Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCF33464D9D011EF9EECF26E762E951A.roa
File: DCF33464D9D011EF9EECF26E762E951A.roa (raw, json)
Hash identifier: OUdfomaEVZl2/xK6vWnX0bqG5aN2/hwxLhemNgd5j1w=
Subject key identifier: 45:6C:6E:9C:08:C1:BE:51:CB:EF:41:00:B3:1E:1F:66:53:C6:E5:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01430F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCF33464D9D011EF9EECF26E762E951A.roa
Signing time: Thu 23 Jan 2025 21:27:36 +0000
ROA not before: Fri 24 Jan 2025 21:27:31 +0000
ROA not after: Fri 28 Feb 2025 21:27:31 +0000
asID: 62240
IP address blocks: 154.196.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82703 (0x1430f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:27:31 2025 GMT
Not After : Feb 28 21:27:31 2025 GMT
Subject: CN=6792b447-a29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:1d:51:18:38:09:c1:7d:c0:0a:6b:e2:a4:
5f:8b:6b:43:7a:82:b2:3f:28:61:af:04:d6:e1:5a:
5a:b6:ba:06:c7:4c:46:af:17:17:74:11:86:86:3d:
a4:da:2f:68:14:36:d5:7a:4a:51:c7:c0:be:46:52:
ae:48:cc:70:31:ae:1e:2c:74:2b:e0:ea:90:98:0c:
3b:ce:48:bb:c7:e6:6f:1f:6f:c9:f5:52:87:e5:92:
f2:c6:e8:e5:98:a5:f8:0b:e5:d4:d8:6d:c5:98:5f:
ec:47:62:00:ca:c6:53:f8:ae:f7:1c:bb:05:4c:86:
e8:68:19:02:1d:fd:0d:1e:63:0c:fd:c2:95:d7:8e:
86:20:81:b9:73:75:30:e6:0d:a9:03:00:0e:46:7e:
03:75:48:5d:3f:a8:2b:b1:2d:0f:3e:a2:66:72:46:
2f:81:92:71:24:f8:0e:69:a9:fa:87:9a:11:a3:e9:
ad:ba:fa:1c:d8:32:d7:73:b7:8f:a5:b8:6c:c1:6e:
3e:51:1b:85:de:05:c0:f1:c3:02:27:d1:73:6d:5f:
28:5e:50:c0:9a:ca:65:d3:f2:60:58:40:44:5a:ea:
4e:11:4e:df:a8:db:cc:09:b9:60:2a:74:d2:47:a5:
73:a5:fd:79:f5:50:cf:82:e0:84:19:13:2f:5d:c7:
f0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6C:6E:9C:08:C1:BE:51:CB:EF:41:00:B3:1E:1F:66:53:C6:E5:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCF33464D9D011EF9EECF26E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.82.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d4:22:ce:f6:b3:c8:ea:83:c0:e1:f1:27:18:ea:da:c2:5e:
d5:c6:de:b4:4f:9a:a7:30:99:f0:cd:46:26:64:b4:a6:11:f9:
e1:02:2c:09:35:b7:10:e3:cc:20:71:8b:17:7e:35:9e:f9:0b:
28:67:3b:d9:ba:e7:bb:23:8c:db:a3:ca:f0:df:0a:62:c3:e8:
c7:6f:9c:b5:65:80:44:14:18:33:16:b7:8c:66:81:2f:bd:2d:
f1:3f:3f:97:1d:bb:d1:58:15:5b:26:f0:4a:59:05:60:e1:57:
40:6e:87:2c:b0:ef:18:80:de:be:cb:c3:ee:b6:63:3a:bc:96:
fb:96:7c:fa:c9:b1:6f:a5:cd:e3:4e:ce:7c:02:ae:c8:c9:6f:
bc:fe:9b:b6:97:4e:6e:74:83:56:bc:04:1f:7b:7b:4b:bb:de:
48:90:5b:4f:33:83:44:84:2e:dd:01:9a:f7:c5:8f:5d:b0:74:
07:ad:b3:03:fa:0b:32:c3:7e:ff:0d:bf:74:59:a2:36:d4:8f:
5e:19:a1:6e:80:4d:c3:02:f5:16:5e:d0:d9:58:ba:a9:58:f4:
ef:18:b2:60:e1:c2:84:71:c4:0c:8c:29:fa:3b:e1:26:a5:7e:
35:d3:57:f0:a3:d7:1c:f4:11:5f:5a:ab:93:5c:67:92:01:f2:
8a:c6:92:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUMPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MjEyNzMxWhcNMjUwMjI4MjEyNzMxWjAYMRYw
FAYDVQQDEw02NzkyYjQ0Ny1hMjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1UAdURg4CcF9wApr4qRfi2tDeoKyPyhhrwTW4VpatroGx0xGrxcXdBGG
hj2k2i9oFDbVekpRx8C+RlKuSMxwMa4eLHQr4OqQmAw7zki7x+ZvH2/J9VKH5ZLy
xujlmKX4C+XU2G3FmF/sR2IAysZT+K73HLsFTIboaBkCHf0NHmMM/cKV146GIIG5
c3Uw5g2pAwAORn4DdUhdP6grsS0PPqJmckYvgZJxJPgOaan6h5oRo+mtuvoc2DLX
c7ePpbhswW4+URuF3gXA8cMCJ9FzbV8oXlDAmspl0/JgWEBEWupOEU7fqNvMCblg
KnTSR6Vzpf159VDPguCEGRMvXcfwAwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEVs
bpwIwb5Ry+9BALMeH2ZTxuVqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQ0YzMzQ2NEQ5RDAxMUVGOUVFQ0YyNkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsRSMA0GCSqGSIb3DQEB
CwUAA4IBAQAf1CLO9rPI6oPA4fEnGOrawl7Vxt60T5qnMJnwzUYmZLSmEfnhAiwJ
NbcQ48wgcYsXfjWe+QsoZzvZuue7I4zbo8rw3wpiw+jHb5y1ZYBEFBgzFreMZoEv
vS3xPz+XHbvRWBVbJvBKWQVg4VdAbocssO8YgN6+y8PutmM6vJb7lnz6ybFvpc3j
Ts58Aq7IyW+8/pu2l05udINWvAQfe3tLu95IkFtPM4NEhC7dAZr3xY9dsHQHrbMD
+gsyw37/Db90WaI21I9eGaFugE3DAvUWXtDZWLqpWPTvGLJg4cKEccQMjCn6O+Em
pX4101fwo9cc9BFfWquTXGeSAfKKxpIz
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:11 2025 by rpki-client