Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ABD5132B21311EF8DA6467F762E951A.roa
File: 8ABD5132B21311EF8DA6467F762E951A.roa (raw, json)
Hash identifier: v1WbSXLsAhCDmLLsencxI0aVlwvvHPEJkLrXlvRgR8w=
Subject key identifier: C7:81:69:61:DA:11:30:F8:14:D3:8A:44:CF:06:7C:25:C8:C1:23:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ABD5132B21311EF8DA6467F762E951A.roa
Signing time: Wed 04 Dec 2024 07:44:07 +0000
ROA not before: Wed 04 Dec 2024 07:44:04 +0000
ROA not after: Sat 01 Feb 2025 07:44:04 +0000
asID: 18229
IP address blocks: 154.210.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71622 (0x117c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 07:44:04 2024 GMT
Not After : Feb 1 07:44:04 2025 GMT
Subject: CN=67500847-b9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:68:59:c3:6e:8b:fd:65:b3:4a:dc:f7:1c:
fc:1f:13:be:8a:b2:18:44:bc:ea:ed:b1:1c:a4:35:
99:93:26:b0:cb:d5:eb:cb:86:31:e9:06:74:29:4d:
c7:7a:15:53:c6:0f:47:3d:f8:9a:63:46:dd:dc:45:
86:95:d2:b0:2e:27:c6:05:30:17:d5:fd:5b:f1:77:
5c:f1:82:8f:b4:29:f1:b1:25:c2:68:14:7c:d1:59:
bc:c4:7d:ab:6b:9d:0f:82:45:b5:b3:b4:c7:c2:51:
c0:04:5c:65:18:4c:bf:13:48:53:a6:9a:d9:9d:58:
84:f2:0b:24:9d:1e:da:a7:7b:d7:f3:f1:fe:62:c2:
5c:03:12:7a:ec:54:97:8f:ea:f6:1a:c4:70:88:6a:
72:15:95:a3:55:af:1e:67:8d:ea:f4:75:bd:2f:10:
e6:a2:4a:c5:f1:05:7b:16:b1:fe:a7:d2:4e:10:53:
36:c2:68:2f:3c:87:87:02:92:7b:4c:17:0b:c6:82:
d1:c6:5c:95:bb:f6:1f:8d:60:dd:37:03:ea:ef:9d:
bf:9f:45:c4:28:c6:b1:6c:c8:fd:8b:74:41:0e:83:
cc:33:92:86:4f:91:61:1e:4f:d1:e7:13:81:4a:8b:
22:e7:4e:13:31:cd:c0:81:e4:b5:d4:3d:8c:c9:63:
ac:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:81:69:61:DA:11:30:F8:14:D3:8A:44:CF:06:7C:25:C8:C1:23:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8ABD5132B21311EF8DA6467F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.128.0/18
Signature Algorithm: sha256WithRSAEncryption
1a:57:74:b0:64:0b:7c:d9:49:79:ff:32:10:cc:d7:b7:ac:47:
5a:0c:ac:43:b4:1b:54:a3:90:0e:c3:53:d4:a5:38:08:cb:ab:
78:ea:bc:ea:5a:1a:9a:80:1a:7a:38:bc:2a:cf:65:2d:5b:1f:
db:29:65:57:6d:e0:15:cc:34:7a:49:22:80:b0:f0:69:8a:58:
a2:68:52:d3:6d:d4:b6:ad:7d:19:0b:e9:1e:51:16:2c:45:ea:
ba:04:ff:69:4b:15:ce:9c:b1:2b:2e:b2:eb:c8:a1:4f:44:1c:
77:d5:a9:12:ff:49:7b:0b:78:ad:78:ca:0c:9f:62:5b:17:5c:
da:91:17:af:db:69:01:db:40:39:3a:10:82:8d:56:9f:ce:5b:
8b:6a:d7:fc:80:1a:ec:fa:45:3b:b0:a7:a7:b3:14:af:62:86:
df:9b:50:20:84:59:4c:01:94:2f:4d:5d:41:3c:e8:a7:6f:04:
df:bd:79:20:76:ae:0c:85:a9:1f:7f:12:56:d9:81:1b:20:48:
ad:e1:6f:b4:0e:d6:24:94:51:f8:3d:6b:f4:2f:8f:5f:30:a7:
04:65:35:22:18:69:be:53:ac:fb:52:06:e5:db:58:b9:0b:93:
56:d6:8e:80:fe:94:83:60:66:20:ad:66:79:74:26:38:85:61:
71:04:22:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARfGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjA0MDc0NDA0WhcNMjUwMjAxMDc0NDA0WjAYMRYw
FAYDVQQDEw02NzUwMDg0Ny1iOWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAttxoWcNui/1ls0rc9xz8HxO+irIYRLzq7bEcpDWZkyawy9Xry4Yx6QZ0
KU3HehVTxg9HPfiaY0bd3EWGldKwLifGBTAX1f1b8Xdc8YKPtCnxsSXCaBR80Vm8
xH2ra50PgkW1s7THwlHABFxlGEy/E0hTpprZnViE8gsknR7ap3vX8/H+YsJcAxJ6
7FSXj+r2GsRwiGpyFZWjVa8eZ43q9HW9LxDmokrF8QV7FrH+p9JOEFM2wmgvPIeH
ApJ7TBcLxoLRxlyVu/YfjWDdNwPq752/n0XEKMaxbMj9i3RBDoPMM5KGT5FhHk/R
5xOBSosi504TMc3AgeS11D2MyWOsKwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMeB
aWHaETD4FNOKRM8GfCXIwSNQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QUJENTEzMkIyMTMxMUVGOERBNjQ2N0Y3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmtKAMA0GCSqGSIb3DQEB
CwUAA4IBAQAaV3SwZAt82Ul5/zIQzNe3rEdaDKxDtBtUo5AOw1PUpTgIy6t46rzq
WhqagBp6OLwqz2UtWx/bKWVXbeAVzDR6SSKAsPBpiliiaFLTbdS2rX0ZC+keURYs
Req6BP9pSxXOnLErLrLryKFPRBx31akS/0l7C3iteMoMn2JbF1zakRev22kB20A5
OhCCjVafzluLatf8gBrs+kU7sKensxSvYobfm1AghFlMAZQvTV1BPOinbwTfvXkg
dq4MhakffxJW2YEbIEit4W+0DtYklFH4PWv0L49fMKcEZTUiGGm+U6z7Ugbl21i5
C5NW1o6A/pSDYGYgrWZ5dCY4hWFxBCJI
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:46:07 2025 by rpki-client