Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C5FFB70D8E711EFB045494E762E951A.roa
File: 3C5FFB70D8E711EFB045494E762E951A.roa (raw, json)
Hash identifier: hK5VtBSx1FlGCuIa+QJD6YkisTcYFJTGmxNVigrIcrc=
Subject key identifier: 64:0F:9F:D6:B7:CB:9C:1F:D9:A2:FC:6B:80:DC:FF:CF:CB:B8:05:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014016
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C5FFB70D8E711EFB045494E762E951A.roa
Signing time: Wed 22 Jan 2025 17:35:13 +0000
ROA not before: Wed 22 Jan 2025 17:35:09 +0000
ROA not after: Sat 15 Mar 2025 17:35:09 +0000
asID: 138915
IP address blocks: 154.206.104.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81942 (0x14016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 17:35:09 2025 GMT
Not After : Mar 15 17:35:09 2025 GMT
Subject: CN=67912c51-8b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:8a:c3:98:93:f2:40:4b:86:8e:2e:41:d1:
57:27:75:25:83:eb:5f:c5:89:7d:27:48:2b:6b:a6:
92:05:13:58:75:e6:cc:fb:ae:f9:92:ec:0e:ae:e0:
6b:c2:c0:cc:da:a3:6e:3f:ca:b9:d4:fb:11:5a:d5:
f6:f7:21:cc:09:70:cd:e7:6b:a0:78:3b:7e:9e:43:
50:09:e2:c5:16:dd:fa:e1:8a:51:02:d7:cd:c5:7a:
71:12:d9:94:6f:bc:54:e0:b4:6e:ab:40:26:29:f9:
98:73:f5:97:56:c7:99:5e:23:3f:59:c3:c6:10:ec:
b3:98:65:a7:90:84:9b:2c:02:aa:2a:e4:a3:7a:b4:
65:63:34:61:dc:8c:5a:8c:04:68:9a:6f:f9:a1:dc:
a5:46:15:5b:b9:53:d0:bc:5a:f8:74:d7:3f:7d:c8:
d9:df:f5:db:12:73:23:fb:5a:d6:da:c3:7b:a4:a3:
a4:c4:34:9e:5d:42:74:54:37:6b:50:8a:2d:29:e5:
82:53:79:64:c7:55:9d:e8:ad:d0:d3:16:70:95:49:
b6:1d:37:a8:50:5a:e6:f5:0c:ca:88:eb:98:ed:2d:
e5:4a:53:0f:49:60:6a:e5:1a:38:0d:0f:77:d4:dd:
d5:77:94:a2:87:48:3d:2a:38:0d:f0:c1:3c:54:ff:
1a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0F:9F:D6:B7:CB:9C:1F:D9:A2:FC:6B:80:DC:FF:CF:CB:B8:05:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C5FFB70D8E711EFB045494E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.104.0/23
Signature Algorithm: sha256WithRSAEncryption
23:9d:bb:9e:93:34:e5:93:be:76:c0:6b:e8:a2:07:3b:33:67:
a5:e8:26:cd:a8:1a:69:4c:54:2c:b6:e6:84:37:ad:18:b3:02:
ad:bf:2e:ac:27:08:7f:70:0f:9f:a0:f2:4b:3a:57:cc:7a:27:
8d:a6:3f:86:dc:49:0b:8a:09:c7:f2:ef:3f:fa:17:ce:a9:17:
3e:0c:ae:5e:dd:2f:80:cc:f1:20:93:51:bd:50:16:8e:47:6a:
6e:30:a3:e4:6b:06:35:0b:0a:93:05:88:35:4d:97:13:dd:4e:
e3:4c:cc:0e:af:d3:2a:75:ab:47:db:50:f4:c5:79:8e:93:69:
47:a4:81:55:be:6a:58:20:e3:86:1a:75:9e:58:d3:8a:34:9e:
b7:dd:0c:ef:85:98:d6:eb:b7:1d:8d:c7:9f:03:37:ef:b4:84:
8f:37:0e:3b:5b:6c:11:86:89:dd:12:ee:31:0d:50:9a:12:72:
f7:0c:3d:1e:8d:17:99:5d:7c:ab:42:c1:67:68:79:49:d4:03:
5d:87:59:b5:12:cb:16:76:0c:4c:2b:6c:3b:f9:8b:fa:2c:38:
83:65:6e:35:94:e8:e1:c3:7f:e6:63:f3:a6:70:6e:df:9a:85:
a1:7e:f5:e1:e2:b3:80:10:ac:72:97:8f:2b:c3:9a:13:4c:4c:
62:90:6b:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUAWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMTczNTA5WhcNMjUwMzE1MTczNTA5WjAYMRYw
FAYDVQQDEw02NzkxMmM1MS04YjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq8qKw5iT8kBLho4uQdFXJ3Ulg+tfxYl9J0gra6aSBRNYdebM+675kuwO
ruBrwsDM2qNuP8q51PsRWtX29yHMCXDN52ugeDt+nkNQCeLFFt364YpRAtfNxXpx
EtmUb7xU4LRuq0AmKfmYc/WXVseZXiM/WcPGEOyzmGWnkISbLAKqKuSjerRlYzRh
3IxajARomm/5odylRhVbuVPQvFr4dNc/fcjZ3/XbEnMj+1rW2sN7pKOkxDSeXUJ0
VDdrUIotKeWCU3lkx1Wd6K3Q0xZwlUm2HTeoUFrm9QzKiOuY7S3lSlMPSWBq5Ro4
DQ931N3Vd5Sih0g9KjgN8ME8VP8a7wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGQP
n9a3y5wf2aL8a4Dc/8/LuAXoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQzVGRkI3MEQ4RTcxMUVGQjA0NTQ5NEU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms5oMA0GCSqGSIb3DQEB
CwUAA4IBAQAjnbuekzTlk752wGvoogc7M2el6CbNqBppTFQstuaEN60YswKtvy6s
Jwh/cA+foPJLOlfMeieNpj+G3EkLignH8u8/+hfOqRc+DK5e3S+AzPEgk1G9UBaO
R2puMKPkawY1CwqTBYg1TZcT3U7jTMwOr9MqdatH21D0xXmOk2lHpIFVvmpYIOOG
GnWeWNOKNJ633QzvhZjW67cdjcefAzfvtISPNw47W2wRhondEu4xDVCaEnL3DD0e
jReZXXyrQsFnaHlJ1ANdh1m1EssWdgxMK2w7+Yv6LDiDZW41lOjhw3/mY/OmcG7f
moWhfvXh4rOAEKxyl48rw5oTTExikGsB
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:14:56 2025 by rpki-client