Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D6066B0DBEF11EF8D547A47762E951A.roa
File: 0D6066B0DBEF11EF8D547A47762E951A.roa (raw, json)
Hash identifier: G46h7uMeCbuctRW0UciT+li9HiQV8Ft5XPdzHm0WBGY=
Subject key identifier: EB:40:1C:74:CE:FA:40:41:BC:4D:6C:42:69:0B:32:ED:4D:EA:F7:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D6066B0DBEF11EF8D547A47762E951A.roa
Signing time: Sun 26 Jan 2025 14:08:44 +0000
ROA not before: Sun 26 Jan 2025 14:08:40 +0000
ROA not after: Fri 21 Mar 2025 14:08:40 +0000
asID: 138915
IP address blocks: 154.93.34.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84664 (0x14ab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 14:08:40 2025 GMT
Not After : Mar 21 14:08:40 2025 GMT
Subject: CN=679641ec-794d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:df:03:17:95:e2:f7:9d:ab:fb:8b:68:9f:
8d:77:91:57:d0:11:a2:cd:a4:fe:e0:6a:07:eb:08:
02:88:59:6c:37:5f:88:39:d9:01:29:3b:da:9e:d7:
49:3f:09:a4:8a:36:08:36:47:00:90:25:88:40:bf:
eb:0a:0c:fd:c1:82:4b:e3:53:fd:10:ff:2a:6b:90:
3c:b3:e7:31:5b:ca:0a:35:bc:9f:b3:2f:cf:90:f3:
94:c2:65:5f:3a:31:92:72:d8:c4:3d:bb:d4:d4:ac:
d6:7e:ac:51:79:f8:7a:6b:e8:6d:53:dc:e5:99:38:
95:ec:33:ad:d4:27:6f:55:34:f7:af:82:b7:10:ed:
a3:69:5b:25:ee:90:1e:79:1d:1e:39:a7:cb:ec:10:
6f:aa:31:19:7e:7f:88:1d:df:cb:cd:4c:2b:0e:54:
20:00:a0:3e:cf:74:2f:09:bb:a5:2f:c5:ac:2b:42:
cd:1c:0c:39:17:9e:19:68:82:a8:21:08:09:1b:49:
16:cc:3f:35:87:71:c6:96:31:74:a5:a2:53:1b:f8:
45:a2:e3:0a:16:1a:50:c0:58:15:75:50:97:f9:84:
62:e3:ea:c2:09:62:d3:a1:77:4c:b7:53:57:ce:07:
b6:57:01:d7:4c:9f:ab:c6:3b:48:3e:74:9c:c4:20:
b6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:40:1C:74:CE:FA:40:41:BC:4D:6C:42:69:0B:32:ED:4D:EA:F7:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D6066B0DBEF11EF8D547A47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.34.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:12:88:04:83:97:3e:18:7a:85:f7:76:6f:fc:67:02:5a:d0:
3d:c6:9b:5f:3e:0b:13:6d:c6:79:b6:18:44:fa:9e:b3:d9:3a:
b9:29:d0:4b:c8:79:7f:f9:4e:e0:2a:48:d5:92:cd:0f:64:23:
28:f3:99:ed:ff:48:bb:c3:74:5e:3f:83:28:a9:a0:61:35:1a:
32:ef:c2:f3:74:24:06:8e:05:ce:9f:4a:16:cd:69:ab:71:10:
86:0d:a3:a1:17:be:1d:ae:c6:32:d8:28:3b:5c:0c:50:5d:af:
6f:11:43:ef:80:90:e1:b1:f0:44:6c:c2:df:08:a9:82:42:e7:
ae:bb:0e:16:17:3d:f9:92:2e:b6:7d:c3:26:c7:ac:4e:11:8c:
9a:80:4c:6e:11:e4:c1:c0:6e:8b:a7:14:af:f7:5b:b1:b2:27:
a7:de:25:4a:22:17:5a:43:52:23:e8:08:fe:f0:ce:f4:22:5e:
9c:c3:12:04:c1:50:7b:bd:7c:1b:c9:00:d7:0d:5b:c7:9f:7d:
b1:38:d3:a7:80:bd:ed:a5:52:a3:2f:f5:57:80:d5:ac:2d:a4:
5e:7f:eb:86:30:a4:cf:e6:3f:27:a6:7e:41:0d:06:3d:8b:0a:
15:76:51:3a:3e:dd:02:5a:c9:ed:58:ed:bf:d6:f2:dd:af:72:
19:7a:05:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUq4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI2MTQwODQwWhcNMjUwMzIxMTQwODQwWjAYMRYw
FAYDVQQDEw02Nzk2NDFlYy03OTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArVXfAxeV4vedq/uLaJ+Nd5FX0BGizaT+4GoH6wgCiFlsN1+IOdkBKTva
ntdJPwmkijYINkcAkCWIQL/rCgz9wYJL41P9EP8qa5A8s+cxW8oKNbyfsy/PkPOU
wmVfOjGSctjEPbvU1KzWfqxRefh6a+htU9zlmTiV7DOt1CdvVTT3r4K3EO2jaVsl
7pAeeR0eOafL7BBvqjEZfn+IHd/LzUwrDlQgAKA+z3QvCbulL8WsK0LNHAw5F54Z
aIKoIQgJG0kWzD81h3HGljF0paJTG/hFouMKFhpQwFgVdVCX+YRi4+rCCWLToXdM
t1NXzge2VwHXTJ+rxjtIPnScxCC2mwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOtA
HHTO+kBBvE1sQmkLMu1N6vcrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wRDYwNjZCMERCRUYxMUVGOEQ1NDdBNDc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBml0iMA0GCSqGSIb3DQEB
CwUAA4IBAQCdEogEg5c+GHqF93Zv/GcCWtA9xptfPgsTbcZ5thhE+p6z2Tq5KdBL
yHl/+U7gKkjVks0PZCMo85nt/0i7w3ReP4MoqaBhNRoy78LzdCQGjgXOn0oWzWmr
cRCGDaOhF74drsYy2Cg7XAxQXa9vEUPvgJDhsfBEbMLfCKmCQueuuw4WFz35ki62
fcMmx6xOEYyagExuEeTBwG6LpxSv91uxsien3iVKIhdaQ1Ij6Aj+8M70Il6cwxIE
wVB7vXwbyQDXDVvHn32xONOngL3tpVKjL/VXgNWsLaRef+uGMKTP5j8npn5BDQY9
iwoVdlE6Pt0CWsntWO2/1vLdr3IZegXF
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:59:30 2025 by rpki-client