Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ED45CA0D8A211EF97F69A86762E951A.roa
File: 9ED45CA0D8A211EF97F69A86762E951A.roa (raw, json)
Hash identifier: /BUONu2eV7o1jUB6OvDJgSpqgPdshO/yJ9wYqMwHHOE=
Subject key identifier: FA:37:F4:48:7B:0E:32:BE:EF:E0:C4:84:52:75:92:15:A0:2B:D8:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E7E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ED45CA0D8A211EF97F69A86762E951A.roa
Signing time: Wed 22 Jan 2025 09:24:03 +0000
ROA not before: Wed 22 Jan 2025 09:23:59 +0000
ROA not after: Tue 04 Feb 2025 09:23:59 +0000
asID: 133180
IP address blocks: 154.206.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81534 (0x13e7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 09:23:59 2025 GMT
Not After : Feb 4 09:23:59 2025 GMT
Subject: CN=6790b933-9582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:16:19:6a:92:8a:a9:d5:e0:bd:db:26:f5:
68:74:d1:a0:bd:5f:22:02:64:3b:7f:ac:ce:c4:5b:
09:18:8c:ed:41:c7:da:70:98:ed:8e:4e:2b:ea:38:
31:1e:4b:a6:2c:63:17:e8:f8:28:eb:20:c5:24:29:
b4:5c:63:6a:80:a8:5c:7f:e7:07:e1:3b:52:5c:9a:
ac:ff:76:a1:bf:52:ce:24:cf:f8:b6:53:a6:12:03:
07:86:b0:20:9e:92:18:fc:94:71:55:0a:ae:61:2e:
ad:30:56:ec:b3:63:8e:f4:54:c9:fe:97:7d:d6:4e:
e7:48:15:84:a8:c5:a4:3d:b4:97:2a:7f:f2:29:2c:
b2:64:77:14:38:3a:60:74:af:c3:1e:64:f1:36:3a:
95:9a:11:71:9d:db:3b:5e:f9:48:01:79:ce:36:67:
3b:8f:96:84:db:af:9d:fd:73:31:18:6e:43:cc:9b:
99:e6:ae:d4:da:d3:1b:a1:33:7c:e1:85:8d:c6:0f:
fb:ec:94:ea:1f:f8:70:d3:15:1c:75:74:11:15:38:
fd:5a:5f:f6:c4:4f:a0:24:33:a8:51:0a:5c:5f:7c:
29:dc:1b:34:2e:2a:f9:ba:bd:bc:22:a2:54:8c:08:
ca:da:49:a6:74:e8:d0:81:df:5c:d6:80:5f:b0:f1:
90:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:37:F4:48:7B:0E:32:BE:EF:E0:C4:84:52:75:92:15:A0:2B:D8:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ED45CA0D8A211EF97F69A86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
Signature Algorithm: sha256WithRSAEncryption
84:50:6d:96:d4:e7:1b:46:50:79:19:fc:c4:f1:d1:94:65:84:
3d:89:a5:3e:20:04:fa:01:ef:fe:ca:b6:1b:c1:1b:6e:26:0e:
78:09:ab:e8:67:96:79:7c:e1:27:a9:cf:0e:09:5a:e7:5d:4f:
ff:ba:f8:1c:08:52:e6:f5:28:12:a5:0f:86:a1:2f:f3:42:2e:
4c:30:90:c2:04:7d:40:04:4c:55:99:a8:91:be:cf:a8:62:0a:
db:37:b6:1b:29:f3:62:10:18:8a:d6:3d:82:12:83:af:72:fe:
87:a3:b4:4e:07:44:72:8f:d1:eb:5a:5e:fb:b1:6b:c0:28:54:
bc:a4:a0:8c:9b:7d:59:e5:ff:7f:cb:9f:93:d4:51:6a:7d:03:
49:11:7b:3c:cf:60:ef:d3:fe:8b:bd:48:c1:fa:ce:a8:16:6b:
f9:e3:01:a4:7c:11:d7:d1:5b:03:82:64:38:09:f1:6f:cb:88:
58:00:86:76:94:0b:f0:9b:ff:06:f7:42:50:8d:ee:39:73:b5:
3f:ee:d6:49:68:e8:e9:42:5a:ad:e4:3e:c1:59:00:c2:8b:e8:
af:d1:e6:8b:92:09:6c:b4:23:54:58:95:12:3e:82:5c:97:f2:
df:38:76:02:bb:1f:87:8a:37:ba:b4:20:79:e3:8a:68:4d:ed:
d5:5c:f5:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT5+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMDkyMzU5WhcNMjUwMjA0MDkyMzU5WjAYMRYw
FAYDVQQDEw02NzkwYjkzMy05NTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo0cWGWqSiqnV4L3bJvVodNGgvV8iAmQ7f6zOxFsJGIztQcfacJjtjk4r
6jgxHkumLGMX6Pgo6yDFJCm0XGNqgKhcf+cH4TtSXJqs/3ahv1LOJM/4tlOmEgMH
hrAgnpIY/JRxVQquYS6tMFbss2OO9FTJ/pd91k7nSBWEqMWkPbSXKn/yKSyyZHcU
ODpgdK/DHmTxNjqVmhFxnds7XvlIAXnONmc7j5aE26+d/XMxGG5DzJuZ5q7U2tMb
oTN84YWNxg/77JTqH/hw0xUcdXQRFTj9Wl/2xE+gJDOoUQpcX3wp3Bs0Lir5ur28
IqJUjAjK2kmmdOjQgd9c1oBfsPGQwwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPo3
9Eh7DjK+7+DEhFJ1khWgK9gQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RUQ0NUNBMEQ4QTIxMUVGOTdGNjlBODY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGms6AMA0GCSqGSIb3DQEB
CwUAA4IBAQCEUG2W1OcbRlB5GfzE8dGUZYQ9iaU+IAT6Ae/+yrYbwRtuJg54Cavo
Z5Z5fOEnqc8OCVrnXU//uvgcCFLm9SgSpQ+GoS/zQi5MMJDCBH1ABExVmaiRvs+o
YgrbN7YbKfNiEBiK1j2CEoOvcv6Ho7ROB0Ryj9HrWl77sWvAKFS8pKCMm31Z5f9/
y5+T1FFqfQNJEXs8z2Dv0/6LvUjB+s6oFmv54wGkfBHX0VsDgmQ4CfFvy4hYAIZ2
lAvwm/8G90JQje45c7U/7tZJaOjpQlqt5D7BWQDCi+iv0eaLkglstCNUWJUSPoJc
l/LfOHYCux+Hije6tCB544poTe3VXPUV
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:02 2025 by rpki-client