Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEF9F88CB21011EFB58AEB6A762E951A.roa
File: AEF9F88CB21011EFB58AEB6A762E951A.roa (raw, json)
Hash identifier: rnOEkfGEicSjyoQbS2SJbWNwLEi50mfvaCQvZTnnvmw=
Subject key identifier: FA:21:9E:DC:57:33:32:6B:32:B1:6A:AE:D2:9E:0E:C5:1C:DE:FA:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEF9F88CB21011EFB58AEB6A762E951A.roa
Signing time: Wed 04 Dec 2024 07:23:40 +0000
ROA not before: Wed 04 Dec 2024 07:23:36 +0000
ROA not after: Sat 01 Feb 2025 07:23:36 +0000
asID: 150008
IP address blocks: 154.206.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71598 (0x117ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 07:23:36 2024 GMT
Not After : Feb 1 07:23:36 2025 GMT
Subject: CN=6750037c-ce20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:c1:01:4d:a5:1d:f2:fd:9b:db:02:10:c6:
99:36:93:da:79:b4:a4:89:28:e9:3b:b0:ba:5f:bb:
03:0f:c0:d0:aa:c5:f1:ce:c8:86:3c:cf:aa:bc:40:
db:8b:d5:1e:09:31:ac:34:9e:60:d1:89:2f:0e:71:
5f:c6:1a:78:a1:ce:d1:af:32:a5:4a:e4:13:ba:fd:
24:ff:fd:dc:d4:87:ae:43:69:bf:c3:8b:54:32:29:
ea:f5:a4:d8:9b:9d:48:a5:b0:87:21:71:67:b1:8e:
8b:0f:ad:7c:ff:8d:14:ad:de:c8:67:c4:b6:20:13:
6d:b5:40:3a:f5:53:99:d3:67:4f:e0:62:70:51:11:
cc:33:3c:e3:7e:0b:aa:dc:77:e5:8e:15:ae:22:b1:
aa:70:32:f0:c3:aa:c1:ee:d3:31:2d:21:8f:95:33:
6b:fd:60:72:d1:c7:80:a2:43:41:b7:eb:9c:f1:f3:
ef:00:7d:80:64:da:32:b0:50:af:08:ac:38:6e:d4:
19:48:00:f4:d6:4c:8a:94:90:a7:75:25:a9:10:af:
ef:76:9b:c7:7c:4e:e9:6e:87:5d:96:ca:40:84:49:
a1:7f:9f:0c:d1:0a:72:48:15:1a:2f:5c:f9:96:5b:
f2:78:5f:2f:5c:35:3c:88:87:cd:3d:bd:3a:76:9c:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:21:9E:DC:57:33:32:6B:32:B1:6A:AE:D2:9E:0E:C5:1C:DE:FA:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEF9F88CB21011EFB58AEB6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:1f:21:a7:33:9a:b9:ed:c0:ef:4d:c5:d2:e1:96:27:cc:4f:
d0:49:28:02:ec:85:30:27:74:03:17:8d:69:18:20:e2:81:d5:
e7:f0:57:c8:98:d4:e2:01:8c:33:80:a5:a0:7b:55:77:09:a4:
cc:3a:f0:e8:62:8b:2c:5c:7f:1b:78:78:51:5d:3f:97:ae:b2:
39:c2:4a:a7:cc:df:ed:ae:bf:b5:97:ee:45:3f:62:bb:9e:53:
65:d5:86:31:07:cb:13:5b:39:9e:51:9c:b0:0a:a9:89:a3:1b:
6f:48:3f:0b:b3:c7:0f:96:3d:9b:aa:38:7c:3a:99:6a:a6:ea:
fb:22:88:dc:c6:75:41:cb:29:28:6b:7f:fa:3e:24:77:f9:81:
95:3a:a6:c5:aa:18:f7:a7:5a:09:e2:2b:7d:47:88:d6:e0:e6:
61:37:58:dc:c0:92:f2:ea:eb:cb:e3:b1:be:b4:f5:4c:d3:8c:
1d:b8:6c:20:48:5d:69:ad:33:3a:ec:af:15:bf:86:df:d8:68:
39:cc:b4:50:73:81:29:cd:34:aa:f2:75:94:a5:c4:e7:4c:28:
85:04:05:30:ab:55:87:f1:5e:52:e3:28:97:91:70:a9:18:00:
c8:7c:bd:7b:9c:3f:af:e0:09:94:60:bb:1f:93:ac:b4:6d:4d:
0e:b9:7e:79
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAReuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjA0MDcyMzM2WhcNMjUwMjAxMDcyMzM2WjAYMRYw
FAYDVQQDEw02NzUwMDM3Yy1jZTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAolfBAU2lHfL9m9sCEMaZNpPaebSkiSjpO7C6X7sDD8DQqsXxzsiGPM+q
vEDbi9UeCTGsNJ5g0YkvDnFfxhp4oc7RrzKlSuQTuv0k//3c1IeuQ2m/w4tUMinq
9aTYm51IpbCHIXFnsY6LD618/40Urd7IZ8S2IBNttUA69VOZ02dP4GJwURHMMzzj
fguq3HfljhWuIrGqcDLww6rB7tMxLSGPlTNr/WBy0ceAokNBt+uc8fPvAH2AZNoy
sFCvCKw4btQZSAD01kyKlJCndSWpEK/vdpvHfE7pboddlspAhEmhf58M0QpySBUa
L1z5llvyeF8vXDU8iIfNPb06dpyHhwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPoh
ntxXMzJrMrFqrtKeDsUc3voFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRUY5Rjg4Q0IyMTAxMUVGQjU4QUVCNkE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4SMA0GCSqGSIb3DQEB
CwUAA4IBAQCyHyGnM5q57cDvTcXS4ZYnzE/QSSgC7IUwJ3QDF41pGCDigdXn8FfI
mNTiAYwzgKWge1V3CaTMOvDoYossXH8beHhRXT+XrrI5wkqnzN/trr+1l+5FP2K7
nlNl1YYxB8sTWzmeUZywCqmJoxtvSD8Ls8cPlj2bqjh8Oplqpur7IojcxnVByyko
a3/6PiR3+YGVOqbFqhj3p1oJ4it9R4jW4OZhN1jcwJLy6uvL47G+tPVM04wduGwg
SF1prTM67K8Vv4bf2Gg5zLRQc4EpzTSq8nWUpcTnTCiFBAUwq1WH8V5S4yiXkXCp
GADIfL17nD+v4AmUYLsfk6y0bU0OuX55
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:44:30 2025 by rpki-client