Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10071F2CD8B011EF9FEC605F762E951A.roa
File: 10071F2CD8B011EF9FEC605F762E951A.roa (raw, json)
Hash identifier: ttBxS52pRWJumIc+jHsXLFmzzAKwjfkYBbBgAUV4urg=
Subject key identifier: B8:F5:37:BB:C8:26:2C:C4:9D:AE:64:F3:04:0B:C0:9C:64:94:FE:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EE4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10071F2CD8B011EF9FEC605F762E951A.roa
Signing time: Wed 22 Jan 2025 11:00:17 +0000
ROA not before: Wed 22 Jan 2025 11:00:13 +0000
ROA not after: Sat 08 Feb 2025 11:00:13 +0000
asID: 150008
IP address blocks: 154.206.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81636 (0x13ee4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 11:00:13 2025 GMT
Not After : Feb 8 11:00:13 2025 GMT
Subject: CN=6790cfc1-2e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:40:63:0f:66:02:19:11:0b:9a:18:ec:a8:68:
5a:bc:55:46:69:a2:c9:d2:ef:9e:cb:9c:58:a5:8a:
6e:c9:20:76:e8:57:6e:3a:90:41:f4:f6:0d:be:57:
c0:1b:d9:17:89:99:d0:a3:02:d9:6d:15:17:e5:d1:
5f:84:c6:70:c3:a1:d5:6e:d9:fb:62:22:a9:49:4a:
cf:54:40:1a:49:79:e1:3e:b7:7e:34:31:1f:a4:7c:
2d:38:e5:26:b5:cd:8f:26:4c:81:f8:bc:78:b7:72:
bb:a8:1a:bb:29:ef:25:ba:7d:31:77:83:1f:80:a1:
fa:b6:11:76:14:69:32:40:23:56:82:9a:81:da:b5:
46:23:09:12:58:87:06:86:dc:ee:41:77:22:f1:ec:
26:97:86:8f:c2:3b:1f:e4:36:d6:ab:78:19:da:a6:
77:60:36:ee:73:03:08:4a:9f:e2:7e:7e:f2:a0:19:
6d:7e:d1:65:b2:59:a1:a9:fb:a8:19:c0:c7:56:36:
8e:2c:e6:f7:ae:88:6e:79:14:0a:8e:11:d7:21:20:
ae:98:7a:e7:e5:43:62:9d:af:18:28:d9:67:c0:18:
68:29:f2:54:cf:84:d3:01:7b:49:e2:47:30:f8:87:
fc:2c:12:2d:e5:47:09:15:c4:fc:ff:9e:0d:24:3f:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F5:37:BB:C8:26:2C:C4:9D:AE:64:F3:04:0B:C0:9C:64:94:FE:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10071F2CD8B011EF9FEC605F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.27.0/24
Signature Algorithm: sha256WithRSAEncryption
21:1d:45:bf:63:dc:4a:8c:68:f7:a7:ca:9f:be:85:76:f9:18:
9e:86:3b:7d:af:15:35:60:75:48:2b:60:1e:b5:1d:6c:0d:61:
de:b9:a8:70:6f:ab:65:42:22:02:27:0b:ec:24:46:19:21:54:
94:7c:e8:df:f2:4e:14:45:79:8d:8e:2b:e4:b9:ad:03:01:89:
71:e4:f2:02:7f:91:b2:79:c6:b3:49:f5:f2:bf:77:01:ba:ba:
9c:b9:38:2e:7c:9b:b9:4e:3c:b3:e9:37:48:80:09:8a:7f:8c:
e1:5f:e7:48:5f:aa:09:d3:b3:56:c7:37:1d:60:9c:f3:8a:87:
7d:34:1b:2b:01:00:78:12:df:cb:c3:91:10:58:06:51:f5:b2:
91:4d:3f:ae:77:9a:b5:1a:d6:3c:71:ec:b3:cc:92:09:d0:5f:
d3:ca:7f:24:7d:dd:08:5a:c1:66:45:a5:e1:c7:b3:59:f8:53:
7d:f3:41:5e:70:a3:d8:19:71:d3:ab:3c:19:86:68:75:d4:fc:
74:0c:4c:6e:65:65:6f:90:3a:03:26:5d:b5:fd:41:69:a5:f0:
d7:68:25:be:76:ff:c2:30:55:a4:93:69:fe:6d:75:d3:7b:a4:
6a:16:c5:be:5b:2a:cd:09:45:7e:65:c9:f1:80:d0:8f:71:ab:
ab:e1:e6:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT7kMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMTEwMDEzWhcNMjUwMjA4MTEwMDEzWjAYMRYw
FAYDVQQDEw02NzkwY2ZjMS0yZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3UBjD2YCGRELmhjsqGhavFVGaaLJ0u+ey5xYpYpuySB26FduOpBB9PYN
vlfAG9kXiZnQowLZbRUX5dFfhMZww6HVbtn7YiKpSUrPVEAaSXnhPrd+NDEfpHwt
OOUmtc2PJkyB+Lx4t3K7qBq7Ke8lun0xd4MfgKH6thF2FGkyQCNWgpqB2rVGIwkS
WIcGhtzuQXci8ewml4aPwjsf5DbWq3gZ2qZ3YDbucwMISp/ifn7yoBltftFlslmh
qfuoGcDHVjaOLOb3rohueRQKjhHXISCumHrn5UNina8YKNlnwBhoKfJUz4TTAXtJ
4kcw+If8LBIt5UcJFcT8/54NJD/IiwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLj1
N7vIJizEna5k8wQLwJxklP5PMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMDA3MUYyQ0Q4QjAxMUVGOUZFQzYwNUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4bMA0GCSqGSIb3DQEB
CwUAA4IBAQAhHUW/Y9xKjGj3p8qfvoV2+Riehjt9rxU1YHVIK2AetR1sDWHeuahw
b6tlQiICJwvsJEYZIVSUfOjf8k4URXmNjivkua0DAYlx5PICf5GyecazSfXyv3cB
urqcuTgufJu5Tjyz6TdIgAmKf4zhX+dIX6oJ07NWxzcdYJzziod9NBsrAQB4Et/L
w5EQWAZR9bKRTT+ud5q1GtY8ceyzzJIJ0F/Tyn8kfd0IWsFmRaXhx7NZ+FN980Fe
cKPYGXHTqzwZhmh11Px0DExuZWVvkDoDJl21/UFppfDXaCW+dv/CMFWkk2n+bXXT
e6RqFsW+WyrNCUV+ZcnxgNCPcaur4ea6
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:45:15 2025 by rpki-client