Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAB8756ECCC911EFAC760555762E951A.roa
File: EAB8756ECCC911EFAC760555762E951A.roa (raw, json)
Hash identifier: zgiKyPOe5DkSjfKkA/N2p9QRaNbvsqPYLh14LndJjdM=
Subject key identifier: 81:01:AA:B6:50:F3:B1:6F:DB:EB:B0:0C:F1:2F:BD:7C:75:E2:32:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013655
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAB8756ECCC911EFAC760555762E951A.roa
Signing time: Tue 07 Jan 2025 07:35:07 +0000
ROA not before: Tue 07 Jan 2025 07:35:03 +0000
ROA not after: Thu 13 Feb 2025 07:35:03 +0000
asID: 203020
IP address blocks: 154.207.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79445 (0x13655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 07:35:03 2025 GMT
Not After : Feb 13 07:35:03 2025 GMT
Subject: CN=677cd92b-0212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:26:91:79:fd:31:6d:13:e3:01:96:63:c4:80:
3e:14:d0:5b:2d:b1:8b:b1:7b:87:37:92:f8:2d:5d:
91:da:d7:c6:a8:7f:db:0f:e4:4f:38:b6:32:42:89:
ec:46:10:0b:50:4c:fd:0f:04:67:00:84:d6:f2:6e:
fd:25:bd:7c:49:28:5b:f1:81:76:00:eb:6c:24:f0:
2a:13:dd:39:25:c1:1a:92:72:b3:79:0e:43:3a:54:
f9:e2:5d:d5:c6:97:bb:af:32:12:39:63:fd:c8:ac:
36:7d:03:33:8b:1f:74:ba:d6:fa:88:84:ae:9a:64:
93:2d:ff:d8:82:0d:05:47:21:b1:6a:fc:a7:00:14:
e6:fc:2f:c7:05:6f:84:9e:24:95:b5:b6:f5:a0:11:
d4:0a:33:f8:bf:28:c5:d5:0d:e7:04:dc:32:02:2e:
05:d2:d9:ee:53:6f:70:f0:42:b2:4e:db:54:f7:dd:
0c:88:3c:2a:7c:ab:7c:37:50:35:b9:32:96:b3:e6:
05:30:75:58:fb:98:98:eb:7c:a4:ac:c6:58:4a:3c:
98:d8:2f:5b:cf:87:85:97:7b:f2:46:f3:da:0f:84:
db:50:91:6b:8d:94:3f:ba:41:dd:c1:e9:12:3e:f4:
69:e0:3e:18:7f:31:ec:5a:69:26:6f:fa:cc:fe:35:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:01:AA:B6:50:F3:B1:6F:DB:EB:B0:0C:F1:2F:BD:7C:75:E2:32:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAB8756ECCC911EFAC760555762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.48.0/22
Signature Algorithm: sha256WithRSAEncryption
36:46:d3:c2:fa:61:d1:d3:3a:f4:cb:7f:6b:d4:2d:93:95:b3:
90:0d:da:a8:61:62:2b:47:d5:36:c6:b2:68:10:3d:5f:f3:9b:
43:a6:7f:71:8c:04:fb:8b:b0:19:d9:f3:ea:ac:f7:e3:94:3e:
e5:26:72:86:14:98:b2:e3:19:68:60:65:53:47:40:19:6c:b1:
6d:21:bb:fe:ca:c5:73:9e:a2:98:0e:da:d0:4b:13:69:11:e2:
5a:aa:e2:b8:de:4d:1e:ad:21:ab:45:73:7a:52:a9:1f:ba:01:
a0:a0:4d:7a:93:ea:73:2e:6d:6f:a3:e1:50:e0:d6:c0:88:73:
19:48:fa:33:f1:f4:c0:bb:bb:eb:77:8f:b7:51:fa:1f:cc:1c:
dc:65:f2:8a:30:22:da:74:2c:68:22:4a:88:2f:f0:bf:21:64:
b8:10:b1:78:f9:cf:1e:a8:fb:d1:37:2f:0c:b8:c4:23:6e:b5:
93:0d:65:81:e4:61:28:e3:93:a5:82:d7:b6:3e:db:8d:d9:1d:
de:7f:e6:1c:73:3b:38:25:e0:51:cc:42:bb:ff:c5:83:e6:95:
0a:c3:e1:62:34:9e:c7:70:25:cc:a4:ce:06:c0:5b:a1:36:e3:
50:b6:97:60:94:60:2b:99:23:82:fd:e5:89:c4:39:0f:23:52:
71:ae:c6:c1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATZVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA3MDczNTAzWhcNMjUwMjEzMDczNTAzWjAYMRYw
FAYDVQQDEw02NzdjZDkyYi0wMjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1yaRef0xbRPjAZZjxIA+FNBbLbGLsXuHN5L4LV2R2tfGqH/bD+RPOLYy
QonsRhALUEz9DwRnAITW8m79Jb18SShb8YF2AOtsJPAqE905JcEaknKzeQ5DOlT5
4l3Vxpe7rzISOWP9yKw2fQMzix90utb6iISummSTLf/Ygg0FRyGxavynABTm/C/H
BW+EniSVtbb1oBHUCjP4vyjF1Q3nBNwyAi4F0tnuU29w8EKyTttU990MiDwqfKt8
N1A1uTKWs+YFMHVY+5iY63ykrMZYSjyY2C9bz4eFl3vyRvPaD4TbUJFrjZQ/ukHd
wekSPvRp4D4YfzHsWmkmb/rM/jWVMQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIEB
qrZQ87Fv2+uwDPEvvXx14jK7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQUI4NzU2RUNDQzkxMUVGQUM3NjA1NTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCms8wMA0GCSqGSIb3DQEB
CwUAA4IBAQA2RtPC+mHR0zr0y39r1C2TlbOQDdqoYWIrR9U2xrJoED1f85tDpn9x
jAT7i7AZ2fPqrPfjlD7lJnKGFJiy4xloYGVTR0AZbLFtIbv+ysVznqKYDtrQSxNp
EeJaquK43k0erSGrRXN6UqkfugGgoE16k+pzLm1vo+FQ4NbAiHMZSPoz8fTAu7vr
d4+3UfofzBzcZfKKMCLadCxoIkqIL/C/IWS4ELF4+c8eqPvRNy8MuMQjbrWTDWWB
5GEo45Olgte2PtuN2R3ef+Ycczs4JeBRzEK7/8WD5pUKw+FiNJ7HcCXMpM4GwFuh
NuNQtpdglGArmSOC/eWJxDkPI1JxrsbB
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:11:53 2025 by rpki-client