Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79BE84BCD8B711EF850F7C92762E951A.roa
File: 79BE84BCD8B711EF850F7C92762E951A.roa (raw, json)
Hash identifier: TcA1vOoQb4N71nIlc9G3fkfjPFhtZ5m9YxNsUsFp4aE=
Subject key identifier: 9F:FF:20:60:B2:5F:12:8C:09:E1:7B:47:44:9B:E1:6D:CD:92:7D:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79BE84BCD8B711EF850F7C92762E951A.roa
Signing time: Wed 22 Jan 2025 11:53:21 +0000
ROA not before: Wed 22 Jan 2025 11:53:16 +0000
ROA not after: Sat 08 Feb 2025 11:53:16 +0000
asID: 18229
IP address blocks: 154.210.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81688 (0x13f18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 11:53:16 2025 GMT
Not After : Feb 8 11:53:16 2025 GMT
Subject: CN=6790dc30-b61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:c0:62:a7:d3:44:f0:b4:5b:6d:34:c9:15:
6d:95:8a:8e:e0:3f:24:41:3c:a6:b6:f6:b7:e1:db:
65:91:4f:4c:d9:d4:78:90:62:21:be:4c:9c:4e:0d:
83:dd:83:e1:c7:c5:e3:6e:bd:29:84:58:8d:47:99:
d4:b8:97:99:6b:25:8d:68:ce:9d:d6:9d:bb:9e:a3:
b8:ae:a1:0c:c1:5d:40:3a:fa:67:90:9d:35:52:65:
b6:6c:0c:96:37:02:10:ff:ca:f0:58:12:75:0f:da:
c6:06:8d:a6:02:a4:c9:e8:f2:19:38:a7:8e:1e:88:
35:86:10:96:b2:32:89:3a:8d:70:8b:f6:d8:a7:9a:
d8:48:4c:3f:37:0f:36:2d:ff:30:33:bf:b0:45:ef:
40:99:c6:3a:d1:87:ec:a5:25:1b:4e:78:53:ad:8a:
36:d9:99:67:07:d5:ae:b6:20:78:39:03:a0:e7:9d:
9e:06:05:f8:e6:b7:ac:72:58:98:0e:79:84:68:de:
3a:45:d1:0e:bf:a3:d6:a7:5f:22:78:04:9c:01:cf:
bb:7c:de:48:b1:11:c2:94:d5:13:25:4d:78:a0:72:
52:cb:b6:5c:de:d9:f1:da:c7:b5:ef:f3:53:d6:ef:
14:6c:a2:c2:ea:8c:6b:06:a1:e6:c0:38:15:6d:f7:
6b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FF:20:60:B2:5F:12:8C:09:E1:7B:47:44:9B:E1:6D:CD:92:7D:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79BE84BCD8B711EF850F7C92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.207.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:66:8d:a8:49:04:12:2e:fa:3a:e8:1b:21:7d:30:c6:d3:a8:
15:12:4d:08:54:2d:23:80:8b:fd:4d:8a:b2:b0:2b:3e:db:f0:
e0:df:3c:bf:e2:57:0f:22:45:01:1f:fa:c2:35:d7:01:58:ef:
14:52:ae:c4:c9:73:37:79:62:b2:3e:8c:f5:ac:22:5d:6f:47:
e3:f2:85:b3:09:35:91:bc:d8:d5:9e:a8:51:53:2b:f0:e7:6d:
11:19:bd:a5:d1:b9:11:b9:4e:9d:f7:61:79:28:93:1f:29:98:
65:01:56:a6:17:16:0a:5e:6c:c8:89:97:a6:84:c7:d3:07:0b:
60:83:31:a0:7c:8a:69:8c:8d:a1:ee:a2:c8:7c:e2:e8:03:0d:
b0:75:20:19:a9:0a:b5:dd:35:37:7d:4c:73:bd:24:30:fc:34:
dc:1b:b5:7c:fd:46:58:80:53:05:82:1b:16:bf:bd:ed:f5:2e:
65:70:17:67:42:57:50:24:38:12:dd:6b:ce:2d:c7:b6:67:66:
62:6b:23:a6:b6:ba:b2:71:d4:2e:76:1a:28:23:02:fe:bc:15:
3f:97:a0:56:63:e7:55:12:cf:b0:38:c0:77:a8:ed:8e:43:9d:
03:93:ea:f8:a3:cc:09:f3:f7:f6:9c:06:47:fc:1a:c9:ce:71:
ee:29:e3:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT8YMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMTE1MzE2WhcNMjUwMjA4MTE1MzE2WjAYMRYw
FAYDVQQDEw02NzkwZGMzMC1iNjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAn3PAYqfTRPC0W200yRVtlYqO4D8kQTymtva34dtlkU9M2dR4kGIhvkyc
Tg2D3YPhx8Xjbr0phFiNR5nUuJeZayWNaM6d1p27nqO4rqEMwV1AOvpnkJ01UmW2
bAyWNwIQ/8rwWBJ1D9rGBo2mAqTJ6PIZOKeOHog1hhCWsjKJOo1wi/bYp5rYSEw/
Nw82Lf8wM7+wRe9AmcY60YfspSUbTnhTrYo22ZlnB9WutiB4OQOg552eBgX45res
cliYDnmEaN46RdEOv6PWp18ieAScAc+7fN5IsRHClNUTJU14oHJSy7Zc3tnx2se1
7/NT1u8UbKLC6oxrBqHmwDgVbfdrDQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ//
IGCyXxKMCeF7R0Sb4W3Nkn20MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OUJFODRCQ0Q4QjcxMUVGODUwRjdDOTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtLPMA0GCSqGSIb3DQEB
CwUAA4IBAQA9Zo2oSQQSLvo66BshfTDG06gVEk0IVC0jgIv9TYqysCs+2/Dg3zy/
4lcPIkUBH/rCNdcBWO8UUq7EyXM3eWKyPoz1rCJdb0fj8oWzCTWRvNjVnqhRUyvw
520RGb2l0bkRuU6d92F5KJMfKZhlAVamFxYKXmzIiZemhMfTBwtggzGgfIppjI2h
7qLIfOLoAw2wdSAZqQq13TU3fUxzvSQw/DTcG7V8/UZYgFMFghsWv73t9S5lcBdn
QldQJDgS3WvOLce2Z2ZiayOmtrqycdQudhooIwL+vBU/l6BWY+dVEs+wOMB3qO2O
Q50Dk+r4o8wJ8/f2nAZH/BrJznHuKeNP
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:48:05 2025 by rpki-client