Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E9726BAD8A411EFB35E838F762E951A.roa
File: 1E9726BAD8A411EFB35E838F762E951A.roa (raw, json)
Hash identifier: LqklIhy/ah4djSc4iAZNtCYtT3DI5IidUl4W61AEkzg=
Subject key identifier: 6C:32:DE:87:6E:E0:3F:6E:E0:A2:C3:80:36:FD:FB:D5:81:B4:94:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E9726BAD8A411EFB35E838F762E951A.roa
Signing time: Wed 22 Jan 2025 09:34:47 +0000
ROA not before: Wed 22 Jan 2025 09:34:43 +0000
ROA not after: Tue 04 Feb 2025 09:34:43 +0000
asID: 8796
IP address blocks: 154.201.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81546 (0x13e8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 09:34:43 2025 GMT
Not After : Feb 4 09:34:43 2025 GMT
Subject: CN=6790bbb7-4cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:81:ff:a1:a9:48:11:14:e6:6c:28:67:8b:1d:
07:b7:d0:ab:e5:51:e2:aa:5d:84:20:6b:77:d4:3c:
5c:12:45:57:60:b3:b5:9d:25:bc:3d:6c:9e:69:b5:
06:a2:cc:97:80:5f:21:f8:48:73:9f:4a:cd:db:fd:
e3:fb:4a:96:61:5d:d0:68:12:ed:82:41:c6:71:18:
f5:e2:e9:d1:4a:82:10:b9:e1:96:6a:24:35:3c:ef:
2c:e5:e1:e3:06:62:56:d7:a9:03:30:59:c7:3f:2a:
f4:70:9c:b0:db:80:c1:c5:1c:b4:fa:72:af:a4:a8:
b1:67:cd:7e:26:87:88:fd:7b:01:9c:b8:9c:1a:71:
70:d5:14:06:15:53:7b:c8:01:7b:ff:f5:d8:74:75:
81:7a:21:36:79:9c:ad:5b:8c:c5:21:c8:f2:27:b5:
d3:c2:09:39:e8:c2:0a:0f:22:ee:67:b9:44:67:b8:
6b:68:be:aa:43:43:bb:03:7a:ba:00:bb:c2:6b:7d:
88:8d:fa:6b:2f:54:6c:51:27:58:22:30:a5:71:21:
56:e3:55:2c:f6:ae:60:81:b6:d8:9c:4a:6b:16:6f:
92:65:01:62:1a:b5:63:2c:3f:e3:3a:62:f4:14:5c:
ca:fa:47:a6:3b:59:5e:11:38:80:00:0e:dd:1f:ae:
86:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:32:DE:87:6E:E0:3F:6E:E0:A2:C3:80:36:FD:FB:D5:81:B4:94:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E9726BAD8A411EFB35E838F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.88.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:65:49:49:b4:51:92:01:6b:ca:db:58:48:31:59:2a:3e:17:
46:dd:97:70:63:fd:80:c4:c0:43:a6:c6:c4:04:ad:f7:eb:a7:
49:a4:c3:3b:74:b3:40:8b:85:2c:2c:af:4b:55:23:7d:b7:31:
41:09:b4:eb:20:7b:21:8a:54:ae:81:4a:2f:4a:01:5d:90:8a:
13:82:bf:5e:c9:e4:5a:86:99:8a:95:b9:87:3b:2e:e1:05:f9:
01:b7:81:f9:6e:e1:d9:0d:37:97:0c:17:91:53:61:db:01:45:
1e:12:f7:c7:9a:0e:8e:72:2d:2e:9b:d9:2d:21:5a:ae:86:dd:
7f:23:10:ff:a4:e4:06:b6:b1:e5:35:8b:a0:9d:da:65:16:ef:
a2:aa:9f:90:40:59:ca:f8:39:8c:dd:c2:e3:ec:28:69:7d:f4:
91:96:ff:d7:74:57:a9:3f:77:93:ac:ef:d5:1c:15:45:a2:6c:
11:a5:17:f5:8c:9a:8b:9a:39:60:07:08:d9:b4:9d:34:6c:65:
d9:30:90:75:2e:d7:ed:9d:5f:3c:91:84:e8:85:be:4e:6f:91:
f4:50:7c:a4:99:c5:5a:6d:bc:87:6b:07:01:a8:15:b2:f8:5f:
87:cf:87:db:e2:6b:7a:48:5c:44:cc:e9:b7:10:e0:a6:6c:9c:
6c:ce:6e:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT6KMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMDkzNDQzWhcNMjUwMjA0MDkzNDQzWjAYMRYw
FAYDVQQDEw02NzkwYmJiNy00Y2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6oH/oalIERTmbChnix0Ht9Cr5VHiql2EIGt31DxcEkVXYLO1nSW8PWye
abUGosyXgF8h+Ehzn0rN2/3j+0qWYV3QaBLtgkHGcRj14unRSoIQueGWaiQ1PO8s
5eHjBmJW16kDMFnHPyr0cJyw24DBxRy0+nKvpKixZ81+JoeI/XsBnLicGnFw1RQG
FVN7yAF7//XYdHWBeiE2eZytW4zFIcjyJ7XTwgk56MIKDyLuZ7lEZ7hraL6qQ0O7
A3q6ALvCa32IjfprL1RsUSdYIjClcSFW41Us9q5ggbbYnEprFm+SZQFiGrVjLD/j
OmL0FFzK+kemO1leETiAAA7dH66GqQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGwy
3odu4D9u4KLDgDb9+9WBtJSGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRTk3MjZCQUQ4QTQxMUVGQjM1RTgzOEY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmslYMA0GCSqGSIb3DQEB
CwUAA4IBAQCyZUlJtFGSAWvK21hIMVkqPhdG3ZdwY/2AxMBDpsbEBK3366dJpMM7
dLNAi4UsLK9LVSN9tzFBCbTrIHshilSugUovSgFdkIoTgr9eyeRahpmKlbmHOy7h
BfkBt4H5buHZDTeXDBeRU2HbAUUeEvfHmg6Oci0um9ktIVquht1/IxD/pOQGtrHl
NYugndplFu+iqp+QQFnK+DmM3cLj7ChpffSRlv/XdFepP3eTrO/VHBVFomwRpRf1
jJqLmjlgBwjZtJ00bGXZMJB1LtftnV88kYTohb5Ob5H0UHykmcVabbyHawcBqBWy
+F+Hz4fb4mt6SFxEzOm3EOCmbJxszm6R
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:56:01 2025 by rpki-client