Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FC4BDC0D4FF11EF9AF4C6A6762E951A.roa
File: 6FC4BDC0D4FF11EF9AF4C6A6762E951A.roa (raw, json)
Hash identifier: Dv94MQyNcackxSO/hCLSEzV/vdvAD26az5WViIxHv6k=
Subject key identifier: 63:06:97:E6:7C:E4:92:35:AB:2D:FA:70:3E:66:BC:D2:7B:2F:AF:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D1D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FC4BDC0D4FF11EF9AF4C6A6762E951A.roa
Signing time: Fri 17 Jan 2025 18:18:23 +0000
ROA not before: Fri 17 Jan 2025 18:18:19 +0000
ROA not after: Fri 31 Jan 2025 18:18:19 +0000
asID: 39600
IP address blocks: 154.207.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81181 (0x13d1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 18:18:19 2025 GMT
Not After : Jan 31 18:18:19 2025 GMT
Subject: CN=678a9eef-7db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:88:5c:31:5c:c1:12:69:9e:bb:26:d5:b1:
50:46:04:bc:8d:ed:28:26:07:6c:39:57:11:b5:26:
fc:87:18:2c:6d:42:28:4b:c1:29:4d:47:45:b6:0c:
f4:c3:9a:8d:41:55:3d:82:16:85:43:b8:e8:c1:71:
1b:2b:9f:71:78:5c:ed:39:cc:72:b8:80:9f:91:9b:
0b:8d:5d:04:3a:98:51:91:74:3b:87:33:36:2d:b6:
5b:22:4a:96:7a:c7:28:00:7a:a3:a0:83:0f:e4:08:
9e:5f:88:78:6c:b5:e4:38:aa:e5:c7:ad:51:4e:21:
ec:20:5d:07:27:7a:c9:74:60:e3:96:78:e9:a3:c3:
7e:66:26:60:12:9b:68:2d:48:e7:d6:e2:08:7d:83:
a9:18:eb:57:38:ef:c0:2b:1a:5e:a7:68:b6:e8:22:
68:46:35:bd:4b:59:d6:e1:69:ed:22:8e:99:b3:50:
cc:44:48:c2:50:cb:89:63:ef:3f:09:27:c9:d6:0d:
68:44:88:ee:57:f4:24:70:bf:31:c7:56:df:df:34:
07:72:c5:e2:29:43:ac:d3:a1:9e:e3:dd:f8:86:94:
aa:8e:06:8c:45:3e:6a:24:5d:62:12:66:ff:cd:ae:
8b:ca:67:dc:9a:ef:db:76:53:2e:c7:76:02:30:55:
04:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:06:97:E6:7C:E4:92:35:AB:2D:FA:70:3E:66:BC:D2:7B:2F:AF:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FC4BDC0D4FF11EF9AF4C6A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.128.0/21
Signature Algorithm: sha256WithRSAEncryption
62:1f:2d:99:23:af:8c:d1:53:e5:05:e1:0d:31:f7:62:2f:ed:
8c:5f:08:a4:2c:af:43:85:df:ee:db:93:d9:a2:e4:4e:71:04:
ba:86:32:e9:81:17:6a:10:34:a3:6e:ea:bf:54:cc:f0:d4:81:
eb:85:23:13:5f:42:d4:7c:cf:28:14:06:37:c6:2f:c1:cd:0f:
e3:51:ac:14:34:fe:f5:23:b2:78:c1:e5:8c:82:f8:12:45:9f:
02:5c:45:7b:bf:0a:1f:15:d6:d4:23:1a:23:1e:4a:9f:6f:ec:
6e:19:88:5b:93:e5:00:45:8b:c1:af:b2:be:38:ee:e8:1a:96:
73:d8:c1:e9:27:f4:29:1c:05:5e:f0:2b:d3:78:ce:bd:2f:77:
8a:21:28:a1:e7:23:05:ce:58:38:ea:4b:46:ed:14:a8:dd:5f:
24:f3:d8:ab:e1:26:6b:65:d5:be:95:cb:d0:24:d3:2b:94:b1:
63:ca:5f:66:aa:b9:aa:05:29:d4:b8:5c:c7:9b:f3:8f:84:5e:
a2:24:3b:1a:5e:e9:ef:e3:08:c7:11:e4:15:44:06:c8:6a:da:
81:ad:1d:ad:fb:c3:31:b8:5c:68:39:85:8b:87:2e:86:3b:a2:
66:2c:33:0f:ce:d2:7b:12:92:f7:5f:3e:64:59:61:56:c3:fa:
90:4b:b1:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT0dMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE3MTgxODE5WhcNMjUwMTMxMTgxODE5WjAYMRYw
FAYDVQQDEw02NzhhOWVlZi03ZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzKGIXDFcwRJpnrsm1bFQRgS8je0oJgdsOVcRtSb8hxgsbUIoS8EpTUdF
tgz0w5qNQVU9ghaFQ7jowXEbK59xeFztOcxyuICfkZsLjV0EOphRkXQ7hzM2LbZb
IkqWescoAHqjoIMP5AieX4h4bLXkOKrlx61RTiHsIF0HJ3rJdGDjlnjpo8N+ZiZg
EptoLUjn1uIIfYOpGOtXOO/AKxpep2i26CJoRjW9S1nW4WntIo6Zs1DMREjCUMuJ
Y+8/CSfJ1g1oRIjuV/QkcL8xx1bf3zQHcsXiKUOs06Ge4934hpSqjgaMRT5qJF1i
Emb/za6Lymfcmu/bdlMux3YCMFUEZwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGMG
l+Z85JI1qy36cD5mvNJ7L69QMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RkM0QkRDMEQ0RkYxMUVGOUFGNEM2QTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDms+AMA0GCSqGSIb3DQEB
CwUAA4IBAQBiHy2ZI6+M0VPlBeENMfdiL+2MXwikLK9Dhd/u25PZouROcQS6hjLp
gRdqEDSjbuq/VMzw1IHrhSMTX0LUfM8oFAY3xi/BzQ/jUawUNP71I7J4weWMgvgS
RZ8CXEV7vwofFdbUIxojHkqfb+xuGYhbk+UARYvBr7K+OO7oGpZz2MHpJ/QpHAVe
8CvTeM69L3eKISih5yMFzlg46ktG7RSo3V8k89ir4SZrZdW+lcvQJNMrlLFjyl9m
qrmqBSnUuFzHm/OPhF6iJDsaXunv4wjHEeQVRAbIatqBrR2t+8MxuFxoOYWLhy6G
O6JmLDMPztJ7EpL3Xz5kWWFWw/qQS7Gy
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:09:06 2025 by rpki-client