Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/449CC3DCCAE011EF85C96EA5762E951A.roa
File: 449CC3DCCAE011EF85C96EA5762E951A.roa (raw, json)
Hash identifier: 7rHDXqSXAq7+nFXpn0YwMoRjL6jFJGbGETu17RNAYbc=
Subject key identifier: C3:9D:23:CA:F7:2E:BE:15:E1:4E:79:DE:03:39:62:68:F8:B3:62:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013567
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/449CC3DCCAE011EF85C96EA5762E951A.roa
Signing time: Sat 04 Jan 2025 21:10:05 +0000
ROA not before: Sun 05 Jan 2025 21:10:01 +0000
ROA not after: Tue 04 Feb 2025 21:10:01 +0000
asID: 203020
IP address blocks: 154.205.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79207 (0x13567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 21:10:01 2025 GMT
Not After : Feb 4 21:10:01 2025 GMT
Subject: CN=6779a3ac-9647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:c6:5f:aa:36:1c:7f:f7:f3:38:47:a5:26:
3c:3b:e8:59:80:81:4b:ec:a5:6c:32:ea:92:ca:bf:
c9:b1:07:1d:52:81:28:ba:d0:b3:41:62:a5:43:dd:
8f:7e:13:81:f2:67:e3:f6:e8:c4:cb:73:e1:ba:77:
ec:5f:c4:04:dc:fa:7b:3a:00:85:45:d3:85:8f:d6:
5d:3b:de:48:d6:fe:58:85:56:3a:56:d6:e5:69:73:
e7:de:d3:55:ba:8d:f2:c2:26:9a:4b:2c:46:c5:e1:
21:fe:13:d3:aa:5f:95:b7:1b:a1:22:93:00:4d:25:
f3:36:56:44:ce:da:4c:e5:15:45:29:14:d0:7d:d5:
58:dd:24:59:c7:8d:ad:8d:5e:4c:01:c2:c2:dd:c6:
3c:a1:f1:87:3d:9f:3b:5e:c1:e1:a6:6b:c9:43:ef:
8a:7c:4a:6c:4e:4a:52:f3:c3:15:37:8e:d4:30:f9:
63:99:8a:1f:7d:9d:a8:ed:a6:04:5f:38:01:24:6d:
f5:3a:eb:6d:68:20:4c:70:9c:78:31:31:78:91:20:
e0:5b:6d:5d:2f:08:f0:52:92:ce:d9:d9:93:8f:e7:
e2:2d:8b:82:50:c5:89:a8:51:72:c7:68:c6:12:4c:
18:9b:b9:8f:8d:3b:d0:be:5c:dd:13:06:38:a4:3c:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9D:23:CA:F7:2E:BE:15:E1:4E:79:DE:03:39:62:68:F8:B3:62:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/449CC3DCCAE011EF85C96EA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.168.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:9a:db:c6:76:ae:4b:8d:f8:3e:14:b7:fb:48:15:b0:1e:93:
66:e6:e0:7b:b9:33:b5:1f:c8:ff:2a:41:9f:28:72:e5:e0:42:
ce:7b:75:93:2f:eb:05:69:27:5e:ff:9d:3f:9c:9f:03:32:e3:
30:1d:58:63:04:02:d3:70:d1:f7:bb:7a:cc:b1:4c:7d:9d:7b:
18:b0:50:65:35:24:81:06:20:84:f5:0c:6e:1f:b3:70:ce:79:
ec:5d:b1:f8:dd:4f:12:9c:20:81:7d:36:f6:12:f4:f5:cc:53:
25:80:9b:50:d1:c0:5d:88:ca:ce:05:61:61:79:d5:f8:79:04:
88:a1:9f:47:a5:71:ca:c4:55:91:f5:ed:b3:cf:24:10:cc:2d:
89:ad:59:97:3a:55:00:8b:6b:2d:14:85:91:97:42:e5:8c:0b:
22:fe:e3:06:40:a0:51:1b:ec:37:0f:b9:84:75:12:ab:bd:f4:
b2:78:19:cb:0e:bc:f1:38:b1:c7:7a:38:fb:81:98:ec:80:8d:
8e:4a:e2:a4:4d:44:7f:f7:7d:43:e3:47:90:7a:34:76:34:83:
8e:5e:24:5e:b1:a2:fb:e3:f2:53:09:77:f3:0c:e0:83:9e:5f:
3e:77:47:9d:2d:da:24:59:4a:9d:3d:8e:cd:35:ee:cd:cc:62:
1c:a5:fe:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATVnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA1MjExMDAxWhcNMjUwMjA0MjExMDAxWjAYMRYw
FAYDVQQDEw02Nzc5YTNhYy05NjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx6bGX6o2HH/38zhHpSY8O+hZgIFL7KVsMuqSyr/JsQcdUoEoutCzQWKl
Q92PfhOB8mfj9ujEy3PhunfsX8QE3Pp7OgCFRdOFj9ZdO95I1v5YhVY6VtblaXPn
3tNVuo3ywiaaSyxGxeEh/hPTql+VtxuhIpMATSXzNlZEztpM5RVFKRTQfdVY3SRZ
x42tjV5MAcLC3cY8ofGHPZ87XsHhpmvJQ++KfEpsTkpS88MVN47UMPljmYoffZ2o
7aYEXzgBJG31OuttaCBMcJx4MTF4kSDgW21dLwjwUpLO2dmTj+fiLYuCUMWJqFFy
x2jGEkwYm7mPjTvQvlzdEwY4pDzAdQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMOd
I8r3Lr4V4U553gM5Ymj4s2LjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NDlDQzNEQ0NBRTAxMUVGODVDOTZFQTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCms2oMA0GCSqGSIb3DQEB
CwUAA4IBAQBPmtvGdq5Ljfg+FLf7SBWwHpNm5uB7uTO1H8j/KkGfKHLl4ELOe3WT
L+sFaSde/50/nJ8DMuMwHVhjBALTcNH3u3rMsUx9nXsYsFBlNSSBBiCE9QxuH7Nw
znnsXbH43U8SnCCBfTb2EvT1zFMlgJtQ0cBdiMrOBWFhedX4eQSIoZ9HpXHKxFWR
9e2zzyQQzC2JrVmXOlUAi2stFIWRl0LljAsi/uMGQKBRG+w3D7mEdRKrvfSyeBnL
DrzxOLHHejj7gZjsgI2OSuKkTUR/931D40eQejR2NIOOXiResaL74/JTCXfzDOCD
nl8+d0edLdokWUqdPY7NNe7NzGIcpf5L
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:05:57 2025 by rpki-client