Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52402DD6DD6311EFA8FC6F98762E951A.roa
File: 52402DD6DD6311EFA8FC6F98762E951A.roa (raw, json)
Hash identifier: GlvqUkgAwG/3e/ptXVvj+DWBig+dPfUtrmWvfK0i3pQ=
Subject key identifier: 2A:7D:9E:2A:B9:1F:F0:EB:18:16:00:DA:12:DE:31:A9:8A:C0:36:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52402DD6DD6311EFA8FC6F98762E951A.roa
Signing time: Tue 28 Jan 2025 10:33:32 +0000
ROA not before: Tue 28 Jan 2025 10:33:29 +0000
ROA not after: Tue 11 Feb 2025 10:33:29 +0000
asID: 140869
IP address blocks: 154.81.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85190 (0x14cc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 10:33:29 2025 GMT
Not After : Feb 11 10:33:29 2025 GMT
Subject: CN=6798b27c-c788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:17:c6:a0:0f:dc:69:a4:8a:25:6a:27:1d:
e4:78:79:91:a5:4c:df:ab:03:c9:49:91:95:41:da:
be:da:7c:ba:3b:55:6b:a5:c8:26:1f:b0:e9:9a:f0:
e4:a8:83:4f:fa:a1:48:fb:84:84:c1:f9:7c:c3:8b:
df:1a:18:dd:58:81:f2:62:70:9e:6d:b6:61:6b:fc:
05:dd:d9:5c:32:a7:3b:1e:d1:8e:04:51:26:ca:ba:
d5:03:fd:a9:48:20:15:f6:ec:f1:fe:62:91:9b:39:
6a:c5:ef:16:3a:99:0a:10:12:ce:01:17:a4:7e:e5:
ae:42:36:03:de:77:8a:1e:5e:40:6a:17:07:4d:d3:
d1:b7:6d:d0:2b:7e:84:65:6e:ee:f6:a9:20:18:e5:
78:54:f4:75:72:81:46:7d:28:bf:6f:5d:dd:47:5c:
f8:42:44:16:f5:5c:63:bc:13:b3:3b:bc:68:5e:40:
c5:37:7e:83:42:1f:f4:92:20:da:c9:08:30:a9:fb:
dd:ca:c9:79:fb:71:6f:77:e7:e5:6e:bb:51:63:c7:
98:de:92:8e:7a:8c:20:d3:89:8c:58:8b:79:37:29:
d0:5c:7a:eb:c3:68:af:7e:54:74:fe:c8:bc:f6:c8:
ea:59:25:79:90:1f:c9:1e:86:1b:cf:a8:36:55:f8:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7D:9E:2A:B9:1F:F0:EB:18:16:00:DA:12:DE:31:A9:8A:C0:36:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52402DD6DD6311EFA8FC6F98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.34.0/24
Signature Algorithm: sha256WithRSAEncryption
21:9e:21:2a:d0:1b:c8:01:eb:22:c2:9b:a2:9a:64:bf:3b:4e:
9f:f4:b0:e4:2d:c9:75:01:98:c8:bc:dc:14:58:36:8d:80:83:
d7:4c:65:0b:75:01:42:24:4b:9a:fa:ac:78:b6:e8:ee:e1:f3:
81:c5:cc:e1:83:06:e2:db:f4:91:2f:81:70:2c:eb:3c:40:0a:
5f:d2:f4:47:c2:30:f6:52:22:dd:8d:e5:a5:89:ec:04:e6:11:
d4:22:34:c5:8b:ce:4b:c9:46:49:31:a9:1c:99:1e:44:34:8b:
a2:ae:34:68:cd:e7:f5:66:c6:93:70:a5:1a:4b:09:df:0c:07:
eb:95:b4:7f:a9:a8:af:b8:89:bd:84:fe:82:11:86:51:82:7c:
af:3d:fd:43:79:c0:a5:a7:3a:c6:2f:9b:79:d1:14:cb:a3:1a:
c2:4f:8c:54:bd:40:55:21:34:94:84:72:35:74:7d:ad:ef:b4:
c6:96:ad:bc:f0:ce:5d:ae:1d:e2:ec:cc:57:c1:a3:5a:b0:f1:
e8:84:b4:28:c8:89:15:91:ef:19:a5:48:f9:2e:7a:6e:3a:16:
e5:83:e1:10:62:00:6c:bb:4e:b3:2b:14:ea:5c:bd:bd:e7:b6:
64:2d:22:7c:ef:22:8e:02:9d:91:b1:e9:5a:80:fc:f3:95:a1:
ce:c2:00:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUzGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI4MTAzMzI5WhcNMjUwMjExMTAzMzI5WjAYMRYw
FAYDVQQDEw02Nzk4YjI3Yy1jNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv1MXxqAP3GmkiiVqJx3keHmRpUzfqwPJSZGVQdq+2ny6O1VrpcgmH7Dp
mvDkqINP+qFI+4SEwfl8w4vfGhjdWIHyYnCebbZha/wF3dlcMqc7HtGOBFEmyrrV
A/2pSCAV9uzx/mKRmzlqxe8WOpkKEBLOARekfuWuQjYD3neKHl5AahcHTdPRt23Q
K36EZW7u9qkgGOV4VPR1coFGfSi/b13dR1z4QkQW9VxjvBOzO7xoXkDFN36DQh/0
kiDayQgwqfvdysl5+3Fvd+flbrtRY8eY3pKOeowg04mMWIt5NynQXHrrw2ivflR0
/si89sjqWSV5kB/JHoYbz6g2VfivjQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCp9
niq5H/DrGBYA2hLeMamKwDaJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MjQwMkRENkRENjMxMUVGQThGQzZGOTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlEiMA0GCSqGSIb3DQEB
CwUAA4IBAQAhniEq0BvIAesiwpuimmS/O06f9LDkLcl1AZjIvNwUWDaNgIPXTGUL
dQFCJEua+qx4tuju4fOBxczhgwbi2/SRL4FwLOs8QApf0vRHwjD2UiLdjeWliewE
5hHUIjTFi85LyUZJMakcmR5ENIuirjRozef1ZsaTcKUaSwnfDAfrlbR/qaivuIm9
hP6CEYZRgnyvPf1DecClpzrGL5t50RTLoxrCT4xUvUBVITSUhHI1dH2t77TGlq28
8M5drh3i7MxXwaNasPHohLQoyIkVke8ZpUj5LnpuOhblg+EQYgBsu06zKxTqXL29
57ZkLSJ87yKOAp2RselagPzzlaHOwgDI
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:13:12 2025 by rpki-client