Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2A2804CC9C911EF9EA4F64A762E951A.roa
File: A2A2804CC9C911EF9EA4F64A762E951A.roa (raw, json)
Hash identifier: jFWKAwR/yPD3c4YlwyQp2hdcGRYigd8m/ZoHpo83q0w=
Subject key identifier: 3C:FB:6F:DD:2B:76:59:ED:E0:1F:A7:63:0A:0C:63:EB:CA:77:35:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2A2804CC9C911EF9EA4F64A762E951A.roa
Signing time: Fri 03 Jan 2025 11:55:33 +0000
ROA not before: Fri 03 Jan 2025 11:55:29 +0000
ROA not after: Tue 04 Feb 2025 11:55:29 +0000
asID: 203020
IP address blocks: 154.207.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79040 (0x134c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 11:55:29 2025 GMT
Not After : Feb 4 11:55:29 2025 GMT
Subject: CN=6777d035-fb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9f:0e:83:7f:35:12:fb:42:46:ef:04:be:a9:
7b:b1:c7:14:bc:d0:4b:81:2b:cd:33:d5:69:87:70:
fa:d1:95:ce:05:fe:b1:e7:52:23:c8:78:cc:b5:48:
20:62:64:04:b2:4f:a1:0b:18:8d:f1:49:e6:45:25:
81:b9:80:01:35:15:4f:f8:ed:a2:24:33:40:cd:aa:
06:92:1a:bf:08:10:2e:88:a9:a5:d3:d0:78:cd:de:
6b:26:0e:5a:4e:8b:8a:90:26:02:8b:b3:83:b1:6e:
ca:99:82:21:e4:e0:a0:01:f5:8e:56:78:25:62:41:
50:20:18:e4:11:49:06:e6:2d:8c:a5:cb:1e:45:73:
9c:b5:91:1a:0d:24:49:d7:cd:5d:0e:0a:cc:a6:61:
c7:5d:c0:30:03:21:6c:d4:79:e1:a2:37:b3:0d:87:
32:18:b1:c1:49:fc:47:c2:f7:fa:07:29:0f:7e:bf:
9d:e5:4c:5b:41:d4:b8:cb:e3:71:d3:c8:db:fa:7d:
ae:8b:92:f4:0f:98:f0:d9:1b:f5:32:f6:8b:26:cb:
43:b2:f2:c2:5b:2d:c5:75:a4:04:ff:e8:66:08:57:
1f:48:0e:db:88:9a:06:85:2f:0a:af:ec:02:29:be:
23:e3:07:1f:09:b5:d3:c2:cb:7e:d6:73:00:3d:81:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FB:6F:DD:2B:76:59:ED:E0:1F:A7:63:0A:0C:63:EB:CA:77:35:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2A2804CC9C911EF9EA4F64A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.184.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:87:0e:5f:0b:a1:21:a5:79:6b:ca:88:e5:7f:07:0f:16:ea:
dc:5a:a2:58:0a:85:63:fb:cc:ee:a8:f6:73:40:20:d6:a3:87:
a3:d3:67:08:6d:56:ef:92:c7:1a:35:a4:fc:cc:95:ec:8d:8b:
99:d2:3d:1e:7f:e1:c7:df:34:1b:0d:85:0a:eb:a2:51:a3:bf:
0b:d9:17:28:4d:9c:a0:8b:9c:be:1f:ba:14:df:33:a0:0f:f8:
3f:5f:ce:2e:39:6b:9c:bb:92:16:3d:17:c2:43:4c:19:bb:7e:
a5:f1:d3:75:18:3e:90:5f:0a:dc:62:cb:c4:6b:bc:8d:64:d4:
b0:1e:3e:2c:45:76:b5:19:4d:8e:61:67:db:e6:f2:1d:d4:d0:
4c:a4:56:e4:c7:a1:14:84:e2:9b:bd:7a:ba:d9:ad:01:47:bf:
be:0b:91:aa:cd:13:6b:4a:8e:46:be:7d:b2:5d:62:5c:51:a4:
ec:1c:c3:3b:91:df:29:ba:f6:0e:7a:1a:d3:04:63:1b:37:ad:
8a:86:09:8a:58:be:5d:c8:91:e8:6e:d0:4c:08:e3:35:04:67:
e4:e1:0b:c1:6c:3b:1e:b1:ec:13:c2:3a:bd:7f:84:5c:0c:a5:
1b:f4:e8:db:72:2f:dd:c7:01:a7:44:87:0a:9f:b9:d9:52:28:
c0:f8:84:bd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATTAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAzMTE1NTI5WhcNMjUwMjA0MTE1NTI5WjAYMRYw
FAYDVQQDEw02Nzc3ZDAzNS1mYjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA258Og381EvtCRu8Evql7sccUvNBLgSvNM9Vph3D60ZXOBf6x51IjyHjM
tUggYmQEsk+hCxiN8UnmRSWBuYABNRVP+O2iJDNAzaoGkhq/CBAuiKml09B4zd5r
Jg5aTouKkCYCi7ODsW7KmYIh5OCgAfWOVnglYkFQIBjkEUkG5i2MpcseRXOctZEa
DSRJ181dDgrMpmHHXcAwAyFs1HnhojezDYcyGLHBSfxHwvf6BykPfr+d5UxbQdS4
y+Nx08jb+n2ui5L0D5jw2Rv1MvaLJstDsvLCWy3FdaQE/+hmCFcfSA7biJoGhS8K
r+wCKb4j4wcfCbXTwst+1nMAPYFS0QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDz7
b90rdlnt4B+nYwoMY+vKdzWOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMkEyODA0Q0M5QzkxMUVGOUVBNEY2NEE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCms+4MA0GCSqGSIb3DQEB
CwUAA4IBAQDShw5fC6EhpXlryojlfwcPFurcWqJYCoVj+8zuqPZzQCDWo4ej02cI
bVbvkscaNaT8zJXsjYuZ0j0ef+HH3zQbDYUK66JRo78L2RcoTZygi5y+H7oU3zOg
D/g/X84uOWucu5IWPRfCQ0wZu36l8dN1GD6QXwrcYsvEa7yNZNSwHj4sRXa1GU2O
YWfb5vId1NBMpFbkx6EUhOKbvXq62a0BR7++C5GqzRNrSo5Gvn2yXWJcUaTsHMM7
kd8puvYOehrTBGMbN62KhgmKWL5dyJHobtBMCOM1BGfk4QvBbDsesewTwjq9f4Rc
DKUb9Ojbci/dxwGnRIcKn7nZUijA+IS9
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:11:19 2025 by rpki-client