Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A2DDB86D8BE11EFA6C76E41762E951A.roa
File: 6A2DDB86D8BE11EFA6C76E41762E951A.roa (raw, json)
Hash identifier: mPNheVK5KzNC9bBxT5zVcMO8PhIiTH57iE1l+1lVMNE=
Subject key identifier: 81:34:2D:E3:31:CB:B7:FE:FA:0E:57:FA:AE:F7:40:37:19:E8:71:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A2DDB86D8BE11EFA6C76E41762E951A.roa
Signing time: Wed 22 Jan 2025 12:43:01 +0000
ROA not before: Wed 22 Jan 2025 12:42:57 +0000
ROA not after: Sat 08 Feb 2025 12:42:57 +0000
asID: 18229
IP address blocks: 154.210.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81746 (0x13f52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 12:42:57 2025 GMT
Not After : Feb 8 12:42:57 2025 GMT
Subject: CN=6790e7d5-f1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:3b:50:87:73:69:bc:bd:6d:4c:88:49:62:
6a:7e:f7:e7:3b:39:99:1c:56:98:a7:4a:9a:64:52:
79:07:db:90:8f:cf:96:67:1c:ff:ec:69:9d:4a:be:
ca:c6:cc:bb:48:c6:ef:e9:49:26:17:35:88:46:fc:
36:c6:68:95:69:4f:1f:18:34:db:e8:f6:71:70:e7:
ff:83:2a:c2:8f:6f:76:fd:02:c3:77:01:5f:f2:d1:
43:4d:e4:d5:e5:e8:3b:87:21:57:02:b7:c1:4b:dd:
6b:2d:6d:77:f4:4c:98:95:6a:13:87:cc:60:aa:00:
74:a7:79:6a:27:09:0e:50:70:12:d4:6b:a6:56:72:
c0:9f:8c:4e:6e:ad:dc:37:ed:39:4c:fc:8a:1b:83:
bf:d2:a2:2d:32:ee:9a:39:bd:85:59:5e:e8:0a:fe:
86:71:c3:fd:12:c0:8a:7c:63:fb:19:94:ed:1e:0f:
58:54:9c:00:e4:4e:cb:40:03:5d:b0:8c:7f:ab:8b:
c0:47:45:2d:2a:0b:07:ef:f2:38:fc:ac:e5:20:e3:
d6:7a:14:6c:fd:80:4d:c4:33:76:a0:51:39:1f:a3:
e5:58:bc:9b:76:20:c5:29:12:b4:c2:29:1f:46:d4:
92:99:fd:f7:a8:68:ec:90:c2:fa:db:04:41:27:8d:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:34:2D:E3:31:CB:B7:FE:FA:0E:57:FA:AE:F7:40:37:19:E8:71:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A2DDB86D8BE11EFA6C76E41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.141.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d4:9d:e6:72:bf:ff:b1:11:5a:0b:5d:75:f6:09:2d:40:53:
0e:cb:e7:e3:ba:50:ee:a1:5b:e1:89:17:b4:af:fb:f9:fc:c6:
00:ec:52:b0:15:0e:53:03:63:c3:3f:41:66:ef:ea:f5:10:c4:
da:72:c4:4c:48:cb:e7:cb:b8:6f:6a:fb:1d:0f:2c:56:67:da:
2b:06:e4:05:30:1b:80:d2:b5:b5:8f:04:d9:dc:84:c3:7f:67:
41:f3:f5:f8:a5:b3:15:8c:cc:25:27:98:97:b3:5d:c2:63:9f:
b4:50:e7:68:a6:fd:32:23:28:b6:3e:71:96:5b:00:be:91:c0:
7d:45:76:c0:ce:02:c0:d1:29:73:39:51:27:2e:66:6e:38:ae:
00:7e:a2:26:14:10:ac:15:22:61:7a:40:b6:33:40:f1:e5:1d:
e2:96:1d:d0:37:70:8e:8d:f1:08:04:5d:f3:29:6c:d7:ef:fa:
16:31:f1:67:82:4c:c3:09:8b:cc:ed:4d:eb:8b:93:fe:84:fd:
f7:c4:4a:fa:8b:7c:68:2b:ca:62:5d:7e:e2:6b:bd:1d:57:8b:
ab:6a:94:d9:1e:d6:23:fe:ab:96:30:aa:09:de:68:6c:11:e4:
92:73:4e:80:fe:20:f2:06:99:b7:db:3b:e2:ad:87:9b:53:65:
ea:d7:9c:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT9SMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMTI0MjU3WhcNMjUwMjA4MTI0MjU3WjAYMRYw
FAYDVQQDEw02NzkwZTdkNS1mMWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApmo7UIdzaby9bUyISWJqfvfnOzmZHFaYp0qaZFJ5B9uQj8+WZxz/7Gmd
Sr7Kxsy7SMbv6UkmFzWIRvw2xmiVaU8fGDTb6PZxcOf/gyrCj292/QLDdwFf8tFD
TeTV5eg7hyFXArfBS91rLW139EyYlWoTh8xgqgB0p3lqJwkOUHAS1GumVnLAn4xO
bq3cN+05TPyKG4O/0qItMu6aOb2FWV7oCv6GccP9EsCKfGP7GZTtHg9YVJwA5E7L
QANdsIx/q4vAR0UtKgsH7/I4/KzlIOPWehRs/YBNxDN2oFE5H6PlWLybdiDFKRK0
wikfRtSSmf33qGjskML62wRBJ40EeQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIE0
LeMxy7f++g5X+q73QDcZ6HHUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QTJEREI4NkQ4QkUxMUVGQTZDNzZFNDE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtKNMA0GCSqGSIb3DQEB
CwUAA4IBAQBe1J3mcr//sRFaC1119gktQFMOy+fjulDuoVvhiRe0r/v5/MYA7FKw
FQ5TA2PDP0Fm7+r1EMTacsRMSMvny7hvavsdDyxWZ9orBuQFMBuA0rW1jwTZ3ITD
f2dB8/X4pbMVjMwlJ5iXs13CY5+0UOdopv0yIyi2PnGWWwC+kcB9RXbAzgLA0Slz
OVEnLmZuOK4AfqImFBCsFSJhekC2M0Dx5R3ilh3QN3COjfEIBF3zKWzX7/oWMfFn
gkzDCYvM7U3ri5P+hP33xEr6i3xoK8piXX7ia70dV4urapTZHtYj/quWMKoJ3mhs
EeSSc06A/iDyBpm32zvirYebU2Xq15w8
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:47 2025 by rpki-client