Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61508364DBF311EFABD1D262762E951A.roa
File: 61508364DBF311EFABD1D262762E951A.roa (raw, json)
Hash identifier: l0z0OCyomHNaupT/0bmdjaNdLj2TjXH2hAfwdrQPhzs=
Subject key identifier: DA:5C:6F:2F:7D:45:E5:99:AB:4C:0D:E7:03:D6:FA:27:D3:31:10:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AD2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61508364DBF311EFABD1D262762E951A.roa
Signing time: Sun 26 Jan 2025 14:39:43 +0000
ROA not before: Sun 26 Jan 2025 14:39:39 +0000
ROA not after: Fri 21 Mar 2025 14:39:39 +0000
asID: 138915
IP address blocks: 154.93.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84690 (0x14ad2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 14:39:39 2025 GMT
Not After : Mar 21 14:39:39 2025 GMT
Subject: CN=6796492f-922c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:27:8c:77:b7:d8:ab:8a:76:22:0f:56:d9:
9c:c1:9c:b6:09:05:ed:c3:eb:fb:1c:9d:56:2c:7d:
aa:b8:43:25:3d:d4:d0:72:f8:8d:5c:b4:08:51:ce:
5a:26:57:90:62:c3:b5:cc:9a:9b:fc:8b:40:c3:33:
21:7b:fb:11:88:07:0f:69:a4:21:95:00:0c:16:8d:
02:e9:d0:d7:f4:6e:6f:72:21:a3:50:2e:b4:88:8b:
94:84:29:52:d6:10:d8:a3:5d:e4:b7:d9:41:a8:88:
0e:6a:ec:b6:d0:40:93:f1:07:6c:67:d1:53:b3:fa:
02:8a:03:1d:39:52:a7:f8:0c:0e:0f:3b:bc:8d:23:
bc:a6:fa:14:57:56:af:fc:23:d3:f2:7d:f2:1f:51:
7b:56:b7:81:56:ab:b9:83:2f:f4:09:f3:22:85:7b:
83:47:22:ce:76:69:7e:02:97:1a:e9:6a:bf:06:64:
74:e4:13:df:ab:ab:b1:97:6f:76:80:62:94:7f:73:
f4:0b:86:71:de:b3:83:7b:7d:b4:d7:a1:1a:6d:aa:
a7:d5:a5:d4:ad:95:83:a5:93:cf:20:c6:c9:2b:92:
e4:14:fb:b7:57:63:7e:da:da:8f:e1:14:c9:bb:2e:
4b:21:a2:10:64:e9:9e:42:c1:48:03:29:83:e2:ff:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5C:6F:2F:7D:45:E5:99:AB:4C:0D:E7:03:D6:FA:27:D3:31:10:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61508364DBF311EFABD1D262762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.32.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:a4:14:23:bb:32:43:ef:e1:ef:3d:c4:48:c0:90:04:0c:c7:
59:8b:64:4a:59:a9:18:b6:e4:35:45:c9:05:ac:ad:23:9c:3d:
a4:d6:20:4c:e1:7c:94:d1:31:df:54:5d:2b:d7:74:ab:22:de:
0a:6c:64:23:4b:8c:b5:22:92:5e:09:14:a6:40:26:4e:40:d1:
4d:60:ea:e4:55:34:b6:6f:3a:99:f0:3e:40:99:db:2e:d3:f4:
58:a0:de:8e:f8:b3:b5:c1:9e:15:63:dc:ac:8a:27:f3:f2:6e:
8b:60:85:df:5e:e3:43:b8:fb:03:29:97:27:53:56:b8:28:a0:
95:57:c2:70:bf:29:ec:02:e7:cc:80:e1:3f:b1:e9:29:bd:54:
23:53:a7:2f:e7:d1:4a:77:47:43:80:a9:6a:8d:30:92:c7:a6:
27:3a:6d:3d:4e:7a:66:72:04:36:19:36:fa:58:26:98:df:46:
e1:7b:8d:1a:a5:b4:89:64:f1:88:ab:1d:f2:18:b1:5a:60:df:
88:a4:e1:2b:41:1d:43:28:b0:c6:22:16:93:0a:21:01:5e:df:
19:a9:c1:5f:4c:12:ae:33:a7:44:64:b1:af:05:63:12:ac:1d:
82:05:54:fc:fe:59:75:af:83:02:65:cc:d5:c9:42:cc:a5:c7:
7b:1b:71:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUrSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI2MTQzOTM5WhcNMjUwMzIxMTQzOTM5WjAYMRYw
FAYDVQQDEw02Nzk2NDkyZi05MjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv28njHe32KuKdiIPVtmcwZy2CQXtw+v7HJ1WLH2quEMlPdTQcviNXLQI
Uc5aJleQYsO1zJqb/ItAwzMhe/sRiAcPaaQhlQAMFo0C6dDX9G5vciGjUC60iIuU
hClS1hDYo13kt9lBqIgOauy20ECT8QdsZ9FTs/oCigMdOVKn+AwODzu8jSO8pvoU
V1av/CPT8n3yH1F7VreBVqu5gy/0CfMihXuDRyLOdml+Apca6Wq/BmR05BPfq6ux
l292gGKUf3P0C4Zx3rODe32016Eabaqn1aXUrZWDpZPPIMbJK5LkFPu3V2N+2tqP
4RTJuy5LIaIQZOmeQsFIAymD4v8OUwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNpc
by99ReWZq0wN5wPW+ifTMRDfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MTUwODM2NERCRjMxMUVGQUJEMUQyNjI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml0gMA0GCSqGSIb3DQEB
CwUAA4IBAQDRpBQjuzJD7+HvPcRIwJAEDMdZi2RKWakYtuQ1RckFrK0jnD2k1iBM
4XyU0THfVF0r13SrIt4KbGQjS4y1IpJeCRSmQCZOQNFNYOrkVTS2bzqZ8D5Amdsu
0/RYoN6O+LO1wZ4VY9ysiifz8m6LYIXfXuNDuPsDKZcnU1a4KKCVV8JwvynsAufM
gOE/sekpvVQjU6cv59FKd0dDgKlqjTCSx6YnOm09TnpmcgQ2GTb6WCaY30bhe40a
pbSJZPGIqx3yGLFaYN+IpOErQR1DKLDGIhaTCiEBXt8ZqcFfTBKuM6dEZLGvBWMS
rB2CBVT8/ll1r4MCZczVyULMpcd7G3EM
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:02:01 2025 by rpki-client