Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E20AE76AD8A111EFB9102582762E951A.roa
File: E20AE76AD8A111EFB9102582762E951A.roa (raw, json)
Hash identifier: p0SOwUtB8gmUkN7ECxe3I8fDvw25CWrVlGeMQBC3Dps=
Subject key identifier: 5E:A3:73:6D:04:63:F3:B0:6D:9A:21:A0:B3:FD:B3:C8:3B:39:4F:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E20AE76AD8A111EFB9102582762E951A.roa
Signing time: Wed 22 Jan 2025 09:18:47 +0000
ROA not before: Wed 22 Jan 2025 09:18:43 +0000
ROA not after: Wed 05 Feb 2025 09:18:43 +0000
asID: 138456
IP address blocks: 154.194.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81528 (0x13e78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 09:18:43 2025 GMT
Not After : Feb 5 09:18:43 2025 GMT
Subject: CN=6790b7f6-7f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:88:fd:50:b3:36:7c:9e:a8:39:bf:a1:79:
2e:e7:ef:02:19:c1:50:00:d2:04:0d:45:af:c5:b9:
73:32:62:57:7c:00:8b:61:35:c8:9e:be:21:60:42:
dd:47:34:5d:22:47:cf:b4:40:58:a1:d6:3e:75:5e:
37:c9:c9:aa:c8:f4:c2:19:84:1f:ea:6e:8d:81:e4:
ba:fe:46:e4:3f:68:fa:43:4e:4a:92:03:c1:98:24:
82:9c:1c:c7:0e:5d:32:c6:1c:b3:2f:ec:4c:c6:15:
ae:7d:df:46:64:34:8d:02:f2:17:89:59:6e:70:14:
b7:ce:9b:35:a0:b5:ec:fe:a0:70:c3:c2:0c:af:00:
7d:9b:89:62:41:f4:fe:73:c4:94:42:f7:02:d2:99:
16:5d:44:ec:60:43:61:90:3f:df:e1:6f:51:ff:44:
b6:a3:41:15:f2:0b:b0:6e:41:42:16:f7:31:5e:dd:
52:50:07:2a:ee:17:cd:f2:26:8c:9f:b3:fc:48:d5:
ea:8f:fc:ef:be:01:d8:27:36:83:cf:b1:83:12:d6:
ce:b8:0d:bc:9a:57:d6:38:c7:a1:f4:99:24:2a:71:
d2:f7:98:b9:35:26:ac:0f:26:67:1e:7e:2d:e0:83:
e5:2e:58:2d:90:a9:4c:ed:6b:2d:12:67:09:06:57:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A3:73:6D:04:63:F3:B0:6D:9A:21:A0:B3:FD:B3:C8:3B:39:4F:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E20AE76AD8A111EFB9102582762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.42.0/24
Signature Algorithm: sha256WithRSAEncryption
38:6c:3f:0c:df:3e:75:09:e2:34:92:57:c3:fc:0f:e2:91:4f:
c0:b2:fb:ae:95:71:12:f7:75:91:b8:47:24:78:f3:a0:6a:c4:
00:53:17:7e:dc:9f:f4:de:88:fd:21:08:19:d3:3e:10:58:65:
88:c6:91:bd:e0:80:f7:0a:f2:57:b3:74:23:18:a4:83:a9:c1:
f8:31:ce:bf:6a:b7:49:1a:8e:a0:de:19:39:8c:d5:9c:72:61:
38:d6:e2:3f:9b:2e:b9:cd:d4:80:59:69:94:40:d1:ad:ea:9e:
70:79:2c:ad:63:f3:a4:88:af:92:52:b0:6d:2e:3b:e7:09:4a:
96:b2:3b:31:1e:79:32:60:29:89:3f:6e:1e:db:82:c9:ce:4e:
f5:e6:19:77:d4:25:2a:2c:7a:4b:77:0b:e3:fa:a7:c1:35:d9:
95:76:eb:34:ea:cf:79:6c:c7:97:07:84:10:6f:0d:35:92:37:
7c:e9:45:dd:9b:cd:51:59:cb:3c:2e:1a:50:8f:a3:ff:59:36:
80:16:72:c3:cd:b0:32:72:b5:a2:e8:49:0d:8e:1a:a2:0a:5a:
3e:1d:b4:0c:17:75:2a:67:19:f4:d8:2b:70:d0:be:9c:1e:af:
7d:35:7d:9e:5f:ba:58:c4:42:60:f9:44:83:e9:04:25:8d:47:
47:2e:c3:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT54MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMDkxODQzWhcNMjUwMjA1MDkxODQzWjAYMRYw
FAYDVQQDEw02NzkwYjdmNi03ZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuZiI/VCzNnyeqDm/oXku5+8CGcFQANIEDUWvxblzMmJXfACLYTXInr4h
YELdRzRdIkfPtEBYodY+dV43ycmqyPTCGYQf6m6NgeS6/kbkP2j6Q05KkgPBmCSC
nBzHDl0yxhyzL+xMxhWufd9GZDSNAvIXiVlucBS3zps1oLXs/qBww8IMrwB9m4li
QfT+c8SUQvcC0pkWXUTsYENhkD/f4W9R/0S2o0EV8guwbkFCFvcxXt1SUAcq7hfN
8iaMn7P8SNXqj/zvvgHYJzaDz7GDEtbOuA28mlfWOMeh9JkkKnHS95i5NSasDyZn
Hn4t4IPlLlgtkKlM7WstEmcJBlc+QwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF6j
c20EY/OwbZohoLP9s8g7OU/nMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMjBBRTc2QUQ4QTExMUVGQjkxMDI1ODI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsIqMA0GCSqGSIb3DQEB
CwUAA4IBAQA4bD8M3z51CeI0klfD/A/ikU/AsvuulXES93WRuEckePOgasQAUxd+
3J/03oj9IQgZ0z4QWGWIxpG94ID3CvJXs3QjGKSDqcH4Mc6/ardJGo6g3hk5jNWc
cmE41uI/my65zdSAWWmUQNGt6p5weSytY/OkiK+SUrBtLjvnCUqWsjsxHnkyYCmJ
P24e24LJzk715hl31CUqLHpLdwvj+qfBNdmVdus06s95bMeXB4QQbw01kjd86UXd
m81RWcs8LhpQj6P/WTaAFnLDzbAycrWi6EkNjhqiClo+HbQMF3UqZxn02Ctw0L6c
Hq99NX2eX7pYxEJg+USD6QQljUdHLsPy
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:03 2025 by rpki-client