Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C63281BCD96211EF8EC17C92762E951A.roa
File: C63281BCD96211EF8EC17C92762E951A.roa (raw, json)
Hash identifier: cVc4OD5lnbCxX1gm70Bg2ZTJvPP+mrTdFKBpPXESFwo=
Subject key identifier: 34:54:C3:C0:CD:C7:AD:6D:91:6D:8E:54:D8:74:71:F2:FD:1B:03:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014077
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C63281BCD96211EF8EC17C92762E951A.roa
Signing time: Thu 23 Jan 2025 08:19:33 +0000
ROA not before: Thu 23 Jan 2025 08:19:29 +0000
ROA not after: Sat 08 Feb 2025 08:19:29 +0000
asID: 18229
IP address blocks: 154.210.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82039 (0x14077)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 08:19:29 2025 GMT
Not After : Feb 8 08:19:29 2025 GMT
Subject: CN=6791fb95-b9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b5:99:83:92:0e:ba:79:6e:19:95:6f:1c:f6:
3a:8d:69:33:2b:24:e5:cd:4a:ea:1c:80:b7:2e:c3:
d5:24:eb:b9:f2:35:1e:07:25:c8:d9:eb:92:4b:ee:
8b:47:1c:ec:91:92:fb:01:66:86:eb:3d:e1:53:84:
bb:4e:1a:d0:36:63:5f:a4:51:22:ed:83:f7:4d:57:
d5:2c:12:22:6c:95:2f:8b:fd:25:c8:a3:8e:c3:a6:
ae:6c:07:e0:89:d4:b2:d7:1c:96:a2:1f:76:c9:6c:
51:f7:34:b9:75:09:4f:6c:41:4d:00:42:68:00:3d:
bf:fc:2a:17:a8:20:5a:ad:b5:41:5a:7e:16:e5:9a:
cb:38:29:b9:57:67:8a:75:e4:0d:e4:2a:00:f4:3a:
28:9c:b7:88:a3:f9:49:9b:4c:35:0a:f4:35:1b:5e:
84:92:e9:82:04:64:a9:8f:2a:0c:36:a9:a2:f9:5c:
dc:49:0b:55:e3:95:ff:85:ca:9c:2b:f6:4e:55:3f:
e2:f9:83:6d:6c:21:fc:6f:5a:08:59:27:01:52:b5:
49:2b:bb:d0:f7:41:7d:c4:b2:86:34:48:d2:96:da:
87:66:97:fb:b0:12:d8:0d:fb:90:3c:b5:84:d0:de:
bc:36:b9:c4:05:18:e7:bc:3a:97:c3:c5:e8:2c:3e:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:54:C3:C0:CD:C7:AD:6D:91:6D:8E:54:D8:74:71:F2:FD:1B:03:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C63281BCD96211EF8EC17C92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.188.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:66:74:ee:62:5f:89:42:0b:4c:da:8c:65:01:b6:4d:7c:80:
fe:4f:c4:f3:4e:09:c7:d1:95:a7:ef:f3:8a:21:8a:c8:ba:9c:
b6:02:08:74:fb:e1:b7:1d:b4:a3:1d:13:0c:84:5f:e0:76:8f:
21:05:70:8d:0d:f3:d7:ce:62:4a:85:b1:ab:bb:6b:08:22:af:
ef:3e:d6:5d:77:fc:08:7d:23:20:fa:ff:2f:7c:2f:d0:57:f6:
d9:2d:52:52:e4:38:7f:8b:8f:52:36:e7:43:79:73:62:d2:2b:
45:5d:07:05:d5:13:9c:a8:67:95:16:ac:71:b8:04:68:ac:28:
83:37:31:67:c5:1e:4c:d0:0d:27:a0:0e:1a:c6:48:d5:cc:95:
c4:17:64:59:0c:89:be:e7:58:4d:1d:b5:12:67:f7:05:60:5f:
65:85:b0:65:b3:84:08:32:c5:96:93:14:6e:fe:e1:06:38:a7:
91:2d:ba:a6:56:18:20:a1:de:48:51:a8:12:bf:32:51:c2:e1:
fe:98:b7:6d:e3:d2:76:74:12:a8:8d:2b:e5:d6:4d:f2:32:be:
db:f7:9f:c7:72:d2:e0:f5:fa:7c:8e:30:c1:ff:8f:54:e3:82:
d9:e7:10:14:31:71:c1:e7:e4:6c:79:30:11:60:50:f2:d7:a4:
99:c2:68:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUB3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMDgxOTI5WhcNMjUwMjA4MDgxOTI5WjAYMRYw
FAYDVQQDEw02NzkxZmI5NS1iOWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6LWZg5IOunluGZVvHPY6jWkzKyTlzUrqHIC3LsPVJOu58jUeByXI2euS
S+6LRxzskZL7AWaG6z3hU4S7ThrQNmNfpFEi7YP3TVfVLBIibJUvi/0lyKOOw6au
bAfgidSy1xyWoh92yWxR9zS5dQlPbEFNAEJoAD2//CoXqCBarbVBWn4W5ZrLOCm5
V2eKdeQN5CoA9DoonLeIo/lJm0w1CvQ1G16EkumCBGSpjyoMNqmi+VzcSQtV45X/
hcqcK/ZOVT/i+YNtbCH8b1oIWScBUrVJK7vQ90F9xLKGNEjSltqHZpf7sBLYDfuQ
PLWE0N68NrnEBRjnvDqXw8XoLD5wAwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDRU
w8DNx61tkW2OVNh0cfL9GwMaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNjMyODFCQ0Q5NjIxMUVGOEVDMTdDOTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtK8MA0GCSqGSIb3DQEB
CwUAA4IBAQC8ZnTuYl+JQgtM2oxlAbZNfID+T8TzTgnH0ZWn7/OKIYrIupy2Agh0
++G3HbSjHRMMhF/gdo8hBXCNDfPXzmJKhbGru2sIIq/vPtZdd/wIfSMg+v8vfC/Q
V/bZLVJS5Dh/i49SNudDeXNi0itFXQcF1ROcqGeVFqxxuARorCiDNzFnxR5M0A0n
oA4axkjVzJXEF2RZDIm+51hNHbUSZ/cFYF9lhbBls4QIMsWWkxRu/uEGOKeRLbqm
Vhggod5IUagSvzJRwuH+mLdt49J2dBKojSvl1k3yMr7b95/HctLg9fp8jjDB/49U
44LZ5xAUMXHB5+RseTARYFDy16SZwmjH
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:43 2025 by rpki-client