Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/913A2828D40011EFACBA5CA6762E951A.roa
File: 913A2828D40011EFACBA5CA6762E951A.roa (raw, json)
Hash identifier: 5XAM9UVjA+IUpS60/a2vsZef9vueb0FwU6yJchVhy1Q=
Subject key identifier: F8:0B:E9:88:D4:26:B3:F0:05:95:C3:41:A3:49:2D:3D:6C:5A:46:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C0C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/913A2828D40011EFACBA5CA6762E951A.roa
Signing time: Thu 16 Jan 2025 11:53:57 +0000
ROA not before: Thu 16 Jan 2025 11:53:53 +0000
ROA not after: Sun 16 Mar 2025 11:53:53 +0000
asID: 17561
IP address blocks: 154.206.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80908 (0x13c0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 11:53:53 2025 GMT
Not After : Mar 16 11:53:53 2025 GMT
Subject: CN=6788f355-ce0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c4:59:35:bf:8a:f8:29:19:79:d5:32:c0:c7:
7a:86:66:d7:95:60:ad:4b:5e:ec:68:49:00:86:de:
31:1e:14:b7:ed:b7:fb:f2:8f:eb:5d:9f:69:ff:64:
81:b5:98:b2:81:42:83:8b:fc:2e:6c:20:98:01:ca:
08:41:e7:2f:25:97:6b:89:87:36:34:3c:74:55:93:
11:46:3a:dc:66:57:f8:c0:59:70:17:4a:84:1c:35:
b1:a6:ea:25:e2:75:e5:06:c0:cb:99:aa:3d:5c:db:
30:26:4a:18:37:95:9d:8d:11:12:f0:47:90:68:52:
75:7a:24:f8:16:3a:fb:b3:f7:41:5e:a6:8d:2c:55:
03:82:b0:24:f3:b0:3b:18:78:a5:16:71:60:7b:c4:
a5:7f:df:15:b4:ed:3a:18:4d:88:c0:e7:55:40:f2:
32:5c:1f:80:bc:53:dc:94:f8:39:e7:ad:bd:19:15:
a5:db:99:97:0f:49:3e:84:cf:20:a4:f4:76:d3:9d:
fc:f1:85:bb:d6:bc:c2:18:f4:b5:09:36:df:3f:12:
df:a0:11:5b:c1:a9:36:d8:0c:36:eb:15:90:f2:a4:
d0:04:02:14:ac:47:0b:bf:84:82:43:0d:01:2c:a1:
aa:e9:4b:cd:85:2d:8b:91:45:b2:63:11:a6:37:a0:
6a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0B:E9:88:D4:26:B3:F0:05:95:C3:41:A3:49:2D:3D:6C:5A:46:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/913A2828D40011EFACBA5CA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.200.0/24
Signature Algorithm: sha256WithRSAEncryption
75:30:0f:af:9d:44:b0:5e:f3:dd:85:18:09:bd:bc:b7:15:49:
c2:80:24:5b:5c:3b:43:70:41:56:73:ef:21:ab:d7:e2:00:64:
5e:13:0c:c4:19:e5:92:1c:8a:66:ef:cf:c2:3c:5f:d4:45:3b:
e7:39:ed:8a:17:1b:f5:69:75:a2:07:3a:89:d2:ed:e7:57:d5:
08:18:37:27:4c:ca:c8:b3:fc:74:d1:35:e8:36:f9:75:4f:ed:
81:5b:7f:6f:d9:1d:cc:32:d8:19:33:bd:38:65:c4:4e:21:c0:
86:95:c5:ed:ba:cc:37:cb:50:d3:88:28:f9:b1:16:7a:8a:ee:
93:25:cc:b0:1e:e5:10:8b:a3:9e:ce:2d:20:c8:09:dd:00:57:
0c:89:8a:76:ec:f6:80:53:c4:ce:44:b8:f1:f7:c6:f7:90:37:
1a:77:39:df:04:71:5b:1d:ad:bd:90:d5:94:67:15:04:d6:92:
ff:b6:f8:39:a8:3f:08:17:41:c6:36:4d:a5:4a:aa:30:54:67:
ca:3e:6a:ca:c9:e1:35:cc:0d:f4:99:f4:11:15:d4:17:cd:a6:
02:4b:e9:8b:88:53:26:3d:03:4a:4c:da:29:bd:dc:6b:9a:cc:
51:bb:17:ab:99:1f:dd:8d:06:ee:e0:2f:3c:c2:01:a6:27:26:
2a:6b:8c:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATwMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE2MTE1MzUzWhcNMjUwMzE2MTE1MzUzWjAYMRYw
FAYDVQQDEw02Nzg4ZjM1NS1jZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2cRZNb+K+CkZedUywMd6hmbXlWCtS17saEkAht4xHhS37bf78o/rXZ9p
/2SBtZiygUKDi/wubCCYAcoIQecvJZdriYc2NDx0VZMRRjrcZlf4wFlwF0qEHDWx
puol4nXlBsDLmao9XNswJkoYN5WdjRES8EeQaFJ1eiT4Fjr7s/dBXqaNLFUDgrAk
87A7GHilFnFge8Slf98VtO06GE2IwOdVQPIyXB+AvFPclPg55629GRWl25mXD0k+
hM8gpPR205388YW71rzCGPS1CTbfPxLfoBFbwak22Aw26xWQ8qTQBAIUrEcLv4SC
Qw0BLKGq6UvNhS2LkUWyYxGmN6BqLQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPgL
6YjUJrPwBZXDQaNJLT1sWkbAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MTNBMjgyOEQ0MDAxMUVGQUNCQTVDQTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms7IMA0GCSqGSIb3DQEB
CwUAA4IBAQB1MA+vnUSwXvPdhRgJvby3FUnCgCRbXDtDcEFWc+8hq9fiAGReEwzE
GeWSHIpm78/CPF/URTvnOe2KFxv1aXWiBzqJ0u3nV9UIGDcnTMrIs/x00TXoNvl1
T+2BW39v2R3MMtgZM704ZcROIcCGlcXtusw3y1DTiCj5sRZ6iu6TJcywHuUQi6Oe
zi0gyAndAFcMiYp27PaAU8TORLjx98b3kDcadznfBHFbHa29kNWUZxUE1pL/tvg5
qD8IF0HGNk2lSqowVGfKPmrKyeE1zA30mfQRFdQXzaYCS+mLiFMmPQNKTNopvdxr
msxRuxermR/djQbu4C88wgGmJyYqa4z8
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:44:43 2025 by rpki-client