:7c:9b:e9:86:bf:e3:08:22:55:eb:03:
b6:08:bf:96:53:08:4f:65:18:d2:0c:47:9b:7b:95:
af:b8:6a:5e:60:97:55:54:87:71:8f:be:a9:0a:6e:
0e:3a:d4:de:4e:dc:c9:2b:4a:56:95:bb:3c:70:8f:
b6:02:25:30:be:4a:a2:d8:43:26:7f:e8:92:b3:38:
37:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F1:A1:16:4F:64:B7:35:EA:5D:D7:33:7C:6D:86:66:7E:0D:91:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D68ECDFEDCC811EFAC530282762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.41.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:8b:ee:9a:0a:2b:7a:37:d9:f3:ae:37:e3:3a:ec:7f:4b:a9:
bc:41:3d:21:92:a9:ab:9c:7d:a9:b6:02:c4:f6:00:d5:29:3a:
a1:36:0a:bc:09:18:2d:2f:db:ad:8f:14:85:e8:0a:32:10:4b:
e0:c9:1c:cd:f1:9a:9f:ab:12:32:1d:77:66:b9:9e:3c:77:3e:
24:9a:bd:c3:20:69:90:5d:36:35:b0:73:ae:08:6a:2c:bf:fd:
c9:86:ce:c3:c2:fc:2f:35:44:bf:df:9a:9c:f4:51:b9:d9:5e:
63:1e:46:bf:79:b9:cb:1d:4c:14:16:d1:5a:59:65:6b:54:89:
e5:97:6d:b9:62:ae:ad:76:00:2e:40:00:ec:f2:86:d6:df:2e:
dd:b3:74:07:bd:d1:aa:d4:6a:1e:bd:3f:79:f2:69:b0:b5:ac:
5f:ef:3c:9d:ac:05:63:c4:b2:58:44:59:a2:1a:e0:04:e5:1d:
ab:dd:ba:0a:f3:38:c3:ec:1f:3a:d5:75:d7:a0:9e:c1:3b:59:
c3:3d:cd:29:b5:1b:9b:41:71:84:b4:d2:40:7e:0e:c0:a6:c9:
04:00:a1:72:50:ab:9e:96:32:8a:bf:f3:a6:31:2b:40:94:6b:
4d:82:4e:2d:1d:3b:27:05:89:50:c6:0a:d1:af:44:f5:9a:24:
a0:8f:41:ec
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUxlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI3MTYwNzM4WhcNMjUwMjEyMTYwNzM4WjAYMRYw
FAYDVQQDEw02Nzk3YWY0ZS02MTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyDOI3aw0SDxYh+IBo90yp2NJnVZgq33OqrRfT19i3W+Pi8G+tGTXMK9q
uXJTBqvXAse212rN4B9ZRRg40WLgstPq5FpLQA6WRCTrgrUBifsjlscbmFIq9Uyk
rHttktPL+Ld3nIcMVS2UjFTpSENVuc98QyCf8RptFfodwAYfdhW3gvw9TlEiRSaO
eNOjX7JTj9dcUkg2bc8zN/FTDyZnH1ICZpe7cLdbyFarzeyYrgUlNb70LWcofJvp
hr/jCCJV6wO2CL+WUwhPZRjSDEebe5WvuGpeYJdVVIdxj76pCm4OOtTeTtzJK0pW
lbs8cI+2AiUwvkqi2EMmf+iSszg3+wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMXx
oRZPZLc16l3XM3xthmZ+DZFxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENjhFQ0RGRURDQzgxMUVGQUM1MzAyODI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsIpMA0GCSqGSIb3DQEB
CwUAA4IBAQBdi+6aCit6N9nzrjfjOux/S6m8QT0hkqmrnH2ptgLE9gDVKTqhNgq8
CRgtL9utjxSF6AoyEEvgyRzN8ZqfqxIyHXdmuZ48dz4kmr3DIGmQXTY1sHOuCGos
v/3Jhs7DwvwvNUS/35qc9FG52V5jHka/ebnLHUwUFtFaWWVrVInll225Yq6tdgAu
QADs8obW3y7ds3QHvdGq1GoevT958mmwtaxf7zydrAVjxLJYRFmiGuAE5R2r3boK
8zjD7B861XXXoJ7BO1nDPc0ptRubQXGEtNJAfg7ApskEAKFyUKueljKKv/OmMStA
lGtNgk4tHTsnBYlQxgrRr0T1miSgj0Hs
-----END CERTIFICATE-----
Generated at Tue Apr 29 01:01:35 2025 by rpki-client