Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C586CDF6D56911EF9924936E762E951A.roa
File: C586CDF6D56911EF9924936E762E951A.roa (raw, json)
Hash identifier: iNWqFTaxq0dVNgi2LdDXdD/nDgSAV5PBjKvARgsdGFI=
Subject key identifier: F3:9F:4B:C5:0E:A0:7B:25:72:88:7A:DD:F7:14:9D:9F:E7:FD:28:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C586CDF6D56911EF9924936E762E951A.roa
Signing time: Sat 18 Jan 2025 06:59:33 +0000
ROA not before: Sat 18 Jan 2025 06:59:30 +0000
ROA not after: Sat 22 Feb 2025 06:59:30 +0000
asID: 54600
IP address blocks: 154.202.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81290 (0x13d8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 06:59:30 2025 GMT
Not After : Feb 22 06:59:30 2025 GMT
Subject: CN=678b5155-de13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:51:10:20:dd:aa:8a:dc:e1:3a:31:fa:38:
46:b1:78:b0:3e:58:0f:a0:29:e4:98:62:b5:66:14:
5a:b3:c6:77:0f:e6:0e:1f:07:3e:2b:3a:3a:40:de:
06:24:a6:2f:db:51:78:b3:20:2d:37:17:72:3b:b4:
5d:c8:c4:81:c1:49:6a:74:1a:fe:0e:7c:3e:88:bd:
6d:32:44:d2:b6:d8:95:d1:3f:3c:58:d0:b5:ee:ae:
42:3e:43:45:48:92:15:e8:c9:0f:e3:71:96:c9:9f:
09:32:ee:d3:b5:08:af:cc:a1:f7:c6:e6:ae:53:14:
5b:e5:54:25:b8:23:24:f6:77:4c:e6:bc:e7:20:fe:
8e:37:ad:3b:85:af:03:c9:5a:ad:01:28:f4:5a:e2:
06:b2:6f:10:fd:19:9c:80:02:a8:67:ae:ab:67:d5:
9b:09:a1:44:ec:77:17:f5:b1:d0:61:de:e7:30:f1:
82:bc:63:ba:98:20:eb:36:bc:5b:ef:17:56:d1:e7:
3e:ad:62:4d:c1:c8:aa:55:53:b1:c8:a0:ef:05:8e:
21:11:2e:93:0a:e2:9b:63:9f:70:16:ce:25:89:0b:
84:91:f2:a6:0a:f0:ac:a2:18:89:48:b5:ca:7d:6a:
f5:97:13:f8:41:3f:25:b5:ba:49:d1:32:ee:b6:fb:
50:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9F:4B:C5:0E:A0:7B:25:72:88:7A:DD:F7:14:9D:9F:E7:FD:28:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C586CDF6D56911EF9924936E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.120.0/21
Signature Algorithm: sha256WithRSAEncryption
18:34:bd:1c:2e:6e:9a:11:3f:75:06:8e:fd:20:7e:e0:13:40:
0f:96:89:a3:a0:3e:23:ab:ba:56:f6:b7:bf:0d:31:92:cc:31:
0c:98:e9:79:2a:2e:06:94:a6:ae:6f:12:77:9e:3c:37:f4:4a:
bb:d1:03:d3:0a:84:06:78:fa:b0:42:1d:e1:4f:56:6b:9e:ab:
2a:1e:d3:bb:a8:2b:eb:52:36:a9:a7:a3:ca:58:7e:c6:fa:80:
57:b4:a6:7a:7d:19:d9:1c:d7:1a:f0:a6:91:d1:49:12:88:7f:
d5:40:4b:05:c2:4d:4b:d5:8d:bb:94:78:d1:e5:81:e7:d2:c4:
10:68:d0:30:c1:f7:df:16:f1:91:9d:dc:d7:e5:ae:4b:0f:b3:
c0:99:30:ff:74:1d:73:b5:74:4d:d8:b6:cd:10:79:0a:99:1f:
25:76:57:3e:a8:e9:37:94:67:ec:11:e2:c6:0c:ce:f6:1f:71:
f0:44:50:a6:b0:49:fb:6a:80:38:c6:80:57:c1:8e:86:3d:d6:
a8:ae:4e:d9:7c:6d:95:ed:f1:47:cd:f7:db:70:49:59:9c:aa:
02:54:d6:38:7e:19:24:36:66:d6:bd:d9:17:c9:f4:9c:20:26:
59:73:f1:3f:a6:3f:bb:98:d3:df:3d:fb:f0:ef:99:fa:fe:43:
18:8f:2f:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT2KMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE4MDY1OTMwWhcNMjUwMjIyMDY1OTMwWjAYMRYw
FAYDVQQDEw02NzhiNTE1NS1kZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAur9RECDdqorc4Tox+jhGsXiwPlgPoCnkmGK1ZhRas8Z3D+YOHwc+Kzo6
QN4GJKYv21F4syAtNxdyO7RdyMSBwUlqdBr+Dnw+iL1tMkTSttiV0T88WNC17q5C
PkNFSJIV6MkP43GWyZ8JMu7TtQivzKH3xuauUxRb5VQluCMk9ndM5rznIP6ON607
ha8DyVqtASj0WuIGsm8Q/RmcgAKoZ66rZ9WbCaFE7HcX9bHQYd7nMPGCvGO6mCDr
Nrxb7xdW0ec+rWJNwciqVVOxyKDvBY4hES6TCuKbY59wFs4liQuEkfKmCvCsohiJ
SLXKfWr1lxP4QT8ltbpJ0TLutvtQXQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPOf
S8UOoHslcoh63fcUnZ/n/SisMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNTg2Q0RGNkQ1NjkxMUVGOTkyNDkzNkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmsp4MA0GCSqGSIb3DQEB
CwUAA4IBAQAYNL0cLm6aET91Bo79IH7gE0APlomjoD4jq7pW9re/DTGSzDEMmOl5
Ki4GlKaubxJ3njw39Eq70QPTCoQGePqwQh3hT1ZrnqsqHtO7qCvrUjapp6PKWH7G
+oBXtKZ6fRnZHNca8KaR0UkSiH/VQEsFwk1L1Y27lHjR5YHn0sQQaNAwwfffFvGR
ndzX5a5LD7PAmTD/dB1ztXRN2LbNEHkKmR8ldlc+qOk3lGfsEeLGDM72H3HwRFCm
sEn7aoA4xoBXwY6GPdaork7ZfG2V7fFHzffbcElZnKoCVNY4fhkkNmbWvdkXyfSc
ICZZc/E/pj+7mNPfPfvw75n6/kMYjy/p
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:35:18 2025 by rpki-client