Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1327AC3ECF3311EF826BCDB9762E951A.roa
File: 1327AC3ECF3311EF826BCDB9762E951A.roa (raw, json)
Hash identifier: AClhEYmGkqSjQY5snHo2GBVizUe0dlt7scfKbI9pWzo=
Subject key identifier: 44:49:63:ED:6A:EE:C8:D2:1C:A6:28:2A:3C:3F:A1:A7:17:D7:24:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1327AC3ECF3311EF826BCDB9762E951A.roa
Signing time: Fri 10 Jan 2025 09:12:54 +0000
ROA not before: Fri 10 Jan 2025 09:12:51 +0000
ROA not after: Fri 07 Feb 2025 09:12:51 +0000
asID: 39600
IP address blocks: 154.94.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80343 (0x139d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 09:12:51 2025 GMT
Not After : Feb 7 09:12:51 2025 GMT
Subject: CN=6780e496-27a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:05:73:02:d6:a0:eb:a4:88:32:3e:74:ee:
3d:7e:13:a4:c7:66:9e:15:5d:7e:e4:c4:ec:31:b6:
19:df:29:1a:32:fd:90:84:41:e3:5c:1c:86:0b:d3:
c1:69:be:14:a7:7b:20:eb:03:56:a7:23:be:7e:2d:
e8:97:6f:bb:ca:a5:85:57:d5:8b:58:73:0a:b2:a1:
f8:b0:78:5e:fd:fc:a5:7e:f8:7a:5b:e8:75:9d:f1:
4b:2a:ed:07:c4:1e:68:68:a7:af:56:2b:ad:de:bb:
45:8c:75:a9:ff:27:21:bf:a1:f7:d5:a6:7d:35:be:
9a:77:16:4e:fc:f5:97:d4:93:6e:c2:5f:15:66:5d:
d4:9c:91:c5:19:4c:1d:b7:89:25:fa:e5:c2:15:15:
04:de:77:d8:ad:ab:86:91:c6:60:35:b7:03:be:21:
e9:70:eb:b9:4b:91:65:bd:fe:b5:cf:f1:4c:c8:f0:
6c:7b:5f:38:54:c7:cd:9f:31:4a:c8:da:a4:d4:f3:
6b:2b:43:6c:c1:86:7e:28:6a:8b:34:94:c8:7e:2f:
c5:9d:74:9e:bf:d8:e1:1e:a5:c1:d5:27:2b:4d:0f:
11:88:48:8a:b6:32:cb:74:72:96:db:3d:35:e6:8c:
ca:81:eb:ad:51:8c:f0:6e:50:ef:7d:91:f5:5e:88:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:49:63:ED:6A:EE:C8:D2:1C:A6:28:2A:3C:3F:A1:A7:17:D7:24:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1327AC3ECF3311EF826BCDB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.33.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:0d:a8:b3:22:a8:e7:e5:7f:00:4e:54:92:a2:0c:a5:4f:0b:
65:8c:7c:7d:3e:43:02:a3:fb:df:ae:96:a3:86:ee:c9:1a:9c:
8c:15:e4:7f:3c:4e:5d:61:58:92:7c:9d:52:b8:a6:c9:18:a8:
20:d8:24:f4:4e:ec:95:24:7c:bf:50:b8:57:42:6e:a2:42:a3:
b4:8a:91:4f:88:45:01:f4:27:4d:0a:01:17:3c:a9:5d:43:f9:
66:f5:59:fd:ce:2f:00:9b:b8:94:9c:1c:04:f9:41:e8:d3:66:
9f:14:b5:ac:90:83:fb:d0:78:b9:b1:c1:d1:af:3e:f6:cd:4a:
ea:df:2a:c9:0a:a1:23:21:e1:21:07:24:3c:1e:01:8f:78:7d:
fb:35:ec:97:27:58:ac:be:70:da:4a:eb:d4:59:ca:af:1d:09:
be:91:c3:5a:1e:2c:64:3a:03:56:71:0a:5e:72:fc:b1:fa:26:
43:ff:78:a0:2e:97:31:d1:46:23:ca:0b:e1:9c:55:45:95:11:
f7:b5:45:af:9c:32:10:fa:6a:b1:09:0a:8e:04:a9:0c:84:5b:
91:2b:b2:8e:8e:59:f5:ba:f1:bf:d7:86:b0:09:9a:7d:93:f0:
d8:a0:bd:81:fc:3c:4e:1b:7c:06:8d:e1:01:49:ce:94:03:7d:
b6:40:c2:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATnXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTEwMDkxMjUxWhcNMjUwMjA3MDkxMjUxWjAYMRYw
FAYDVQQDEw02NzgwZTQ5Ni0yN2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAurcFcwLWoOukiDI+dO49fhOkx2aeFV1+5MTsMbYZ3ykaMv2QhEHjXByG
C9PBab4Up3sg6wNWpyO+fi3ol2+7yqWFV9WLWHMKsqH4sHhe/fylfvh6W+h1nfFL
Ku0HxB5oaKevViut3rtFjHWp/ychv6H31aZ9Nb6adxZO/PWX1JNuwl8VZl3UnJHF
GUwdt4kl+uXCFRUE3nfYrauGkcZgNbcDviHpcOu5S5Flvf61z/FMyPBse184VMfN
nzFKyNqk1PNrK0NswYZ+KGqLNJTIfi/FnXSev9jhHqXB1ScrTQ8RiEiKtjLLdHKW
2z015ozKgeutUYzwblDvfZH1Xoj5PQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFERJ
Y+1q7sjSHKYoKjw/oacX1yT2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMzI3QUMzRUNGMzMxMUVGODI2QkNEQjk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml4hMA0GCSqGSIb3DQEB
CwUAA4IBAQBcDaizIqjn5X8ATlSSogylTwtljHx9PkMCo/vfrpajhu7JGpyMFeR/
PE5dYViSfJ1SuKbJGKgg2CT0TuyVJHy/ULhXQm6iQqO0ipFPiEUB9CdNCgEXPKld
Q/lm9Vn9zi8Am7iUnBwE+UHo02afFLWskIP70Hi5scHRrz72zUrq3yrJCqEjIeEh
ByQ8HgGPeH37NeyXJ1isvnDaSuvUWcqvHQm+kcNaHixkOgNWcQpecvyx+iZD/3ig
Lpcx0UYjygvhnFVFlRH3tUWvnDIQ+mqxCQqOBKkMhFuRK7KOjln1uvG/14awCZp9
k/DYoL2B/DxOG3wGjeEBSc6UA322QMLW
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:28:29 2025 by rpki-client