Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37EB93BED56911EF99E09E6A762E951A.roa
File: 37EB93BED56911EF99E09E6A762E951A.roa (raw, json)
Hash identifier: cbnDgSboHb16+jYxNb2oNRNW+dxTyHVRbmomJh3UYDM=
Subject key identifier: FD:5A:55:04:8C:D4:76:E8:91:DB:D5:36:5B:25:7E:CC:09:1B:C3:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37EB93BED56911EF99E09E6A762E951A.roa
Signing time: Sat 18 Jan 2025 06:55:36 +0000
ROA not before: Sat 18 Jan 2025 06:55:32 +0000
ROA not after: Sat 22 Feb 2025 06:55:32 +0000
asID: 54600
IP address blocks: 154.202.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81286 (0x13d86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 06:55:32 2025 GMT
Not After : Feb 22 06:55:32 2025 GMT
Subject: CN=678b5068-c1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:4a:00:6f:12:f8:af:c1:a9:6c:5d:6d:15:
b5:c4:64:c6:72:2d:21:be:3e:8d:09:65:d4:c7:f9:
3a:a3:1f:fd:a7:70:7a:9c:60:49:7f:46:57:a9:ba:
24:fa:2a:e1:72:24:ab:7b:83:91:09:e2:da:b3:20:
e1:87:44:de:6f:04:ed:cb:02:0d:6e:a6:bc:f4:9a:
72:3f:7e:a3:00:7d:a7:6f:35:4a:5e:7d:72:1b:23:
ae:c3:0d:da:56:35:ff:69:4f:dc:7e:91:a4:4a:c4:
ed:4f:40:76:d2:88:f7:a6:e1:37:47:98:59:a6:2a:
74:f9:a8:1e:b4:a3:eb:88:69:20:11:8c:c3:fd:4b:
ca:13:11:a8:16:13:b0:82:c8:c5:04:e8:6f:60:6e:
6b:a8:50:ca:9a:56:ab:de:41:e8:3b:ba:9d:24:d9:
6c:38:01:77:3b:c7:bf:95:26:08:2b:a4:52:3e:6d:
c0:c2:2b:27:39:c2:18:3f:9a:aa:18:3a:22:b6:33:
16:a1:be:1a:39:72:be:2b:7a:92:06:e6:93:a4:a8:
ae:b7:37:f9:19:29:4b:f7:fa:99:90:0c:36:cd:02:
a0:71:ef:a2:b2:44:7e:c8:60:a7:37:ae:c0:aa:74:
e6:e9:67:d8:c7:b7:8a:99:c5:98:b8:00:55:c4:f5:
2b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5A:55:04:8C:D4:76:E8:91:DB:D5:36:5B:25:7E:CC:09:1B:C3:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37EB93BED56911EF99E09E6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:d6:9e:b3:b4:b6:ef:3a:b6:d7:3c:82:d9:d3:1f:32:7a:7a:
85:ed:15:34:84:1e:8f:a5:16:ed:78:d3:c7:5a:37:00:14:f0:
3c:ac:50:89:c5:40:27:2f:95:dc:51:4d:45:33:20:1f:58:73:
e5:9a:4f:e2:73:16:a7:9e:38:2b:a1:2b:18:1d:34:84:cb:db:
f0:a1:9e:8f:1b:a8:25:d0:59:f6:d6:09:46:8d:13:93:75:23:
99:d9:ac:34:15:c5:5c:31:0d:5c:a8:73:8b:93:d2:54:f0:84:
bb:0e:11:5c:93:40:d8:71:53:4e:9d:6d:b3:4a:ba:02:23:2f:
a0:df:18:cf:25:e4:80:43:f8:13:47:df:58:8a:34:17:4b:04:
fc:8f:84:a1:ed:a9:ce:ca:02:3a:ec:67:58:6f:d5:16:05:87:
54:81:7e:09:9e:62:36:22:28:ec:5b:b3:e8:fe:08:91:30:6c:
cc:35:9c:a0:86:e7:64:2b:3d:88:dc:6a:9f:4d:50:eb:ce:d7:
86:e6:34:be:2f:57:e6:73:68:03:4e:f5:0c:a4:78:35:68:11:
0d:e1:86:e1:99:de:32:5d:3f:c9:ca:10:fb:48:27:cb:55:81:
6f:0b:7e:79:a3:4f:34:50:f3:24:db:96:68:3f:4b:73:14:09:
b8:2a:07:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT2GMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE4MDY1NTMyWhcNMjUwMjIyMDY1NTMyWjAYMRYw
FAYDVQQDEw02NzhiNTA2OC1jMWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy49KAG8S+K/BqWxdbRW1xGTGci0hvj6NCWXUx/k6ox/9p3B6nGBJf0ZX
qbok+irhciSre4ORCeLasyDhh0TebwTtywINbqa89JpyP36jAH2nbzVKXn1yGyOu
ww3aVjX/aU/cfpGkSsTtT0B20oj3puE3R5hZpip0+agetKPriGkgEYzD/UvKExGo
FhOwgsjFBOhvYG5rqFDKmlar3kHoO7qdJNlsOAF3O8e/lSYIK6RSPm3AwisnOcIY
P5qqGDoitjMWob4aOXK+K3qSBuaTpKiutzf5GSlL9/qZkAw2zQKgce+iskR+yGCn
N67AqnTm6WfYx7eKmcWYuABVxPUrswIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP1a
VQSM1HbokdvVNlslfswJG8NFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zN0VCOTNCRUQ1NjkxMUVGOTlFMDlFNkE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsp1MA0GCSqGSIb3DQEB
CwUAA4IBAQCu1p6ztLbvOrbXPILZ0x8yenqF7RU0hB6PpRbteNPHWjcAFPA8rFCJ
xUAnL5XcUU1FMyAfWHPlmk/icxannjgroSsYHTSEy9vwoZ6PG6gl0Fn21glGjROT
dSOZ2aw0FcVcMQ1cqHOLk9JU8IS7DhFck0DYcVNOnW2zSroCIy+g3xjPJeSAQ/gT
R99YijQXSwT8j4Sh7anOygI67GdYb9UWBYdUgX4JnmI2IijsW7Po/giRMGzMNZyg
hudkKz2I3GqfTVDrzteG5jS+L1fmc2gDTvUMpHg1aBEN4Ybhmd4yXT/JyhD7SCfL
VYFvC355o080UPMk25ZoP0tzFAm4Kgef
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:09:15 2025 by rpki-client