Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F542CA22D98811EFA7123494762E951A.roa
File: F542CA22D98811EFA7123494762E951A.roa (raw, json)
Hash identifier: aC+nJdkmNmk/LS6vs8cMEeFwoGxN/WdnOap5Cmtjz9Q=
Subject key identifier: D2:2E:2F:76:4F:27:37:BA:03:F5:AC:95:52:5B:9F:E9:3C:AC:7D:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014243
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F542CA22D98811EFA7123494762E951A.roa
Signing time: Thu 23 Jan 2025 12:52:53 +0000
ROA not before: Thu 23 Jan 2025 12:52:49 +0000
ROA not after: Fri 28 Feb 2025 12:52:49 +0000
asID: 62240
IP address blocks: 154.195.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82499 (0x14243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:52:49 2025 GMT
Not After : Feb 28 12:52:49 2025 GMT
Subject: CN=67923ba4-be66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:97:3a:a6:95:6e:15:31:5c:07:10:a3:70:
98:ee:51:46:f4:8a:a7:cb:6a:41:1e:dd:6f:dc:bc:
ed:63:ef:89:f4:19:76:74:22:fa:7d:1c:62:88:85:
56:5f:b8:6d:31:76:9b:11:a7:54:1b:81:b3:bd:8b:
0c:e2:92:ab:81:f1:2e:59:2e:6e:17:d1:ad:48:42:
d8:ce:08:e8:44:e6:f5:fd:87:05:ab:ad:34:6d:c6:
46:69:86:d3:e1:f3:a9:a1:f5:a7:52:16:cd:2e:91:
9a:a4:5a:2e:ad:97:da:de:d1:e7:52:80:51:36:cb:
c1:15:4f:c3:31:96:cc:10:13:eb:cc:6b:cc:e0:ca:
d7:6f:78:94:83:08:07:bd:5a:1b:01:8a:aa:a8:dc:
87:88:61:87:ac:86:bf:ff:45:15:b1:d0:dd:54:8c:
9c:fb:79:ea:f6:bf:23:9c:e2:a4:1f:a1:5c:b5:62:
37:e3:b6:52:45:e7:95:0c:d5:a4:4c:e1:75:04:5d:
aa:59:b7:01:bb:43:ed:d2:6f:87:16:c4:3d:57:be:
00:17:b4:97:0b:8a:79:57:d6:a6:4b:05:7a:c7:3e:
1e:5f:e4:cd:c7:5a:7e:ce:b2:a0:04:1a:a6:2c:1b:
47:6d:79:35:31:ce:85:f7:51:45:28:9d:de:66:2d:
75:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2E:2F:76:4F:27:37:BA:03:F5:AC:95:52:5B:9F:E9:3C:AC:7D:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F542CA22D98811EFA7123494762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.7.0/24
Signature Algorithm: sha256WithRSAEncryption
72:1a:38:78:34:f8:b2:b0:70:4a:7f:cc:98:b7:d8:ba:39:0e:
78:21:53:92:68:ad:1b:4c:1a:f9:06:e1:e6:5a:ae:38:46:ad:
5d:4f:84:3f:6c:f5:bc:62:1e:fd:ee:35:c1:ab:a6:95:0d:96:
8c:61:bf:06:e3:ba:69:71:cd:72:8c:06:25:e5:71:75:41:75:
bb:57:3f:17:f5:0e:e0:67:66:05:b5:05:86:f5:02:c7:0b:e2:
35:0f:3d:3a:7d:5f:bb:8c:13:35:98:73:fb:04:e6:c4:9a:4f:
50:14:18:6c:7c:68:0f:33:cf:30:59:15:f9:82:fa:b6:1b:e9:
19:24:11:c0:84:a1:1f:02:c0:a3:f8:9d:ee:4b:5b:a3:f6:1c:
b1:49:92:e0:c0:36:c5:6d:34:fb:44:f6:32:be:cc:f2:3c:be:
1c:05:f6:8c:0d:c5:ed:64:90:88:cd:a7:a8:f8:17:bb:48:7c:
ca:55:09:30:49:80:ee:dc:06:de:43:ae:55:41:0d:66:e7:cf:
5c:bf:06:0c:59:88:94:8b:8d:47:33:09:7a:ba:e1:b5:3f:d9:
78:37:d7:00:d4:4f:d5:4a:9b:a6:a6:a3:99:da:9a:b2:56:38:
91:ba:bd:ee:de:05:77:ef:a2:6a:71:fa:fa:b5:cd:43:d3:0a:
b3:61:f0:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUJDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTI1MjQ5WhcNMjUwMjI4MTI1MjQ5WjAYMRYw
FAYDVQQDEw02NzkyM2JhNC1iZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwe+XOqaVbhUxXAcQo3CY7lFG9Iqny2pBHt1v3LztY++J9Bl2dCL6fRxi
iIVWX7htMXabEadUG4GzvYsM4pKrgfEuWS5uF9GtSELYzgjoROb1/YcFq600bcZG
aYbT4fOpofWnUhbNLpGapFourZfa3tHnUoBRNsvBFU/DMZbMEBPrzGvM4MrXb3iU
gwgHvVobAYqqqNyHiGGHrIa//0UVsdDdVIyc+3nq9r8jnOKkH6FctWI347ZSReeV
DNWkTOF1BF2qWbcBu0Pt0m+HFsQ9V74AF7SXC4p5V9amSwV6xz4eX+TNx1p+zrKg
BBqmLBtHbXk1Mc6F91FFKJ3eZi11sQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNIu
L3ZPJze6A/WslVJbn+k8rH1HMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNTQyQ0EyMkQ5ODgxMUVGQTcxMjM0OTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsMHMA0GCSqGSIb3DQEB
CwUAA4IBAQByGjh4NPiysHBKf8yYt9i6OQ54IVOSaK0bTBr5BuHmWq44Rq1dT4Q/
bPW8Yh797jXBq6aVDZaMYb8G47ppcc1yjAYl5XF1QXW7Vz8X9Q7gZ2YFtQWG9QLH
C+I1Dz06fV+7jBM1mHP7BObEmk9QFBhsfGgPM88wWRX5gvq2G+kZJBHAhKEfAsCj
+J3uS1uj9hyxSZLgwDbFbTT7RPYyvszyPL4cBfaMDcXtZJCIzaeo+Be7SHzKVQkw
SYDu3AbeQ65VQQ1m589cvwYMWYiUi41HMwl6uuG1P9l4N9cA1E/VSpumpqOZ2pqy
VjiRur3u3gV376Jqcfr6tc1D0wqzYfCR
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:17 2025 by rpki-client