Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91009F12DA5011EFB435A657762E951A.roa
File: 91009F12DA5011EFB435A657762E951A.roa (raw, json)
Hash identifier: ylMlES6hX6ljsik4Njs/3LWcoEliLOOEAtT8/f3f79Y=
Subject key identifier: 53:26:64:AA:8D:79:17:73:92:C7:93:36:15:61:BF:63:ED:F7:55:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91009F12DA5011EFB435A657762E951A.roa
Signing time: Fri 24 Jan 2025 12:41:44 +0000
ROA not before: Fri 24 Jan 2025 12:41:40 +0000
ROA not after: Sat 08 Feb 2025 12:41:40 +0000
asID: 18229
IP address blocks: 154.210.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83699 (0x146f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:41:40 2025 GMT
Not After : Feb 8 12:41:40 2025 GMT
Subject: CN=67938a88-14ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:18:23:96:3b:32:f9:96:cf:ea:f8:b2:39:
73:78:6d:f0:b2:96:81:e7:0b:93:c2:37:f7:36:fc:
f1:a9:b3:3e:70:e7:d9:47:29:5b:92:53:ba:6a:51:
ea:7d:f6:a9:82:52:82:59:76:40:62:a8:ee:87:31:
14:d1:7a:e0:a4:43:69:8b:2e:fd:5e:71:72:84:f7:
12:13:2f:26:4c:f4:cf:ec:d8:c4:83:94:d6:1c:23:
77:a6:e6:9a:74:4f:8d:0d:74:c2:10:07:7d:ee:97:
e7:64:e7:f9:ac:6a:59:a8:dd:2c:14:45:74:92:7e:
3e:06:b2:31:0b:01:d4:a3:bf:9c:6c:d8:79:c8:2d:
66:7d:2e:bd:13:e8:06:e1:83:e8:54:af:d2:e0:70:
56:80:5d:cd:34:dc:ac:05:79:36:6a:1b:7e:48:f9:
43:72:93:51:18:95:d3:62:e2:bf:7a:8b:44:cc:46:
8b:f4:d2:3f:86:06:1d:cb:31:78:58:a7:81:ee:69:
60:09:d3:21:d4:6d:af:ed:5e:fa:8e:5d:ce:20:b8:
b1:97:17:c5:da:d8:1b:c0:de:0e:53:18:12:3c:e6:
de:bc:5a:a7:0d:a4:2a:69:92:e4:ec:0e:14:2d:4c:
79:45:57:9e:98:76:9b:01:31:2f:bc:f0:46:84:de:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:26:64:AA:8D:79:17:73:92:C7:93:36:15:61:BF:63:ED:F7:55:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91009F12DA5011EFB435A657762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.165.0/24
Signature Algorithm: sha256WithRSAEncryption
09:3b:8e:e2:ce:43:d5:55:20:87:c5:f2:3c:a1:96:0c:63:27:
ae:5b:a6:16:41:f4:d5:a4:6a:e9:f8:d7:76:97:97:32:66:0b:
75:27:f9:a4:75:1d:19:38:fb:b4:d4:07:ec:51:8f:56:33:8c:
4c:c8:76:ab:34:03:49:3b:37:02:4d:29:94:f6:59:21:9b:fa:
df:3c:b1:c0:35:c9:92:7a:49:e6:ce:5b:84:77:67:80:e7:68:
d5:1b:cb:bf:2e:b2:44:dc:93:3a:1c:7f:63:3f:b0:77:e7:3c:
c5:69:cf:a2:96:dc:76:c6:61:6f:a0:4c:b0:56:cf:be:92:56:
aa:a1:de:5f:62:bd:e2:c5:6e:0f:48:8a:f7:b4:15:2b:d7:ba:
11:aa:04:07:18:98:79:84:42:f9:78:d2:ca:9c:45:7b:ac:58:
2e:b7:1c:34:c1:5e:f1:1c:2c:e7:e6:46:25:fe:09:0b:b4:09:
23:71:d2:99:65:56:96:7c:a2:61:aa:c5:a8:61:8f:06:58:41:
2a:c0:a8:70:58:cf:7e:e7:f8:7a:a8:f4:31:01:8a:19:d3:87:
60:9b:94:06:6b:46:01:25:54:9d:86:d3:f9:36:9c:de:87:65:
db:b5:82:77:cb:95:b4:d9:bd:84:7e:e8:1d:3d:e9:08:69:97:
a7:47:01:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUbzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTI0MTQwWhcNMjUwMjA4MTI0MTQwWjAYMRYw
FAYDVQQDEw02NzkzOGE4OC0xNGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1LsYI5Y7MvmWz+r4sjlzeG3wspaB5wuTwjf3NvzxqbM+cOfZRylbklO6
alHqffapglKCWXZAYqjuhzEU0XrgpENpiy79XnFyhPcSEy8mTPTP7NjEg5TWHCN3
puaadE+NDXTCEAd97pfnZOf5rGpZqN0sFEV0kn4+BrIxCwHUo7+cbNh5yC1mfS69
E+gG4YPoVK/S4HBWgF3NNNysBXk2aht+SPlDcpNRGJXTYuK/eotEzEaL9NI/hgYd
yzF4WKeB7mlgCdMh1G2v7V76jl3OILixlxfF2tgbwN4OUxgSPObevFqnDaQqaZLk
7A4ULUx5RVeemHabATEvvPBGhN5N5QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFMm
ZKqNeRdzkseTNhVhv2Pt91WWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MTAwOUYxMkRBNTAxMUVGQjQzNUE2NTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtKlMA0GCSqGSIb3DQEB
CwUAA4IBAQAJO47izkPVVSCHxfI8oZYMYyeuW6YWQfTVpGrp+Nd2l5cyZgt1J/mk
dR0ZOPu01AfsUY9WM4xMyHarNANJOzcCTSmU9lkhm/rfPLHANcmSeknmzluEd2eA
52jVG8u/LrJE3JM6HH9jP7B35zzFac+iltx2xmFvoEywVs++klaqod5fYr3ixW4P
SIr3tBUr17oRqgQHGJh5hEL5eNLKnEV7rFgutxw0wV7xHCzn5kYl/gkLtAkjcdKZ
ZVaWfKJhqsWoYY8GWEEqwKhwWM9+5/h6qPQxAYoZ04dgm5QGa0YBJVSdhtP5Npze
h2XbtYJ3y5W02b2EfugdPekIaZenRwEj
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:45:53 2025 by rpki-client