Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF6996CADA4211EF8299727B762E951A.roa
File: EF6996CADA4211EF8299727B762E951A.roa (raw, json)
Hash identifier: RMLc4v6ZI8ELe4qZubtgnwY3GDa4kwU85wqkrWlb7Wc=
Subject key identifier: 6A:0C:A1:6C:BB:68:E2:72:85:30:A1:6B:3D:75:8B:12:B7:84:F8:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF6996CADA4211EF8299727B762E951A.roa
Signing time: Fri 24 Jan 2025 11:04:09 +0000
ROA not before: Fri 24 Jan 2025 11:04:05 +0000
ROA not after: Fri 28 Feb 2025 11:04:05 +0000
asID: 62240
IP address blocks: 154.196.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83426 (0x145e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:04:05 2025 GMT
Not After : Feb 28 11:04:05 2025 GMT
Subject: CN=679373a9-01b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:eb:5f:71:57:ee:01:f0:c1:c6:10:33:8a:20:
aa:8e:c2:f9:b1:89:5b:03:39:79:98:9f:9a:66:e9:
0c:35:fc:53:77:ea:9e:fc:a4:89:4e:f8:c5:bf:a9:
92:13:98:b8:ec:07:55:36:d2:42:df:9a:56:b4:e5:
f9:f0:ce:f2:ba:86:50:9b:88:9d:2e:c5:a8:c9:57:
7f:95:36:06:d3:d9:ab:58:b7:38:5e:2d:9a:6f:92:
32:26:84:4c:7c:2c:03:c7:6c:5f:3e:9b:e3:fa:b1:
36:c6:ca:fd:57:e3:4b:75:7d:8f:14:e0:fb:ed:11:
7d:b4:79:ea:90:1c:95:86:bc:ae:84:67:17:05:36:
1c:40:a0:62:b9:3b:7d:75:54:dd:ae:d8:b1:31:ad:
5b:85:a6:3a:05:df:99:2a:28:b9:81:e1:57:93:79:
a1:6b:d8:e4:50:f1:b6:ce:bc:c4:f6:04:56:18:8a:
42:d4:50:b3:92:54:ac:a9:35:d0:73:ac:11:ed:3b:
99:02:ee:25:d5:a9:47:5d:0b:16:f4:0f:5e:34:d7:
b2:49:b9:24:2d:02:f0:86:7c:fe:d5:ac:7f:d2:09:
9a:d0:10:ed:8c:0f:00:8b:a3:f4:bc:42:47:8c:7d:
25:9f:8d:f1:15:a2:4e:9d:17:7e:94:3c:73:44:8c:
5c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0C:A1:6C:BB:68:E2:72:85:30:A1:6B:3D:75:8B:12:B7:84:F8:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF6996CADA4211EF8299727B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.73.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5b:e7:05:8a:31:31:0c:62:78:69:bc:66:3c:61:53:f4:38:
25:4b:63:42:05:8c:44:d9:aa:db:90:cf:67:82:a7:34:d5:01:
0a:42:a9:54:b6:10:13:ca:e3:d7:a2:2f:c4:70:c2:40:e2:f7:
c3:c5:ca:c1:ee:ea:62:f2:dc:c6:ac:08:9b:58:0b:b8:17:19:
e6:c0:89:2d:1e:fd:d4:ca:ee:44:b9:99:27:1f:02:09:41:db:
38:33:72:d7:35:dc:9b:fe:10:c6:d7:a7:a9:04:28:46:ac:84:
05:3e:77:21:5d:c6:d6:43:5b:ba:87:08:f3:00:04:13:eb:94:
4b:40:73:40:09:04:35:bb:f6:b0:fc:f9:a8:52:f6:79:c5:97:
40:a4:43:ae:b2:47:13:44:12:72:d8:b1:53:9f:e2:4f:f9:8a:
84:a1:ea:7e:38:1b:cf:54:ed:49:d3:7c:e7:9e:ba:57:83:9f:
51:c9:08:01:81:fb:40:15:d4:ef:27:e1:c5:40:b9:c9:b5:2f:
54:58:2a:57:13:bc:40:0c:86:a5:c3:59:f8:af:dc:5b:2d:28:
99:40:b9:60:ab:48:0b:66:49:1e:be:02:a8:fb:7d:48:40:75:
3d:92:93:38:5a:3d:6c:05:f2:82:8d:04:d5:dc:bb:4c:b0:d2:
54:ca:7c:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUXiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTEwNDA1WhcNMjUwMjI4MTEwNDA1WjAYMRYw
FAYDVQQDEw02NzkzNzNhOS0wMWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmOtfcVfuAfDBxhAziiCqjsL5sYlbAzl5mJ+aZukMNfxTd+qe/KSJTvjF
v6mSE5i47AdVNtJC35pWtOX58M7yuoZQm4idLsWoyVd/lTYG09mrWLc4Xi2ab5Iy
JoRMfCwDx2xfPpvj+rE2xsr9V+NLdX2PFOD77RF9tHnqkByVhryuhGcXBTYcQKBi
uTt9dVTdrtixMa1bhaY6Bd+ZKii5geFXk3mha9jkUPG2zrzE9gRWGIpC1FCzklSs
qTXQc6wR7TuZAu4l1alHXQsW9A9eNNeySbkkLQLwhnz+1ax/0gma0BDtjA8Ai6P0
vEJHjH0ln43xFaJOnRd+lDxzRIxcxQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGoM
oWy7aOJyhTChaz11ixK3hPicMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRjY5OTZDQURBNDIxMUVGODI5OTcyN0I3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsRJMA0GCSqGSIb3DQEB
CwUAA4IBAQBRW+cFijExDGJ4abxmPGFT9DglS2NCBYxE2arbkM9ngqc01QEKQqlU
thATyuPXoi/EcMJA4vfDxcrB7upi8tzGrAibWAu4FxnmwIktHv3Uyu5EuZknHwIJ
Qds4M3LXNdyb/hDG16epBChGrIQFPnchXcbWQ1u6hwjzAAQT65RLQHNACQQ1u/aw
/PmoUvZ5xZdApEOuskcTRBJy2LFTn+JP+YqEoep+OBvPVO1J03znnrpXg59RyQgB
gftAFdTvJ+HFQLnJtS9UWCpXE7xADIalw1n4r9xbLSiZQLlgq0gLZkkevgKo+31I
QHU9kpM4Wj1sBfKCjQTV3LtMsNJUynzQ
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:27:26 2025 by rpki-client