Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F8A8D72D8E911EF904D6C5B762E951A.roa
File: 3F8A8D72D8E911EF904D6C5B762E951A.roa (raw, json)
Hash identifier: xzSV51o7uTqbec5aZINYn/Rbl3Mpzlv55kx4wDUp/9E=
Subject key identifier: 5F:A2:87:6E:E0:A0:6B:CB:0D:4E:F4:81:AC:64:F2:1A:F7:24:61:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014022
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F8A8D72D8E911EF904D6C5B762E951A.roa
Signing time: Wed 22 Jan 2025 17:49:38 +0000
ROA not before: Wed 22 Jan 2025 17:49:34 +0000
ROA not after: Sat 15 Mar 2025 17:49:34 +0000
asID: 138915
IP address blocks: 154.206.60.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81954 (0x14022)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 17:49:34 2025 GMT
Not After : Mar 15 17:49:34 2025 GMT
Subject: CN=67912fb2-f45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:0e:a5:84:92:38:33:87:96:e1:e6:dd:37:
4b:37:7b:ee:dd:62:1d:b6:9b:f4:51:50:6b:33:82:
4b:7e:57:c6:90:16:4c:e3:10:e4:18:e8:bd:0a:d4:
87:db:4b:7b:1e:e5:4b:55:dd:95:ec:e5:58:73:5f:
0c:7b:25:05:f7:6b:f6:00:39:e6:05:f7:21:ff:56:
bd:2a:ea:9c:56:f8:fe:e9:df:8e:1c:b4:bf:09:07:
7a:30:88:0e:bd:e5:90:f2:4d:bf:e0:b3:5e:7f:86:
33:79:cf:42:e0:9f:be:38:6b:28:3e:5c:51:4d:d5:
6d:df:c5:cd:59:33:5a:4a:8e:6c:2d:3c:72:3d:c7:
6c:34:83:12:ca:a2:c7:65:2e:33:e2:c4:12:72:50:
95:3c:40:68:1d:0f:02:85:b6:7d:ec:a1:8b:0f:3b:
54:33:33:e6:30:ff:83:2f:97:44:49:36:9d:2b:26:
24:e9:ab:7b:0a:2e:2c:bf:da:fd:92:8d:12:e4:85:
27:fb:7c:20:de:55:93:88:b5:7a:5d:6a:45:e0:8f:
55:45:12:9d:63:05:4e:ac:b3:f6:d5:f5:29:e2:af:
36:89:e9:64:f4:8e:63:a0:4a:5c:d8:d8:c0:00:d6:
37:80:f4:f8:e5:05:fd:a8:d5:13:b0:ae:24:26:af:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A2:87:6E:E0:A0:6B:CB:0D:4E:F4:81:AC:64:F2:1A:F7:24:61:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F8A8D72D8E911EF904D6C5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.60.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:b8:82:9e:15:b7:86:40:1c:f2:62:e8:1b:3f:1b:91:e8:2d:
96:10:d9:8c:24:b4:89:74:7c:95:0d:80:36:42:1e:c6:44:48:
9a:9e:ae:f2:4e:be:bf:6d:4f:31:89:87:0d:74:62:39:c8:b8:
16:ee:b8:1b:a1:d9:8d:a1:ce:52:c8:33:a1:4a:39:a9:36:2f:
c2:ba:9a:d7:4e:2a:b5:13:24:9d:fa:86:3c:b6:f9:59:ac:6c:
c5:82:99:78:84:70:a1:98:79:14:ab:82:71:07:95:85:36:08:
06:35:b6:a1:ed:af:77:72:ec:a4:ce:1f:8b:e6:01:8d:60:95:
50:ee:b2:0b:d1:f3:29:58:99:77:ca:4d:52:9c:22:21:4e:7b:
81:61:a6:96:99:24:0b:8e:d2:91:8c:2f:f2:fa:c7:e6:69:99:
db:a3:8e:b1:75:2b:1c:89:36:d4:8b:bb:72:42:3a:76:0f:03:
ea:a0:2c:cb:80:14:e5:ec:e7:f7:5a:85:06:a4:4e:ba:d7:ff:
bd:40:89:23:c3:fd:05:5c:dd:4f:df:f1:50:cd:cc:16:34:00:
ec:09:2d:1c:33:4b:93:96:43:cc:b0:72:d9:3f:7d:dc:76:0d:
18:db:da:72:dc:4b:c0:1d:88:8f:47:b3:70:f7:2b:01:3f:13:
0d:c0:df:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUAiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMTc0OTM0WhcNMjUwMzE1MTc0OTM0WjAYMRYw
FAYDVQQDEw02NzkxMmZiMi1mNDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqfwOpYSSODOHluHm3TdLN3vu3WIdtpv0UVBrM4JLflfGkBZM4xDkGOi9
CtSH20t7HuVLVd2V7OVYc18MeyUF92v2ADnmBfch/1a9KuqcVvj+6d+OHLS/CQd6
MIgOveWQ8k2/4LNef4Yzec9C4J++OGsoPlxRTdVt38XNWTNaSo5sLTxyPcdsNIMS
yqLHZS4z4sQSclCVPEBoHQ8ChbZ97KGLDztUMzPmMP+DL5dESTadKyYk6at7Ci4s
v9r9ko0S5IUn+3wg3lWTiLV6XWpF4I9VRRKdYwVOrLP21fUp4q82ielk9I5joEpc
2NjAANY3gPT45QX9qNUTsK4kJq9rHwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF+i
h27goGvLDU70gaxk8hr3JGGYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zRjhBOEQ3MkQ4RTkxMUVGOTA0RDZDNUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms48MA0GCSqGSIb3DQEB
CwUAA4IBAQCkuIKeFbeGQBzyYugbPxuR6C2WENmMJLSJdHyVDYA2Qh7GREianq7y
Tr6/bU8xiYcNdGI5yLgW7rgbodmNoc5SyDOhSjmpNi/CuprXTiq1EySd+oY8tvlZ
rGzFgpl4hHChmHkUq4JxB5WFNggGNbah7a93cuykzh+L5gGNYJVQ7rIL0fMpWJl3
yk1SnCIhTnuBYaaWmSQLjtKRjC/y+sfmaZnbo46xdSsciTbUi7tyQjp2DwPqoCzL
gBTl7Of3WoUGpE661/+9QIkjw/0FXN1P3/FQzcwWNADsCS0cM0uTlkPMsHLZP33c
dg0Y29py3EvAHYiPR7Nw9ysBPxMNwN9o
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:44:20 2025 by rpki-client