Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6590AAACB16A11EF9DE3ECBE762E951A.roa
File: 6590AAACB16A11EF9DE3ECBE762E951A.roa (raw, json)
Hash identifier: LSamUg0PQkBcU+EFpVF3RDraaU2EokR7Oie12AjvWLU=
Subject key identifier: 35:C1:C6:23:26:E6:BA:F2:CF:85:D0:E2:F8:29:35:66:70:4D:07:17
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1924
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6590AAACB16A11EF9DE3ECBE762E951A.roa
Signing time: Tue 03 Dec 2024 11:33:20 +0000
ROA not before: Tue 03 Dec 2024 11:33:16 +0000
ROA not after: Thu 03 Dec 2026 11:33:16 +0000
asID: 211415
IP address blocks: 154.70.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6436 (0x1924)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 3 11:33:16 2024 GMT
Not After : Dec 3 11:33:16 2026 GMT
Subject: CN=674eec80-0d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f1:03:cb:9e:ee:95:89:ac:18:1a:f3:16:d2:
36:f7:7c:42:2f:11:37:18:44:e1:bd:2f:8f:db:ef:
82:07:23:5a:51:75:f1:10:4f:14:83:d3:bb:f4:a1:
fb:d6:c5:45:fc:41:b8:b2:dc:d2:05:0a:c0:f4:db:
2f:6d:59:0f:b0:d5:cf:ce:92:a4:70:e6:ad:9b:66:
1d:58:37:37:9d:87:72:6f:ba:90:e9:4c:6d:4f:23:
85:1b:32:fb:da:ba:e0:7b:55:96:98:ac:09:7a:f9:
86:1d:ef:3c:17:5e:86:d9:e9:3e:f9:75:0f:09:77:
a8:4f:04:e6:90:4a:da:92:09:d3:69:1f:fd:ee:3a:
13:35:19:e3:54:f2:4f:b1:11:2a:2e:23:fb:a7:30:
b4:80:6b:9a:dd:6b:ff:f9:4b:b6:ac:99:68:56:d2:
f6:03:6b:5e:e2:58:28:64:a9:3b:89:e9:7e:12:e5:
59:d2:11:09:16:f1:4b:a4:b3:ce:ae:f8:39:cf:3c:
2f:9a:60:ba:a6:d8:0c:b8:63:29:ad:c7:7e:99:df:
c0:ba:f6:b9:8d:f9:f2:dc:0e:f3:91:1f:a0:7b:53:
f5:c8:0c:6d:c0:cb:3d:9f:ef:65:19:12:6f:98:e0:
30:c7:29:59:b8:87:31:9d:e1:ab:d2:a2:35:76:88:
99:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C1:C6:23:26:E6:BA:F2:CF:85:D0:E2:F8:29:35:66:70:4D:07:17
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6590AAACB16A11EF9DE3ECBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.70.155.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:43:43:ec:ae:72:97:32:b1:96:e4:af:be:16:d2:bc:58:07:
b5:cb:44:63:77:59:1d:df:ba:d5:12:df:8b:80:d1:cb:e7:ef:
c7:c8:f9:64:ac:e6:22:b8:cc:ae:9c:47:e9:75:39:2f:47:f1:
fa:6a:6e:0c:28:73:c9:fa:08:5a:c2:de:95:69:4e:f2:ff:00:
65:02:eb:dc:87:77:fd:6a:58:ff:f2:da:97:72:0d:c7:49:c2:
e5:c1:42:d6:ca:0b:8e:9e:1a:8d:e6:70:c3:3b:6a:b5:77:e1:
02:32:1c:20:c3:9d:b0:32:c9:23:db:99:a7:10:72:4e:3d:43:
b5:ab:9c:5f:db:61:b1:54:56:b3:62:4f:8d:ed:ca:f7:4f:ea:
fe:8c:8f:cb:ac:13:2d:ae:01:76:63:7c:14:4f:0c:26:ef:0b:
e7:4e:22:cd:4c:7f:aa:ac:a0:21:6f:57:96:57:57:f4:94:c9:
ec:ff:61:0f:d4:85:14:62:0a:67:87:dc:9f:c9:f9:b2:14:8d:
10:d7:d0:79:36:f0:e9:c5:63:86:76:ab:df:1b:17:a8:9a:7f:
41:73:ee:4f:de:36:19:cb:bd:2a:07:38:e3:af:f2:59:05:2c:
52:19:73:63:b8:e6:35:5e:b1:95:86:bd:3d:9b:f5:84:f1:d2:
b4:c1:b8:88
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGSQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDEyMDMxMTMzMTZaFw0yNjEyMDMxMTMzMTZaMBgxFjAU
BgNVBAMTDTY3NGVlYzgwLTBkMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDp8QPLnu6ViawYGvMW0jb3fEIvETcYROG9L4/b74IHI1pRdfEQTxSD07v0
ofvWxUX8Qbiy3NIFCsD02y9tWQ+w1c/OkqRw5q2bZh1YNzedh3JvupDpTG1PI4Ub
MvvauuB7VZaYrAl6+YYd7zwXXobZ6T75dQ8Jd6hPBOaQStqSCdNpH/3uOhM1GeNU
8k+xESouI/unMLSAa5rda//5S7asmWhW0vYDa17iWChkqTuJ6X4S5VnSEQkW8Uuk
s86u+DnPPC+aYLqm2Ay4Yymtx36Z38C69rmN+fLcDvORH6B7U/XIDG3Ayz2f72UZ
Em+Y4DDHKVm4hzGd4avSojV2iJm/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUNcHG
IybmuvLPhdDi+Ck1ZnBNBxcwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzY1OTBBQUFDQjE2QTExRUY5REUzRUNCRTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaRpswDQYJKoZIhvcNAQEL
BQADggEBAF9DQ+yucpcysZbkr74W0rxYB7XLRGN3WR3futUS34uA0cvn78fI+WSs
5iK4zK6cR+l1OS9H8fpqbgwoc8n6CFrC3pVpTvL/AGUC69yHd/1qWP/y2pdyDcdJ
wuXBQtbKC46eGo3mcMM7arV34QIyHCDDnbAyySPbmacQck49Q7WrnF/bYbFUVrNi
T43tyvdP6v6Mj8usEy2uAXZjfBRPDCbvC+dOIs1Mf6qsoCFvV5ZXV/SUyez/YQ/U
hRRiCmeH3J/J+bIUjRDX0Hk28OnFY4Z2q98bF6iaf0Fz7k/eNhnLvSoHOOOv8lkF
LFIZc2O45jVesZWGvT2b9YTx0rTBuIg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:32:47 2025 by rpki-client