Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B737F3CCCC111EF93AC169B762E951A.roa
File: 0B737F3CCCC111EF93AC169B762E951A.roa (raw, json)
Hash identifier: UtltWxLBZuZb/Wu9OizQDQFbXaGEc+k6x45VEURIHOE=
Subject key identifier: 75:3D:F8:EF:E9:23:DD:68:3B:1A:31:8E:8D:57:52:C3:CE:07:8E:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01362F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B737F3CCCC111EF93AC169B762E951A.roa
Signing time: Tue 07 Jan 2025 06:31:36 +0000
ROA not before: Tue 07 Jan 2025 06:31:33 +0000
ROA not after: Tue 04 Feb 2025 06:31:33 +0000
asID: 7018
IP address blocks: 154.81.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79407 (0x1362f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 06:31:33 2025 GMT
Not After : Feb 4 06:31:33 2025 GMT
Subject: CN=677cca48-92b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:79:57:33:58:4c:61:4b:fe:d5:01:76:6d:
2b:1c:c4:37:0e:cb:ac:8e:2f:88:04:05:23:4c:13:
dc:7a:cd:7d:29:23:de:db:fe:1a:ee:25:4a:96:af:
39:b7:82:4e:b5:a4:c7:cb:31:75:21:73:90:bc:a4:
02:4e:f6:52:b6:dd:0a:82:0f:ae:13:f1:6a:a5:47:
03:a6:63:1c:f5:04:c5:b9:51:91:bd:13:90:57:7e:
ab:7a:c3:29:af:b4:d6:97:b0:e8:48:fd:43:56:24:
5b:61:b8:7f:34:ba:30:8a:3c:18:90:89:07:a0:c4:
69:8f:e9:34:bb:68:6c:84:54:bb:b0:66:3b:c8:fb:
33:48:ed:a2:7c:12:4f:1f:d7:48:4a:d3:7e:8f:70:
bb:f7:fd:99:62:e5:39:2f:79:cc:98:94:12:ed:c2:
f0:ec:30:b8:6b:af:f7:24:a6:e2:0c:d7:2c:22:95:
27:fc:8e:c0:a2:c1:f2:f1:8a:aa:4a:37:49:4d:96:
25:05:b0:92:cf:a0:b0:6d:37:41:16:45:08:13:28:
1b:f4:87:4d:24:ec:ad:c1:19:72:f3:ba:e9:c7:5d:
03:f7:fe:a9:21:e5:c0:91:e6:16:f3:e3:65:aa:ba:
c2:54:95:2f:15:42:3e:33:f1:6b:0e:e5:51:54:38:
3e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3D:F8:EF:E9:23:DD:68:3B:1A:31:8E:8D:57:52:C3:CE:07:8E:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B737F3CCCC111EF93AC169B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.0.0/21
Signature Algorithm: sha256WithRSAEncryption
be:74:17:15:bc:d8:d3:e4:fd:7c:d5:23:03:2f:55:19:b2:0b:
8b:e9:fb:f9:c9:50:e6:ed:1a:86:1c:26:79:b3:db:e1:56:74:
b5:47:61:45:90:12:c6:4f:b3:65:01:b3:2d:f3:18:69:7f:05:
b6:d5:db:96:74:70:6f:f3:52:de:08:1d:6a:45:c8:4c:9e:c5:
0f:b6:bb:a3:d8:ac:65:40:a0:ce:c3:ca:c6:7e:02:5a:22:75:
e4:a8:51:7e:28:2a:d2:7f:8c:bd:f3:af:fe:7d:4d:de:31:d8:
d7:54:cb:ac:c3:8c:90:48:c6:b4:69:65:ab:0d:a5:1d:d9:d6:
53:de:0c:2a:d2:6c:4e:4a:45:f1:af:16:98:3b:73:28:69:d8:
e0:75:9b:86:2b:0f:81:c1:94:be:40:f3:a7:82:c6:ef:1d:03:
54:b4:61:8b:89:da:d0:a0:d9:1d:d8:c7:f6:6e:e6:15:02:a9:
ea:36:e3:cf:ab:12:71:a9:ab:2f:7f:fd:f4:6d:e1:b6:6e:6b:
08:02:54:53:4c:bd:2b:46:8a:19:1d:f2:c0:2b:f9:73:a1:dd:
b2:ce:8a:48:a5:a7:0b:23:cb:ec:2a:73:06:c0:7d:5e:31:54:
a1:ee:88:d3:75:72:7b:7c:cf:ee:8f:10:b2:4d:35:c3:47:4f:
1b:2c:cf:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATYvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA3MDYzMTMzWhcNMjUwMjA0MDYzMTMzWjAYMRYw
FAYDVQQDEw02NzdjY2E0OC05MmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArxl5VzNYTGFL/tUBdm0rHMQ3Dsusji+IBAUjTBPces19KSPe2/4a7iVK
lq85t4JOtaTHyzF1IXOQvKQCTvZStt0Kgg+uE/FqpUcDpmMc9QTFuVGRvROQV36r
esMpr7TWl7DoSP1DViRbYbh/NLowijwYkIkHoMRpj+k0u2hshFS7sGY7yPszSO2i
fBJPH9dIStN+j3C79/2ZYuU5L3nMmJQS7cLw7DC4a6/3JKbiDNcsIpUn/I7AosHy
8YqqSjdJTZYlBbCSz6CwbTdBFkUIEygb9IdNJOytwRly87rpx10D9/6pIeXAkeYW
8+NlqrrCVJUvFUI+M/FrDuVRVDg+twIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHU9
+O/pI91oOxoxjo1XUsPOB47iMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQjczN0YzQ0NDQzExMUVGOTNBQzE2OUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlEAMA0GCSqGSIb3DQEB
CwUAA4IBAQC+dBcVvNjT5P181SMDL1UZsguL6fv5yVDm7RqGHCZ5s9vhVnS1R2FF
kBLGT7NlAbMt8xhpfwW21duWdHBv81LeCB1qRchMnsUPtruj2KxlQKDOw8rGfgJa
InXkqFF+KCrSf4y986/+fU3eMdjXVMusw4yQSMa0aWWrDaUd2dZT3gwq0mxOSkXx
rxaYO3MoadjgdZuGKw+BwZS+QPOngsbvHQNUtGGLidrQoNkd2Mf2buYVAqnqNuPP
qxJxqasvf/30beG2bmsIAlRTTL0rRooZHfLAK/lzod2yzopIpacLI8vsKnMGwH1e
MVSh7ojTdXJ7fM/ujxCyTTXDR08bLM/g
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:08:14 2025 by rpki-client