Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C69F34EB21A11EFA20AA6AA762E951A.roa
File: 3C69F34EB21A11EFA20AA6AA762E951A.roa (raw, json)
Hash identifier: SnxEh5Mddp7czwV2/ltPjmoVsR6AQPM5TdfD3nEDZK4=
Subject key identifier: 1C:ED:BD:C8:60:90:43:7D:85:6D:58:E9:B9:FD:D7:04:B0:E6:0C:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C69F34EB21A11EFA20AA6AA762E951A.roa
Signing time: Wed 04 Dec 2024 08:32:02 +0000
ROA not before: Wed 04 Dec 2024 08:31:59 +0000
ROA not after: Sat 01 Feb 2025 08:31:59 +0000
asID: 138915
IP address blocks: 154.93.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71642 (0x117da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 08:31:59 2024 GMT
Not After : Feb 1 08:31:59 2025 GMT
Subject: CN=67501382-104d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fe:78:a8:e0:ed:14:41:e8:e9:35:3c:dc:33:
fa:34:22:73:0e:73:e3:ea:8f:af:b7:ad:07:0e:27:
56:07:c2:c3:f3:d5:7d:7a:46:cd:40:bb:ca:bc:9d:
1b:09:95:7e:03:62:28:34:a9:20:ab:d3:58:a4:fa:
31:75:ec:57:32:5b:8b:8b:04:fd:df:6b:82:ca:d1:
d3:7a:be:5b:29:9c:d1:a3:43:a6:e3:97:b4:8d:d9:
2e:08:6c:11:07:59:16:3f:12:46:d3:06:26:73:73:
65:6c:77:25:6f:c8:f1:80:d6:1c:6e:a9:4a:0a:6f:
e3:0b:66:9b:ae:96:f0:55:97:7f:dc:4a:c8:c3:23:
3f:09:29:fe:46:c4:e7:ba:6b:ec:54:c7:d1:f2:90:
d3:50:c1:14:6b:33:33:52:a0:d2:18:99:bd:9b:46:
8d:c8:bf:11:92:cf:f5:f3:df:ea:67:ac:2a:d2:eb:
95:e6:61:08:65:72:a5:19:28:74:f6:1b:5d:fe:db:
51:0e:ec:dc:8c:4a:31:60:20:77:cb:e5:60:48:73:
19:9d:dc:61:a0:55:5e:95:df:49:bc:94:bd:6d:2e:
30:79:fc:d7:1e:3d:ac:7a:84:c7:c9:d5:73:18:df:
a4:03:87:1d:15:76:1c:e8:77:59:61:31:69:4c:fa:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:ED:BD:C8:60:90:43:7D:85:6D:58:E9:B9:FD:D7:04:B0:E6:0C:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C69F34EB21A11EFA20AA6AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.122.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:7e:e1:ec:f2:6d:29:9e:08:ae:68:55:8d:bb:fb:44:6b:51:
1e:73:55:d4:e1:2d:85:7d:0c:ab:5f:35:56:bc:7f:e8:92:68:
81:e0:88:15:03:a3:5a:ac:02:5d:c4:33:f3:d9:d1:6d:30:cf:
bb:fa:40:49:0d:b3:ee:88:d0:16:2e:31:6c:41:3f:4a:76:1a:
1c:06:de:03:63:17:54:e9:a6:4c:83:ea:52:a5:d3:b6:56:4b:
02:b8:dd:73:0b:e9:f6:d8:b1:56:58:1b:66:15:f9:26:32:c8:
ae:ae:a5:a0:94:f5:0f:9d:f4:85:b3:2a:d5:fc:b0:4c:7c:f7:
5c:fd:66:3f:ab:fc:cf:89:29:8d:ed:d6:f5:f0:80:75:69:4d:
80:06:e7:f5:b1:1b:ae:28:8b:53:80:ca:2a:6e:a3:c9:73:ca:
25:b5:3b:dd:f5:ae:e7:bf:72:c7:7c:df:95:8f:2d:dc:76:49:
63:77:f0:c4:a7:20:41:14:ca:be:3d:57:da:3c:53:a7:7f:a2:
b8:d5:a7:49:13:80:20:e9:ed:1e:68:c4:c5:3e:83:1a:b4:11:
3c:8c:fb:67:85:06:6b:98:81:a7:0b:43:91:65:d5:ef:b4:eb:
98:d3:87:ec:1d:bf:8c:64:c5:62:4c:7f:db:77:03:6b:c1:3c:
e2:6d:08:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARfaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjA0MDgzMTU5WhcNMjUwMjAxMDgzMTU5WjAYMRYw
FAYDVQQDEw02NzUwMTM4Mi0xMDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0P54qODtFEHo6TU83DP6NCJzDnPj6o+vt60HDidWB8LD89V9ekbNQLvK
vJ0bCZV+A2IoNKkgq9NYpPoxdexXMluLiwT932uCytHTer5bKZzRo0Om45e0jdku
CGwRB1kWPxJG0wYmc3NlbHclb8jxgNYcbqlKCm/jC2abrpbwVZd/3ErIwyM/CSn+
RsTnumvsVMfR8pDTUMEUazMzUqDSGJm9m0aNyL8Rks/189/qZ6wq0uuV5mEIZXKl
GSh09htd/ttRDuzcjEoxYCB3y+VgSHMZndxhoFVeld9JvJS9bS4wefzXHj2seoTH
ydVzGN+kA4cdFXYc6HdZYTFpTPpt/wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBzt
vchgkEN9hW1Y6bn91wSw5gwkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQzY5RjM0RUIyMUExMUVGQTIwQUE2QUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml16MA0GCSqGSIb3DQEB
CwUAA4IBAQA7fuHs8m0pngiuaFWNu/tEa1Eec1XU4S2FfQyrXzVWvH/okmiB4IgV
A6NarAJdxDPz2dFtMM+7+kBJDbPuiNAWLjFsQT9KdhocBt4DYxdU6aZMg+pSpdO2
VksCuN1zC+n22LFWWBtmFfkmMsiurqWglPUPnfSFsyrV/LBMfPdc/WY/q/zPiSmN
7db18IB1aU2ABuf1sRuuKItTgMoqbqPJc8oltTvd9a7nv3LHfN+Vjy3cdkljd/DE
pyBBFMq+PVfaPFOnf6K41adJE4Ag6e0eaMTFPoMatBE8jPtnhQZrmIGnC0ORZdXv
tOuY04fsHb+MZMViTH/bdwNrwTzibQgs
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:01:01 2025 by rpki-client