Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0316340ED98911EF8BB88994762E951A.roa
File: 0316340ED98911EF8BB88994762E951A.roa (raw, json)
Hash identifier: 6zacsx+GPe5SR1FQdIFS0vUigioBp9VFZR5MVUvJAIk=
Subject key identifier: DB:C2:38:DE:03:32:AA:CC:DF:EF:E8:2B:5A:FB:9F:1C:6E:D5:C6:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014245
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0316340ED98911EF8BB88994762E951A.roa
Signing time: Thu 23 Jan 2025 12:53:16 +0000
ROA not before: Thu 23 Jan 2025 12:53:12 +0000
ROA not after: Thu 13 Mar 2025 12:53:12 +0000
asID: 138915
IP address blocks: 154.203.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82501 (0x14245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:53:12 2025 GMT
Not After : Mar 13 12:53:12 2025 GMT
Subject: CN=67923bbc-aaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:19:d4:21:78:c0:1c:32:fc:3a:49:39:86:
8e:61:f7:6e:08:8a:e0:9b:8e:b5:ba:4a:94:60:2d:
ba:88:bb:2b:e9:26:63:6e:b6:bb:fc:ff:2c:bc:80:
99:2c:dc:7f:6d:f7:89:e4:2f:3d:04:81:38:87:d7:
b2:a1:77:a4:59:96:7b:99:fe:78:22:79:d7:85:f8:
e8:28:00:11:65:c4:07:38:af:a9:c4:dc:1a:a7:d8:
69:b7:0d:f7:f3:8b:f1:1b:92:a1:6f:f8:22:5e:03:
03:f5:14:1a:ed:3c:2e:75:3b:5e:53:01:00:92:6f:
f6:fd:44:cf:5f:f2:c3:b7:4c:93:45:ef:ee:ad:76:
24:da:74:10:8c:15:6a:6c:86:76:6e:11:bb:70:88:
76:a1:3e:0b:76:fc:b9:de:b5:e8:74:d6:1d:7b:af:
28:af:7a:3d:44:1c:a0:33:76:46:b2:3a:b1:76:a8:
05:ab:5d:9a:f9:fb:79:85:b5:62:6d:1d:99:ef:9b:
c2:95:79:ac:dc:a7:27:ee:08:f7:75:23:c6:6c:08:
ee:99:fb:23:04:1f:1c:b6:c3:df:b9:b8:f4:83:2e:
f9:34:1a:ae:92:cf:a1:2a:a8:a7:60:40:d4:f0:56:
26:ec:9a:32:67:29:f6:77:f8:1f:2a:0d:6a:48:d9:
bf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C2:38:DE:03:32:AA:CC:DF:EF:E8:2B:5A:FB:9F:1C:6E:D5:C6:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0316340ED98911EF8BB88994762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.135.0/24
Signature Algorithm: sha256WithRSAEncryption
92:67:84:95:65:5d:f6:66:be:9e:b8:c7:9a:44:b2:7f:8c:e9:
ed:92:91:7a:43:6e:99:f1:76:10:79:07:1e:d2:92:54:2f:84:
e8:e2:86:0a:cb:8a:d8:bb:05:4c:f4:95:83:4d:6b:a0:fa:b2:
ea:73:44:44:19:20:e9:e9:ac:9b:ae:85:63:31:5f:23:ec:4b:
29:ee:41:e3:39:54:c5:43:eb:37:1d:ad:67:70:1e:48:1f:72:
d5:6d:f9:67:c3:3d:e5:b2:e4:c8:0e:e9:25:32:36:bb:a8:f7:
52:9b:4e:dc:cf:4e:f0:cb:ac:b3:b9:fd:2d:0b:7d:ac:73:14:
a7:67:c0:6b:74:f3:e8:17:c7:0e:d7:ba:b8:51:1c:a0:88:fa:
46:98:31:1e:b0:f7:1b:ac:88:f5:99:1f:52:85:b2:b0:9f:fe:
83:2a:0e:ec:34:56:db:8a:dd:df:63:34:5e:8e:d4:b0:6d:a2:
f7:4c:07:26:10:3d:82:3c:69:65:72:63:22:f2:17:26:97:6a:
d8:be:46:78:b8:30:af:e8:3e:af:7e:60:00:59:af:85:34:cd:
ab:87:fa:d2:bd:40:2e:84:e9:1d:64:e5:2e:31:bf:8d:2c:6c:
2d:d0:51:6d:7b:65:64:ee:b8:d0:be:63:c0:29:20:a3:8c:30:
dd:2f:75:46
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUJFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTI1MzEyWhcNMjUwMzEzMTI1MzEyWjAYMRYw
FAYDVQQDEw02NzkyM2JiYy1hYWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu5QZ1CF4wBwy/DpJOYaOYfduCIrgm461ukqUYC26iLsr6SZjbra7/P8s
vICZLNx/bfeJ5C89BIE4h9eyoXekWZZ7mf54InnXhfjoKAARZcQHOK+pxNwap9hp
tw3384vxG5Khb/giXgMD9RQa7TwudTteUwEAkm/2/UTPX/LDt0yTRe/urXYk2nQQ
jBVqbIZ2bhG7cIh2oT4Ldvy53rXodNYde68or3o9RBygM3ZGsjqxdqgFq12a+ft5
hbVibR2Z75vClXms3Kcn7gj3dSPGbAjumfsjBB8ctsPfubj0gy75NBquks+hKqin
YEDU8FYm7JoyZyn2d/gfKg1qSNm/xQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNvC
ON4DMqrM3+/oK1r7nxxu1cYVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMzE2MzQwRUQ5ODkxMUVGOEJCODg5OTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsuHMA0GCSqGSIb3DQEB
CwUAA4IBAQCSZ4SVZV32Zr6euMeaRLJ/jOntkpF6Q26Z8XYQeQce0pJUL4To4oYK
y4rYuwVM9JWDTWug+rLqc0REGSDp6aybroVjMV8j7Esp7kHjOVTFQ+s3Ha1ncB5I
H3LVbflnwz3lsuTIDuklMja7qPdSm07cz07wy6yzuf0tC32scxSnZ8BrdPPoF8cO
17q4URygiPpGmDEesPcbrIj1mR9ShbKwn/6DKg7sNFbbit3fYzRejtSwbaL3TAcm
ED2CPGllcmMi8hcml2rYvkZ4uDCv6D6vfmAAWa+FNM2rh/rSvUAuhOkdZOUuMb+N
LGwt0FFte2Vk7rjQvmPAKSCjjDDdL3VG
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:32:35 2025 by rpki-client