Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6806A688DD7511EFA21B0F97762E951A.roa
File: 6806A688DD7511EFA21B0F97762E951A.roa (raw, json)
Hash identifier: c9FIBY59g1r0HsAMkgIv4lTXUPPSgZERHy9B5laVE7U=
Subject key identifier: 33:F4:29:7A:91:09:B7:34:A0:25:98:F5:7D:F9:FF:95:7B:4C:19:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6806A688DD7511EFA21B0F97762E951A.roa
Signing time: Tue 28 Jan 2025 12:43:00 +0000
ROA not before: Tue 28 Jan 2025 12:42:56 +0000
ROA not after: Tue 25 Feb 2025 12:42:56 +0000
asID: 5065
IP address blocks: 154.206.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85268 (0x14d14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 12:42:56 2025 GMT
Not After : Feb 25 12:42:56 2025 GMT
Subject: CN=6798d0d4-8a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:04:40:c9:05:6e:d0:4f:32:0f:94:ee:85:49:
56:0f:7f:4b:b4:c6:8f:98:9c:e4:45:74:a6:62:1d:
4b:81:b5:39:cc:97:e1:0f:f0:27:e3:c8:20:8a:de:
55:13:01:74:5e:66:03:c9:aa:48:ed:f0:e8:36:59:
45:f4:b4:8f:53:37:6d:9d:72:54:4a:c1:91:ac:e4:
8b:4f:d5:4c:be:11:7a:32:0c:c1:96:e6:cd:8c:07:
3c:d0:db:72:a5:90:e9:8a:17:1c:3e:fc:69:7e:9b:
65:50:fd:25:1d:57:e6:28:45:ca:62:10:df:26:ad:
95:4f:67:9e:7d:8e:9b:a0:95:e0:19:93:fa:19:50:
84:cf:e0:1b:b9:dc:d6:ab:38:1b:29:72:fd:83:e5:
c2:b2:b8:3b:1e:04:bc:e4:82:ef:c1:ca:d3:4f:32:
3f:2f:dc:da:79:03:5e:aa:3b:96:72:32:37:9b:8e:
93:71:9d:65:61:bd:b5:a2:b2:7b:c6:b2:9b:31:01:
b5:a2:d2:5b:03:92:f6:32:76:ac:4d:3d:25:5d:0b:
73:30:8e:e8:69:40:84:f8:5e:87:49:5e:28:7b:77:
46:c5:bf:5d:f6:6b:70:4a:e0:b5:c3:ec:74:7f:d9:
e4:1e:28:66:ae:77:25:ff:4b:37:4d:5c:ae:6c:36:
c9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F4:29:7A:91:09:B7:34:A0:25:98:F5:7D:F9:FF:95:7B:4C:19:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6806A688DD7511EFA21B0F97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.43.0/24
Signature Algorithm: sha256WithRSAEncryption
16:0f:73:b4:76:db:3c:a5:d7:fb:ed:f1:50:dc:d4:94:17:e4:
5c:54:af:68:8d:53:21:bc:a5:97:b4:fd:ec:7f:c5:ff:f3:10:
ff:dd:1a:bf:9a:96:0c:09:79:9f:3f:66:13:23:71:af:39:61:
50:04:90:8e:54:c5:13:90:1e:2f:99:02:cb:8b:2a:6f:33:10:
39:00:85:d7:ff:3b:d5:dc:9f:0e:99:82:6a:2d:b0:4c:55:5d:
1b:23:f9:4d:06:e7:fb:d8:35:65:89:30:50:32:ca:4d:14:6e:
e4:08:cb:10:57:2e:b8:a3:eb:01:06:ad:bc:33:5b:80:a6:f0:
37:de:6b:2b:8f:ea:7a:78:49:7b:c0:67:62:47:78:78:46:fc:
3b:9f:68:e2:65:9a:ba:9a:0e:16:c4:4a:05:60:39:91:b7:92:
5b:26:03:95:50:9f:21:b0:67:0e:ce:94:e7:6f:ad:95:9b:f9:
be:cf:6d:79:df:24:99:c8:dc:74:d4:28:dc:29:23:b8:c9:d6:
fe:06:aa:f7:1c:28:c0:37:ed:a2:5a:ba:20:1c:bc:4c:bf:5e:
53:70:5c:2e:49:1f:9d:d5:c7:fc:41:eb:89:17:79:48:99:d2:
e9:d3:b7:52:60:3c:1e:1d:a8:b4:7e:73:59:c2:6e:70:f4:59:
cb:21:58:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU0UMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI4MTI0MjU2WhcNMjUwMjI1MTI0MjU2WjAYMRYw
FAYDVQQDEw02Nzk4ZDBkNC04YTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1QRAyQVu0E8yD5TuhUlWD39LtMaPmJzkRXSmYh1LgbU5zJfhD/An48gg
it5VEwF0XmYDyapI7fDoNllF9LSPUzdtnXJUSsGRrOSLT9VMvhF6MgzBlubNjAc8
0NtypZDpihccPvxpfptlUP0lHVfmKEXKYhDfJq2VT2eefY6boJXgGZP6GVCEz+Ab
udzWqzgbKXL9g+XCsrg7HgS85ILvwcrTTzI/L9zaeQNeqjuWcjI3m46TcZ1lYb21
orJ7xrKbMQG1otJbA5L2MnasTT0lXQtzMI7oaUCE+F6HSV4oe3dGxb9d9mtwSuC1
w+x0f9nkHihmrncl/0s3TVyubDbJMwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDP0
KXqRCbc0oCWY9X35/5V7TBn8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82ODA2QTY4OERENzUxMUVGQTIxQjBGOTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4rMA0GCSqGSIb3DQEB
CwUAA4IBAQAWD3O0dts8pdf77fFQ3NSUF+RcVK9ojVMhvKWXtP3sf8X/8xD/3Rq/
mpYMCXmfP2YTI3GvOWFQBJCOVMUTkB4vmQLLiypvMxA5AIXX/zvV3J8OmYJqLbBM
VV0bI/lNBuf72DVliTBQMspNFG7kCMsQVy64o+sBBq28M1uApvA33msrj+p6eEl7
wGdiR3h4Rvw7n2jiZZq6mg4WxEoFYDmRt5JbJgOVUJ8hsGcOzpTnb62Vm/m+z215
3ySZyNx01CjcKSO4ydb+Bqr3HCjAN+2iWrogHLxMv15TcFwuSR+d1cf8QeuJF3lI
mdLp07dSYDweHai0fnNZwm5w9FnLIVg0
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:21:28 2025 by rpki-client