Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCA0A744B20C11EF83743C4F762E951A.roa
File: DCA0A744B20C11EF83743C4F762E951A.roa (raw, json)
Hash identifier: Hn76XsAN5HpNXNWdYLRTGw1DheQHFCxeEU5yC/o4qP8=
Subject key identifier: 93:8D:87:41:51:00:77:14:F5:C6:E9:D6:43:48:A9:B2:F4:82:E5:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011796
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCA0A744B20C11EF83743C4F762E951A.roa
Signing time: Wed 04 Dec 2024 06:56:18 +0000
ROA not before: Wed 04 Dec 2024 06:56:15 +0000
ROA not after: Fri 14 Feb 2025 06:56:15 +0000
asID: 135097
IP address blocks: 154.197.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71574 (0x11796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 06:56:15 2024 GMT
Not After : Feb 14 06:56:15 2025 GMT
Subject: CN=674ffd12-07fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:43:94:4a:d9:95:d8:71:ad:16:c4:c7:78:
6c:d1:2e:23:97:a4:a8:2b:74:a8:a5:a4:9a:36:34:
37:fa:38:b6:1e:0a:d0:cc:53:91:6c:2c:77:b4:1c:
89:73:91:df:8c:71:89:8e:e4:93:76:b9:51:af:e4:
ac:7b:05:cf:73:05:4c:34:d6:b3:bb:24:9e:0e:dc:
46:4a:2d:46:98:c2:c5:47:fd:1f:55:62:70:84:e3:
65:f3:aa:0e:70:d5:28:b3:3b:41:13:ed:e2:ff:4d:
66:57:b4:53:9f:8e:ff:48:d7:46:0f:38:91:c7:f8:
29:11:03:b5:04:39:ad:ae:1f:84:d8:a9:7f:38:0d:
d6:6b:4c:92:93:97:44:e0:89:77:33:78:9c:f7:d0:
1d:63:0e:a0:ba:a2:8b:0a:9a:b7:72:da:a6:28:c9:
19:20:f6:ba:29:c2:89:5d:88:c2:64:94:04:0e:48:
60:22:a6:63:9b:c4:b8:2a:2c:0b:64:46:f8:09:34:
6e:ed:22:e1:c7:64:ed:40:bb:b2:83:9a:83:47:de:
2f:13:59:a0:41:95:86:f0:c7:96:b7:42:33:b6:c0:
bd:8c:08:7c:62:e2:c7:0c:9e:be:05:32:b3:f7:1b:
21:ec:58:ad:5e:0a:d5:73:41:ad:9c:72:84:cf:b8:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8D:87:41:51:00:77:14:F5:C6:E9:D6:43:48:A9:B2:F4:82:E5:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCA0A744B20C11EF83743C4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.208.0/20
Signature Algorithm: sha256WithRSAEncryption
73:80:4f:79:4e:96:ba:20:18:07:ed:21:5b:34:8e:69:80:e1:
4d:76:dd:ea:3e:07:68:e7:95:2a:b3:f1:23:43:f1:9b:eb:5d:
89:74:4b:f0:19:1f:f0:9a:da:2a:c1:ec:06:7a:51:c7:3e:31:
c8:7f:2a:9c:5b:80:70:78:31:4f:79:27:7c:ee:ed:e1:f9:a8:
25:a0:5c:33:ee:56:e6:43:e8:53:87:2c:5d:59:27:bb:88:c2:
92:6d:f6:74:11:eb:0f:00:b7:9e:01:0a:52:09:d9:6d:d8:de:
ba:4b:58:95:84:80:70:33:54:fe:47:b8:4b:51:84:e1:87:d8:
1e:85:70:12:60:a3:6f:07:d2:de:51:95:b8:bc:bd:48:96:57:
12:9b:b4:78:d7:1f:64:c4:e1:fd:f8:2f:59:46:01:d3:cc:16:
5d:a3:63:20:cf:bc:b6:ff:b9:16:98:ca:c0:9e:10:4d:f4:38:
79:85:3f:88:98:7a:3e:af:3e:dd:9f:f8:27:a8:7d:10:b3:52:
e4:42:62:9e:e5:67:3b:0f:60:fe:9c:f7:fb:2c:39:b8:15:bf:
ec:f6:a2:fe:0a:13:4f:10:42:0d:c7:fe:ab:80:51:58:ca:ec:
a6:14:a3:e0:73:da:be:5f:2c:f4:00:a5:00:cf:84:04:3a:e1:
01:dc:33:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAReWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjA0MDY1NjE1WhcNMjUwMjE0MDY1NjE1WjAYMRYw
FAYDVQQDEw02NzRmZmQxMi0wN2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApl9DlErZldhxrRbEx3hs0S4jl6SoK3SopaSaNjQ3+ji2HgrQzFORbCx3
tByJc5HfjHGJjuSTdrlRr+SsewXPcwVMNNazuySeDtxGSi1GmMLFR/0fVWJwhONl
86oOcNUosztBE+3i/01mV7RTn47/SNdGDziRx/gpEQO1BDmtrh+E2Kl/OA3Wa0yS
k5dE4Il3M3ic99AdYw6guqKLCpq3ctqmKMkZIPa6KcKJXYjCZJQEDkhgIqZjm8S4
KiwLZEb4CTRu7SLhx2TtQLuyg5qDR94vE1mgQZWG8MeWt0IztsC9jAh8YuLHDJ6+
BTKz9xsh7FitXgrVc0GtnHKEz7iWmQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJON
h0FRAHcU9cbp1kNIqbL0guWsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQ0EwQTc0NEIyMEMxMUVGODM3NDNDNEY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmsXQMA0GCSqGSIb3DQEB
CwUAA4IBAQBzgE95Tpa6IBgH7SFbNI5pgOFNdt3qPgdo55Uqs/EjQ/Gb612JdEvw
GR/wmtoqwewGelHHPjHIfyqcW4BweDFPeSd87u3h+agloFwz7lbmQ+hThyxdWSe7
iMKSbfZ0EesPALeeAQpSCdlt2N66S1iVhIBwM1T+R7hLUYThh9gehXASYKNvB9Le
UZW4vL1IllcSm7R41x9kxOH9+C9ZRgHTzBZdo2Mgz7y2/7kWmMrAnhBN9Dh5hT+I
mHo+rz7dn/gnqH0Qs1LkQmKe5Wc7D2D+nPf7LDm4Fb/s9qL+ChNPEEINx/6rgFFY
yuymFKPgc9q+Xyz0AKUAz4QEOuEB3DN7
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:34 2025 by rpki-client