Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/349711CEDBDC11EF8810C749762E951A.roa
File: 349711CEDBDC11EF8810C749762E951A.roa (raw, json)
Hash identifier: 3lnF3gc7NnYbfIxGtvnzA5KZJLKBCOKPRJI/Ysdc2yM=
Subject key identifier: DD:3B:8B:FB:67:9D:09:F7:B9:A6:42:12:73:71:29:D7:85:2D:57:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A80
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/349711CEDBDC11EF8810C749762E951A.roa
Signing time: Sun 26 Jan 2025 11:53:50 +0000
ROA not before: Sun 26 Jan 2025 11:53:42 +0000
ROA not after: Tue 25 Mar 2025 11:53:42 +0000
asID: 6079
IP address blocks: 154.202.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84608 (0x14a80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 11:53:42 2025 GMT
Not After : Mar 25 11:53:42 2025 GMT
Subject: CN=6796224d-23e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3a:84:cc:12:fd:21:0f:cb:f4:38:22:8d:ce:
ae:98:50:77:4b:69:96:a0:a8:e4:a3:65:05:80:30:
0e:2d:56:d2:82:8a:56:bb:70:7f:e3:8b:e8:2c:f2:
b7:ae:e8:7e:d6:45:ee:93:d7:cd:90:d8:b5:5d:49:
fb:a6:83:1b:11:ce:ed:db:dc:d6:93:3a:ac:c2:ae:
b7:b1:fe:6e:4c:d6:a1:90:3e:a3:27:ad:ee:bf:54:
e2:28:73:bd:d5:c4:cc:1d:12:b5:4b:30:1d:be:ce:
e6:3c:7b:41:0d:28:2c:ab:80:4f:28:3a:39:74:55:
dc:a9:df:95:e3:30:45:9b:23:db:bb:2c:bc:4a:39:
99:75:4c:9a:d7:8b:0a:d5:00:b7:7e:fc:ca:36:ef:
db:49:eb:a3:e5:9d:e9:7f:01:4b:62:7f:4f:33:9d:
f5:39:0d:11:bd:f3:b3:60:38:b2:9d:1a:6c:e2:c8:
cb:43:8b:10:17:b1:f3:31:cf:01:68:92:8d:29:03:
50:73:59:98:c4:15:2d:97:e1:69:ab:61:4b:2b:0e:
80:1d:d8:ac:61:89:04:d6:dd:27:5d:72:56:d0:77:
e0:a6:f0:ea:0f:13:14:b2:a8:2d:cf:c5:7e:14:c5:
ff:a4:a9:d0:cb:26:69:64:36:4f:62:22:d7:d8:19:
00:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3B:8B:FB:67:9D:09:F7:B9:A6:42:12:73:71:29:D7:85:2D:57:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/349711CEDBDC11EF8810C749762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.138.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:17:21:60:08:de:59:31:a6:e7:31:71:0c:5e:dd:b3:b8:a3:
28:f9:15:bb:4b:9d:22:67:28:31:55:cf:61:26:97:df:9b:9d:
e1:a6:07:fa:f1:eb:02:dc:3b:23:f7:8e:36:03:8f:d0:49:33:
12:f9:f9:2e:57:3e:21:da:88:47:7e:4c:b0:78:6d:90:90:a1:
b1:e7:2b:01:5c:eb:7c:7d:66:95:97:0e:39:3f:45:1b:0e:02:
97:fa:60:ec:d9:fa:52:ac:88:63:ec:cb:78:40:73:46:99:69:
bf:d6:ee:f4:1c:31:44:21:5d:6d:5d:b1:b4:76:1b:54:2b:3f:
c8:1b:de:bc:f0:2f:0c:f9:ce:65:63:e7:11:78:64:d7:4b:c7:
ce:16:5c:5b:10:d3:33:0e:c4:63:5f:7c:0f:fc:8a:7b:74:cf:
92:7b:ed:30:e4:df:10:52:80:5a:0c:1c:13:bc:57:dc:56:9a:
e8:e7:52:67:32:55:97:29:09:1b:04:2b:f0:c0:f2:de:a1:94:
c1:8f:c7:4e:ee:bd:40:61:c2:da:c7:f7:1e:9c:9b:25:8b:62:
fb:11:e0:f0:51:0e:c8:73:aa:cd:c5:af:e3:5f:eb:28:9b:c4:
9d:d3:88:eb:bf:f4:2f:52:a1:8f:03:1e:44:3b:8b:68:99:6c:
b4:5c:c8:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUqAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI2MTE1MzQyWhcNMjUwMzI1MTE1MzQyWjAYMRYw
FAYDVQQDEw02Nzk2MjI0ZC0yM2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1jqEzBL9IQ/L9Dgijc6umFB3S2mWoKjko2UFgDAOLVbSgopWu3B/44vo
LPK3ruh+1kXuk9fNkNi1XUn7poMbEc7t29zWkzqswq63sf5uTNahkD6jJ63uv1Ti
KHO91cTMHRK1SzAdvs7mPHtBDSgsq4BPKDo5dFXcqd+V4zBFmyPbuyy8SjmZdUya
14sK1QC3fvzKNu/bSeuj5Z3pfwFLYn9PM531OQ0RvfOzYDiynRps4sjLQ4sQF7Hz
Mc8BaJKNKQNQc1mYxBUtl+Fpq2FLKw6AHdisYYkE1t0nXXJW0HfgpvDqDxMUsqgt
z8V+FMX/pKnQyyZpZDZPYiLX2BkACQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN07
i/tnnQn3uaZCEnNxKdeFLVdaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNDk3MTFDRURCREMxMUVGODgxMEM3NDk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsqKMA0GCSqGSIb3DQEB
CwUAA4IBAQDLFyFgCN5ZMabnMXEMXt2zuKMo+RW7S50iZygxVc9hJpffm53hpgf6
8esC3Dsj9442A4/QSTMS+fkuVz4h2ohHfkyweG2QkKGx5ysBXOt8fWaVlw45P0Ub
DgKX+mDs2fpSrIhj7Mt4QHNGmWm/1u70HDFEIV1tXbG0dhtUKz/IG9688C8M+c5l
Y+cReGTXS8fOFlxbENMzDsRjX3wP/Ip7dM+Se+0w5N8QUoBaDBwTvFfcVpro51Jn
MlWXKQkbBCvwwPLeoZTBj8dO7r1AYcLax/cenJsli2L7EeDwUQ7Ic6rNxa/jX+so
m8Sd04jrv/QvUqGPAx5EO4tomWy0XMiH
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:40:21 2025 by rpki-client