Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3CD4EF0D8BC11EFB9ADDAB2762E951A.roa
File: A3CD4EF0D8BC11EFB9ADDAB2762E951A.roa (raw, json)
Hash identifier: 9PHK9a8l7lBz2to+NFE9gl5R++JkowaPpk7PIDLTxRg=
Subject key identifier: 72:97:6F:1D:96:1A:03:5F:66:32:01:B6:9E:E3:5D:9F:2F:E1:77:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F40
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3CD4EF0D8BC11EFB9ADDAB2762E951A.roa
Signing time: Wed 22 Jan 2025 12:30:19 +0000
ROA not before: Wed 22 Jan 2025 12:30:15 +0000
ROA not after: Sat 08 Feb 2025 12:30:15 +0000
asID: 18229
IP address blocks: 154.210.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81728 (0x13f40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 12:30:15 2025 GMT
Not After : Feb 8 12:30:15 2025 GMT
Subject: CN=6790e4da-25cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:c0:79:66:6b:53:17:e2:04:bb:71:fb:7a:
bf:84:54:48:d4:9a:fc:ae:e2:b7:c7:3f:ba:7f:8e:
1f:5b:c1:40:90:c9:73:10:36:ec:e8:ed:c5:8a:6f:
e9:3c:82:a2:2c:58:e5:df:0f:51:5d:73:4b:df:37:
b0:62:d5:73:20:b3:29:4c:f8:a7:6f:80:ad:ce:7b:
12:b2:e0:2a:14:5e:68:31:e9:6b:7d:8a:77:f0:cf:
bf:91:2e:b6:b2:63:9b:58:b4:d6:b9:b3:a6:f8:a4:
c9:35:c9:04:e8:37:8a:e7:e9:84:b6:a4:39:71:54:
0a:ae:1d:75:5a:be:94:17:17:8d:c0:74:03:49:c9:
f8:46:95:a2:b0:7d:fc:79:62:1a:2a:18:7a:ed:dc:
be:ac:44:b0:11:86:fc:42:6c:75:86:f2:c3:fa:b4:
61:b4:ad:a8:93:74:82:87:3a:cf:a8:b5:cf:8c:35:
81:68:d9:ef:6e:69:f8:3c:44:88:94:ba:c4:80:29:
e6:d7:cf:29:06:26:8b:63:1f:2d:7c:03:16:cd:a7:
10:07:13:9a:38:3c:02:94:0c:c5:7b:4d:90:30:68:
a0:40:2a:0f:8b:e8:c9:58:41:36:8b:f7:2f:4f:68:
25:a5:59:a7:14:3d:4c:bd:c8:c4:90:f5:70:31:5f:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:97:6F:1D:96:1A:03:5F:66:32:01:B6:9E:E3:5D:9F:2F:E1:77:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3CD4EF0D8BC11EFB9ADDAB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.134.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f2:49:23:3b:4e:53:6f:7a:96:3d:63:65:71:03:19:c2:e8:
ae:87:7f:4c:bd:38:88:9d:70:12:7e:4f:5d:1e:67:63:2d:4d:
5b:32:60:6b:aa:2a:fa:48:f6:56:7f:96:b1:2a:03:c4:91:c8:
1a:6f:b1:38:12:dc:18:07:73:a4:67:c4:d1:db:79:cd:9f:21:
f6:3a:b5:f8:4e:f1:db:a1:57:45:f3:8d:b4:f2:28:a1:0b:bf:
81:34:6c:c3:29:51:ab:5a:48:02:17:c8:d8:7d:e2:f0:ce:e2:
2c:fd:43:03:a2:36:90:e9:f3:28:26:b7:87:33:33:6b:93:a3:
ec:ae:0c:8f:cb:fc:8f:ee:f5:11:36:c8:53:39:3e:cf:7e:43:
9a:7a:c5:71:be:7b:02:53:9d:77:f4:67:0e:e4:aa:13:b1:54:
12:7b:ba:f4:32:e9:b3:72:f3:00:d2:a1:0c:24:d1:ab:7c:d6:
e8:12:f5:10:bb:0f:9b:68:4f:06:72:99:f5:14:66:14:37:29:
08:a6:1e:96:46:7f:76:0c:ab:ec:44:04:2a:ff:58:bf:79:1f:
e3:89:ff:2a:37:8b:51:af:00:ad:fc:01:f1:18:69:8e:3e:e4:
86:41:91:20:ed:14:b9:29:4d:ee:9d:be:e7:89:71:b7:3c:41:
6b:2c:db:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT9AMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMTIzMDE1WhcNMjUwMjA4MTIzMDE1WjAYMRYw
FAYDVQQDEw02NzkwZTRkYS0yNWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvK3AeWZrUxfiBLtx+3q/hFRI1Jr8ruK3xz+6f44fW8FAkMlzEDbs6O3F
im/pPIKiLFjl3w9RXXNL3zewYtVzILMpTPinb4CtznsSsuAqFF5oMelrfYp38M+/
kS62smObWLTWubOm+KTJNckE6DeK5+mEtqQ5cVQKrh11Wr6UFxeNwHQDScn4RpWi
sH38eWIaKhh67dy+rESwEYb8Qmx1hvLD+rRhtK2ok3SChzrPqLXPjDWBaNnvbmn4
PESIlLrEgCnm188pBiaLYx8tfAMWzacQBxOaODwClAzFe02QMGigQCoPi+jJWEE2
i/cvT2glpVmnFD1MvcjEkPVwMV+2zQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHKX
bx2WGgNfZjIBtp7jXZ8v4XcpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BM0NENEVGMEQ4QkMxMUVGQjlBRERBQjI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtKGMA0GCSqGSIb3DQEB
CwUAA4IBAQBg8kkjO05Tb3qWPWNlcQMZwuiuh39MvTiInXASfk9dHmdjLU1bMmBr
qir6SPZWf5axKgPEkcgab7E4EtwYB3OkZ8TR23nNnyH2OrX4TvHboVdF84208iih
C7+BNGzDKVGrWkgCF8jYfeLwzuIs/UMDojaQ6fMoJreHMzNrk6PsrgyPy/yP7vUR
NshTOT7PfkOaesVxvnsCU5139GcO5KoTsVQSe7r0MumzcvMA0qEMJNGrfNboEvUQ
uw+baE8Gcpn1FGYUNykIph6WRn92DKvsRAQq/1i/eR/jif8qN4tRrwCt/AHxGGmO
PuSGQZEg7RS5KU3unb7niXG3PEFrLNvt
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:39 2025 by rpki-client