Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DFC260CBB7811EFB5873C96762E951A.roa
File: 3DFC260CBB7811EFB5873C96762E951A.roa (raw, json)
Hash identifier: grIWXPByBinvbAgeis1TFq6Dys6F86bGUhbnYt+JYoI=
Subject key identifier: EA:D1:A1:C5:61:8B:02:2C:35:FB:E9:AA:95:4C:CE:AB:04:E5:6E:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011B92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DFC260CBB7811EFB5873C96762E951A.roa
Signing time: Mon 16 Dec 2024 06:37:38 +0000
ROA not before: Mon 16 Dec 2024 06:37:34 +0000
ROA not after: Tue 04 Mar 2025 06:37:34 +0000
asID: 136970
IP address blocks: 154.197.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72594 (0x11b92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 06:37:34 2024 GMT
Not After : Mar 4 06:37:34 2025 GMT
Subject: CN=675fcab2-85e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:e3:44:8c:fe:d5:f8:89:1a:29:15:1e:46:
61:8a:db:94:05:5e:70:11:13:79:23:b4:39:98:78:
cb:46:5a:b3:ba:35:19:59:7e:c9:8d:e2:bc:98:a6:
ad:e4:54:8e:8d:d4:ab:97:30:8a:43:89:84:17:bb:
64:02:80:1a:f8:60:d7:65:53:5b:2e:6a:3c:4f:55:
34:4e:14:04:5a:cb:a1:31:02:ea:ed:43:4d:12:56:
47:66:85:17:3c:f6:67:fc:12:cc:1e:7a:4a:39:e2:
04:56:77:04:da:a1:fc:fe:a2:55:c4:9a:00:1c:c0:
07:65:44:01:ca:a5:c0:da:15:0e:c8:b8:42:2c:a9:
7c:8c:66:92:01:7a:83:e4:a6:27:8a:ef:b4:4a:45:
81:22:e9:a5:3b:f5:90:7a:4f:b4:a7:ba:d0:88:c2:
cf:59:7e:aa:52:c3:8f:78:6f:fd:b3:a2:b9:61:fd:
7a:01:03:be:61:a8:6f:61:0b:ae:2f:e5:a9:cf:7d:
24:0a:06:f1:c1:75:d7:55:dc:2c:6f:2c:1a:aa:c7:
de:df:60:2c:5c:d2:84:8b:2a:d7:41:69:02:10:50:
91:69:fb:cd:04:9a:16:2d:3f:dd:17:25:ed:f5:a7:
3c:bc:90:ff:1b:d3:27:d2:af:2d:7f:b0:6a:4d:5a:
57:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D1:A1:C5:61:8B:02:2C:35:FB:E9:AA:95:4C:CE:AB:04:E5:6E:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DFC260CBB7811EFB5873C96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.4.0/22
Signature Algorithm: sha256WithRSAEncryption
28:15:ec:fa:fe:d0:dc:62:4e:9e:8d:ae:1a:aa:5b:7d:72:41:
8d:27:10:36:6c:e3:9f:68:47:97:72:42:37:e7:5a:1a:d8:7b:
86:6d:43:5d:b4:a0:3b:29:47:bc:8c:be:22:af:d5:d3:87:f6:
1e:da:b9:19:45:88:86:de:e0:4d:a5:fa:f3:eb:3b:88:45:92:
30:af:d2:d8:e2:44:b0:fc:65:1c:18:2e:b4:3e:a8:4e:f9:42:
44:9e:ee:62:3d:7d:1e:b3:a3:e8:ee:61:74:1d:79:f6:7c:7d:
3c:b7:09:70:31:31:f1:ab:01:ce:4a:8f:42:62:ad:94:c3:f8:
8c:11:ec:d0:f8:34:aa:75:f0:e2:6f:db:11:5f:82:ce:11:94:
01:31:53:7e:20:28:1f:cf:eb:46:0b:6d:96:78:6e:6b:22:c3:
ff:a1:c1:e7:57:6b:df:a0:de:ca:16:ee:6b:06:bb:4b:1c:2b:
cd:16:f5:a8:f4:38:0d:11:75:21:dd:2a:df:1f:b1:00:31:84:
1f:09:d6:53:14:a8:75:33:20:d7:64:be:4b:78:50:68:0b:8b:
ae:51:91:17:f6:2c:7d:54:ad:8b:1e:23:53:a7:7f:e8:f1:41:
da:af:24:77:55:32:38:e4:9d:af:c9:c0:f2:fb:7e:cf:a4:b3:
3d:40:6f:22
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARuSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjE2MDYzNzM0WhcNMjUwMzA0MDYzNzM0WjAYMRYw
FAYDVQQDEw02NzVmY2FiMi04NWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtljjRIz+1fiJGikVHkZhituUBV5wERN5I7Q5mHjLRlqzujUZWX7JjeK8
mKat5FSOjdSrlzCKQ4mEF7tkAoAa+GDXZVNbLmo8T1U0ThQEWsuhMQLq7UNNElZH
ZoUXPPZn/BLMHnpKOeIEVncE2qH8/qJVxJoAHMAHZUQByqXA2hUOyLhCLKl8jGaS
AXqD5KYniu+0SkWBIumlO/WQek+0p7rQiMLPWX6qUsOPeG/9s6K5Yf16AQO+Yahv
YQuuL+Wpz30kCgbxwXXXVdwsbywaqsfe32AsXNKEiyrXQWkCEFCRafvNBJoWLT/d
FyXt9ac8vJD/G9Mn0q8tf7BqTVpXxwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOrR
ocVhiwIsNfvpqpVMzqsE5W5HMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zREZDMjYwQ0JCNzgxMUVGQjU4NzNDOTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsUEMA0GCSqGSIb3DQEB
CwUAA4IBAQAoFez6/tDcYk6eja4aqlt9ckGNJxA2bOOfaEeXckI351oa2HuGbUNd
tKA7KUe8jL4ir9XTh/Ye2rkZRYiG3uBNpfrz6zuIRZIwr9LY4kSw/GUcGC60PqhO
+UJEnu5iPX0es6Po7mF0HXn2fH08twlwMTHxqwHOSo9CYq2Uw/iMEezQ+DSqdfDi
b9sRX4LOEZQBMVN+ICgfz+tGC22WeG5rIsP/ocHnV2vfoN7KFu5rBrtLHCvNFvWo
9DgNEXUh3SrfH7EAMYQfCdZTFKh1MyDXZL5LeFBoC4uuUZEX9ix9VK2LHiNTp3/o
8UHaryR3VTI45J2vycDy+37PpLM9QG8i
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:48:34 2025 by rpki-client