Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73DB59E2D3FF11EFBB16CC9F762E951A.roa
File: 73DB59E2D3FF11EFBB16CC9F762E951A.roa (raw, json)
Hash identifier: WFxWr0Cli/eGX+iaQ6j+JjMWXV0d3NBipqCMh1WbBY8=
Subject key identifier: B4:A5:9E:CA:9C:72:82:59:CA:F0:8E:9F:D6:BA:63:4D:D0:FE:FC:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73DB59E2D3FF11EFBB16CC9F762E951A.roa
Signing time: Thu 16 Jan 2025 11:45:59 +0000
ROA not before: Thu 16 Jan 2025 11:45:50 +0000
ROA not after: Sun 16 Mar 2025 11:45:50 +0000
asID: 17561
IP address blocks: 154.206.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80902 (0x13c06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 11:45:50 2025 GMT
Not After : Mar 16 11:45:50 2025 GMT
Subject: CN=6788f177-10a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:b3:2d:d8:3c:2d:88:8d:46:93:d4:5c:2c:
7c:f0:59:c9:d7:f7:5b:d2:63:8f:d9:64:b6:ee:56:
c7:12:64:c9:31:19:3c:13:03:db:3f:20:11:a6:49:
dd:d8:ae:48:16:49:f0:29:a3:38:27:8a:d2:29:44:
e3:76:8c:0b:9b:88:27:93:01:80:71:1e:59:bd:bf:
42:0c:c4:22:6e:08:13:ea:99:a9:31:5d:42:8b:72:
b6:37:65:3b:ba:a2:d3:98:81:c4:af:77:b1:3d:38:
df:26:bb:86:cb:e3:d5:3a:ca:c2:d0:67:b8:c4:c9:
aa:5c:c4:c5:93:3d:08:5f:2a:e1:9d:40:5a:42:5f:
ce:d2:47:1b:80:54:8c:8a:bb:50:a1:3d:ac:98:f4:
3f:f4:e0:7b:8c:04:72:81:6d:65:15:08:19:5c:5b:
c1:21:90:18:8d:22:66:92:4b:2d:4b:76:6a:62:7b:
f9:2f:8e:5f:9d:ac:47:81:3b:08:b8:d5:44:96:79:
20:9d:de:70:42:46:d1:24:9f:8e:ab:a8:21:7b:e2:
49:61:b9:cc:be:fd:e6:28:47:46:54:a0:3e:8d:c3:
af:2a:09:cb:8c:96:ee:20:33:bf:44:9d:57:5d:3b:
b3:11:bc:18:02:5a:c9:7d:ee:61:3b:fa:9c:9b:4b:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A5:9E:CA:9C:72:82:59:CA:F0:8E:9F:D6:BA:63:4D:D0:FE:FC:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73DB59E2D3FF11EFBB16CC9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.197.0/24
Signature Algorithm: sha256WithRSAEncryption
31:85:9d:8f:db:4d:b9:88:b6:42:b2:fe:90:80:84:67:bd:1b:
03:64:a0:c5:2b:8d:ac:45:50:c6:b6:9c:7d:e1:70:52:33:64:
2d:1e:6b:d7:a4:8a:91:91:55:3d:19:a3:88:2e:de:20:2c:52:
17:0b:36:d9:66:45:d9:30:4d:81:8a:23:0a:5e:a7:d1:52:76:
d1:68:b9:cd:ab:ca:b7:91:ec:d4:5b:03:ff:4d:55:2b:4b:6c:
02:fc:8d:91:15:31:4a:f7:34:3b:32:57:11:99:b9:02:32:8c:
49:82:6e:c9:5c:a9:c5:4d:55:c0:c5:e3:54:75:b3:37:cf:46:
9d:53:b1:43:9c:1e:9c:a8:22:37:58:3c:c7:c1:d8:4d:37:47:
e9:27:b3:00:f6:ae:69:92:9d:56:b9:10:bd:10:13:2c:41:ec:
ef:7b:c9:15:23:e5:6d:bf:a0:80:01:a6:78:d7:15:a8:92:02:
5c:5b:21:a9:b0:0b:97:fc:d7:69:50:32:f2:e5:10:54:d1:3f:
d0:da:5d:f0:18:9c:e1:10:26:04:fd:b9:45:a6:6a:94:d9:84:
6f:3f:6e:06:03:a5:44:be:bd:90:d8:ac:e1:c3:9d:bb:98:84:
d8:f1:06:23:fa:38:9a:de:b9:a7:0f:58:88:3b:80:b0:e1:4c:
a4:b0:a1:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATwGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE2MTE0NTUwWhcNMjUwMzE2MTE0NTUwWjAYMRYw
FAYDVQQDEw02Nzg4ZjE3Ny0xMGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuyKzLdg8LYiNRpPUXCx88FnJ1/db0mOP2WS27lbHEmTJMRk8EwPbPyAR
pknd2K5IFknwKaM4J4rSKUTjdowLm4gnkwGAcR5Zvb9CDMQibggT6pmpMV1Ci3K2
N2U7uqLTmIHEr3exPTjfJruGy+PVOsrC0Ge4xMmqXMTFkz0IXyrhnUBaQl/O0kcb
gFSMirtQoT2smPQ/9OB7jARygW1lFQgZXFvBIZAYjSJmkkstS3ZqYnv5L45fnaxH
gTsIuNVElnkgnd5wQkbRJJ+Oq6ghe+JJYbnMvv3mKEdGVKA+jcOvKgnLjJbuIDO/
RJ1XXTuzEbwYAlrJfe5hO/qcm0t8PwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLSl
nsqccoJZyvCOn9a6Y03Q/vxVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83M0RCNTlFMkQzRkYxMUVGQkIxNkNDOUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms7FMA0GCSqGSIb3DQEB
CwUAA4IBAQAxhZ2P2025iLZCsv6QgIRnvRsDZKDFK42sRVDGtpx94XBSM2QtHmvX
pIqRkVU9GaOILt4gLFIXCzbZZkXZME2BiiMKXqfRUnbRaLnNq8q3kezUWwP/TVUr
S2wC/I2RFTFK9zQ7MlcRmbkCMoxJgm7JXKnFTVXAxeNUdbM3z0adU7FDnB6cqCI3
WDzHwdhNN0fpJ7MA9q5pkp1WuRC9EBMsQezve8kVI+Vtv6CAAaZ41xWokgJcWyGp
sAuX/NdpUDLy5RBU0T/Q2l3wGJzhECYE/blFpmqU2YRvP24GA6VEvr2Q2Kzhw527
mITY8QYj+jia3rmnD1iIO4Cw4UyksKFP
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:36:29 2025 by rpki-client