Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/229903A4D8AA11EF98014FB8762E951A.roa
File: 229903A4D8AA11EF98014FB8762E951A.roa (raw, json)
Hash identifier: X/mumby4xS0fyFVZP6uRxhfEIwucjcxXoU4INCNprWA=
Subject key identifier: C5:91:EF:39:49:3A:80:12:FD:E2:64:1F:79:7D:28:A8:A2:F3:00:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/229903A4D8AA11EF98014FB8762E951A.roa
Signing time: Wed 22 Jan 2025 10:17:51 +0000
ROA not before: Wed 22 Jan 2025 10:17:46 +0000
ROA not after: Sat 08 Feb 2025 10:17:46 +0000
asID: 150008
IP address blocks: 154.210.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81590 (0x13eb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 10:17:46 2025 GMT
Not After : Feb 8 10:17:46 2025 GMT
Subject: CN=6790c5cf-dc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:67:01:04:7f:6c:f1:9f:79:5d:3d:00:c0:
a4:c9:db:ef:d0:80:00:2e:ec:fc:f3:fe:55:0d:ca:
79:6c:7c:b3:3c:cd:01:4e:8e:25:e6:4e:52:ae:9b:
12:59:6c:49:eb:49:1d:e4:66:7d:08:e2:3c:b2:a1:
72:97:70:65:f2:dd:17:42:4d:5b:04:01:10:03:ef:
b9:4d:7f:39:39:4d:8f:f8:1e:81:f1:cd:76:99:dc:
7b:50:88:f6:d8:56:b5:b6:b0:d3:5f:50:68:bb:63:
0e:8a:5c:14:74:d5:8f:7b:96:88:bb:47:33:cd:02:
da:f9:e9:b8:8c:c2:d2:6f:6f:16:d9:cd:89:ad:4f:
d4:24:93:85:80:18:7e:0f:0b:ee:b7:40:c9:40:c5:
14:63:fd:f0:39:01:24:62:e4:09:11:4c:62:b0:47:
22:c8:32:3c:f8:4e:72:82:3c:7c:3f:c6:f1:36:14:
4e:be:59:f4:00:62:42:99:5a:90:f6:d9:45:5d:73:
e7:43:9c:e9:b2:2e:bd:c1:b5:c0:cd:58:ed:d9:27:
08:22:49:10:ec:d8:9c:97:88:85:e3:e5:03:11:50:
b2:49:6f:70:21:43:61:5c:c8:e6:43:b8:dc:06:a3:
fc:cc:c0:e0:10:31:08:43:cc:e7:17:cf:02:4b:42:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:91:EF:39:49:3A:80:12:FD:E2:64:1F:79:7D:28:A8:A2:F3:00:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/229903A4D8AA11EF98014FB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.213.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ad:f8:07:04:bc:0e:e0:ce:56:79:b0:12:7d:36:de:73:f4:
20:5a:d4:1e:77:ec:89:05:c4:df:ba:1d:6e:a0:9e:d4:8d:77:
b1:11:42:f8:3b:8e:fb:5a:cb:47:39:64:5f:72:17:48:17:9d:
5d:ac:03:ec:f5:35:33:44:fe:c1:5f:a4:08:b9:64:66:3c:74:
1b:e7:f7:87:fc:15:0a:0a:8b:61:d1:e6:12:8b:fd:08:20:c2:
13:ad:9a:6b:5b:c0:96:d2:e1:90:55:07:aa:c4:da:0f:81:bd:
99:3c:48:0e:81:36:12:83:4b:68:fe:8b:96:a2:e7:f4:df:b3:
e7:47:a5:c9:6f:ec:b3:36:0e:ee:04:8a:6e:90:4a:cb:4e:86:
b8:e8:ff:f8:05:09:a4:97:4a:be:5c:bc:58:46:9f:88:a3:cb:
32:8c:6d:e3:a0:b6:80:72:3a:e3:c2:c4:8c:f3:b5:ae:7a:6d:
76:89:d6:90:58:0d:96:3d:1c:e5:b8:94:d6:f0:4b:ca:d0:76:
5d:8d:72:97:b5:1a:db:3a:a6:36:e1:71:9b:2e:21:47:9d:b8:
8a:15:cf:c0:6d:29:f9:be:24:3a:58:8f:23:61:63:42:82:dc:
a6:a9:1c:70:41:c1:5e:b3:fe:8d:a9:ac:06:0b:1e:c4:fb:a4:
42:af:da:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT62MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMTAxNzQ2WhcNMjUwMjA4MTAxNzQ2WjAYMRYw
FAYDVQQDEw02NzkwYzVjZi1kYzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtxdnAQR/bPGfeV09AMCkydvv0IAALuz88/5VDcp5bHyzPM0BTo4l5k5S
rpsSWWxJ60kd5GZ9COI8sqFyl3Bl8t0XQk1bBAEQA++5TX85OU2P+B6B8c12mdx7
UIj22Fa1trDTX1Bou2MOilwUdNWPe5aIu0czzQLa+em4jMLSb28W2c2JrU/UJJOF
gBh+Dwvut0DJQMUUY/3wOQEkYuQJEUxisEciyDI8+E5ygjx8P8bxNhROvln0AGJC
mVqQ9tlFXXPnQ5zpsi69wbXAzVjt2ScIIkkQ7Nicl4iF4+UDEVCySW9wIUNhXMjm
Q7jcBqP8zMDgEDEIQ8znF88CS0IgswIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMWR
7zlJOoAS/eJkH3l9KKii8wDjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMjk5MDNBNEQ4QUExMUVGOTgwMTRGQjg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtLVMA0GCSqGSIb3DQEB
CwUAA4IBAQChrfgHBLwO4M5WebASfTbec/QgWtQed+yJBcTfuh1uoJ7UjXexEUL4
O477WstHOWRfchdIF51drAPs9TUzRP7BX6QIuWRmPHQb5/eH/BUKCoth0eYSi/0I
IMITrZprW8CW0uGQVQeqxNoPgb2ZPEgOgTYSg0to/ouWouf037PnR6XJb+yzNg7u
BIpukErLToa46P/4BQmkl0q+XLxYRp+Io8syjG3joLaAcjrjwsSM87Wuem12idaQ
WA2WPRzluJTW8EvK0HZdjXKXtRrbOqY24XGbLiFHnbiKFc/AbSn5viQ6WI8jYWNC
gtymqRxwQcFes/6NqawGCx7E+6RCr9rI
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:49:09 2025 by rpki-client