Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6A366B4B20F11EFAD369663762E951A.roa
File: B6A366B4B20F11EFAD369663762E951A.roa (raw, json)
Hash identifier: zGLXtyGYSvpSdAUdSpt0kF+3pzDpqQLarbgXr4vhfKE=
Subject key identifier: 36:E2:56:71:48:36:65:A1:10:B1:18:1F:F6:53:AB:E8:53:35:28:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6A366B4B20F11EFAD369663762E951A.roa
Signing time: Wed 04 Dec 2024 07:16:43 +0000
ROA not before: Wed 04 Dec 2024 07:16:39 +0000
ROA not after: Sat 01 Feb 2025 07:16:39 +0000
asID: 150008
IP address blocks: 154.209.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71586 (0x117a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 07:16:39 2024 GMT
Not After : Feb 1 07:16:39 2025 GMT
Subject: CN=675001db-71e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:88:59:d6:57:1c:38:ce:47:67:2e:0b:0d:
41:4d:9f:fd:29:82:71:bb:60:5e:19:3a:88:eb:44:
e1:1d:ab:48:51:cd:a3:29:b5:de:d2:1d:18:17:15:
41:76:72:93:60:44:63:f2:b0:4c:9c:b1:d6:2e:18:
b0:b7:83:cf:3f:7a:f4:d3:38:1b:cb:29:d5:90:8e:
ac:75:93:d7:1e:b4:c9:7e:79:4c:fa:87:e0:d9:be:
38:b5:2b:a8:66:18:5f:c8:00:fb:09:ce:54:93:17:
5c:56:ab:de:e3:ec:51:e0:44:9b:d7:ab:6c:54:ea:
e9:17:72:a3:3f:ec:f6:a4:80:5c:a5:40:d5:5c:85:
af:88:1d:86:86:e0:c0:8c:f7:ae:7e:9f:7b:7f:a2:
44:54:bb:57:c0:d1:27:3d:86:c3:1d:d9:19:c3:6c:
b1:63:b2:40:22:df:6e:91:03:e4:2b:da:41:93:f3:
ad:0d:4f:05:16:64:f2:c8:88:7c:7e:e0:88:3d:77:
aa:68:72:78:90:d0:07:14:71:d4:50:06:a9:0c:f2:
9c:f6:4e:db:f6:a4:57:d8:26:01:b7:d6:ef:fc:6c:
b7:e7:ac:b0:23:97:6e:64:f5:c7:5e:fa:c2:c3:c1:
ef:5d:70:a7:c6:b1:ae:4f:bf:c7:3a:0e:c6:d4:7a:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E2:56:71:48:36:65:A1:10:B1:18:1F:F6:53:AB:E8:53:35:28:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6A366B4B20F11EFAD369663762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.252.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:c6:70:08:7b:05:35:bb:c6:b0:0c:53:6e:be:b6:bf:c1:56:
42:df:f6:ce:28:0a:39:71:09:33:94:0f:89:6d:dd:71:29:10:
38:10:26:88:ce:99:01:fb:c6:45:f9:52:73:04:13:16:6f:c2:
be:3a:fb:ed:75:fb:4e:bb:7a:8a:43:50:40:92:af:e4:cd:c7:
40:f2:3b:87:c5:f7:85:74:c7:7a:58:39:d7:e9:9c:50:49:9d:
14:2b:72:12:93:bb:5f:dd:b2:1e:c3:dd:f8:aa:b3:ac:42:2e:
06:f1:f1:61:2d:2f:b4:13:77:de:5a:4e:5e:f3:32:06:06:1e:
91:40:01:ed:50:02:f2:16:2d:86:30:ea:d3:f5:c8:19:a5:38:
bb:66:bc:5e:9b:30:b0:95:5d:c5:66:93:2d:d3:ca:41:fb:bd:
25:44:c6:3b:f5:ca:f5:ab:c7:04:e2:3f:98:a4:f6:60:a5:bb:
bf:43:29:fc:12:29:d6:37:b2:8d:d6:e4:5b:97:26:ca:a7:2d:
b5:3c:48:2d:1d:3f:ff:2f:64:2f:f2:e0:db:80:a3:34:df:d7:
1e:55:40:e2:a6:83:8e:14:e4:2f:21:9e:3b:69:5a:9d:6b:e8:
41:b1:ee:c4:65:5c:69:61:74:25:ad:33:e3:95:9f:4f:4d:c0:
7d:12:34:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAReiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjA0MDcxNjM5WhcNMjUwMjAxMDcxNjM5WjAYMRYw
FAYDVQQDEw02NzUwMDFkYi03MWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA17+IWdZXHDjOR2cuCw1BTZ/9KYJxu2BeGTqI60ThHatIUc2jKbXe0h0Y
FxVBdnKTYERj8rBMnLHWLhiwt4PPP3r00zgbyynVkI6sdZPXHrTJfnlM+ofg2b44
tSuoZhhfyAD7Cc5UkxdcVqve4+xR4ESb16tsVOrpF3KjP+z2pIBcpUDVXIWviB2G
huDAjPeufp97f6JEVLtXwNEnPYbDHdkZw2yxY7JAIt9ukQPkK9pBk/OtDU8FFmTy
yIh8fuCIPXeqaHJ4kNAHFHHUUAapDPKc9k7b9qRX2CYBt9bv/Gy356ywI5duZPXH
XvrCw8HvXXCnxrGuT7/HOg7G1HqG4wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDbi
VnFINmWhELEYH/ZTq+hTNSi0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNkEzNjZCNEIyMEYxMUVGQUQzNjk2NjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmtH8MA0GCSqGSIb3DQEB
CwUAA4IBAQC6xnAIewU1u8awDFNuvra/wVZC3/bOKAo5cQkzlA+Jbd1xKRA4ECaI
zpkB+8ZF+VJzBBMWb8K+OvvtdftOu3qKQ1BAkq/kzcdA8juHxfeFdMd6WDnX6ZxQ
SZ0UK3ISk7tf3bIew934qrOsQi4G8fFhLS+0E3feWk5e8zIGBh6RQAHtUALyFi2G
MOrT9cgZpTi7ZrxemzCwlV3FZpMt08pB+70lRMY79cr1q8cE4j+YpPZgpbu/Qyn8
EinWN7KN1uRblybKpy21PEgtHT//L2Qv8uDbgKM039ceVUDipoOOFOQvIZ47aVqd
a+hBse7EZVxpYXQlrTPjlZ9PTcB9EjT1
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:49:46 2025 by rpki-client