Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8537C8ECF2211EF8746E253762E951A.roa
File: C8537C8ECF2211EF8746E253762E951A.roa (raw, json)
Hash identifier: 80fuI3FpvnBe1vhXY/NL38KKOC/s1X298MDyDbWjqFw=
Subject key identifier: 93:45:76:9A:AF:FD:F5:56:95:11:3C:5E:A9:5B:7A:02:4C:BF:F0:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8537C8ECF2211EF8746E253762E951A.roa
Signing time: Fri 10 Jan 2025 07:16:17 +0000
ROA not before: Fri 10 Jan 2025 07:16:13 +0000
ROA not after: Fri 14 Feb 2025 07:16:13 +0000
asID: 54600
IP address blocks: 154.202.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80291 (0x139a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 07:16:13 2025 GMT
Not After : Feb 14 07:16:13 2025 GMT
Subject: CN=6780c941-e6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:53:6b:04:0d:d9:6e:a9:40:a7:a3:6e:2f:
e9:93:65:1e:11:3e:62:0b:87:ad:4f:38:45:63:a5:
d2:00:1f:d8:ce:e2:fc:5e:29:29:a1:4a:61:49:f0:
f8:65:07:1c:ad:77:6e:0e:ca:5b:3c:e0:7b:5a:3f:
b2:9a:3b:6d:1c:fa:f2:ae:2e:8c:38:47:1c:0f:ca:
1f:fe:01:11:ae:98:0b:15:5d:15:7a:61:29:05:dc:
e7:47:53:cd:7a:3d:91:a3:9c:69:db:96:e8:be:e0:
5d:11:fd:eb:e3:a1:0d:9e:55:da:36:d4:1e:3f:1e:
c6:a1:73:13:f9:f3:40:20:dc:4f:ba:21:47:b2:d2:
33:5e:37:1a:20:5c:e2:fc:b9:e5:66:34:20:0f:42:
0a:db:c7:7c:3e:97:dd:75:3b:70:27:36:d4:18:c4:
1c:0e:49:bb:cc:1b:8c:b8:8b:29:b1:7d:bf:6f:be:
20:09:7e:4d:ad:35:bc:72:dc:e2:71:06:32:99:32:
5d:09:3e:86:6b:2a:e6:49:61:7d:9c:eb:43:7b:56:
9f:03:22:ba:40:3a:ec:69:d5:d1:b4:dd:3d:e1:88:
b5:f5:26:ef:c2:29:5a:dc:8b:ee:9a:11:e9:c0:ae:
31:2d:33:03:e4:d0:d7:f0:7c:a7:71:04:47:31:39:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:45:76:9A:AF:FD:F5:56:95:11:3C:5E:A9:5B:7A:02:4C:BF:F0:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8537C8ECF2211EF8746E253762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.160.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:9b:41:50:24:93:0e:47:74:aa:19:ad:fd:03:b1:cb:41:82:
28:cb:a4:b6:17:c8:b2:80:af:4c:f1:06:e2:d4:b7:1d:34:0b:
a4:34:80:7b:7c:51:29:38:e4:63:ec:95:50:15:d9:9e:31:12:
ae:f2:64:77:54:3d:25:5c:ad:ce:3e:0f:86:32:49:bb:30:42:
d1:b7:b8:43:0d:f6:01:ef:ae:57:33:4d:1a:d9:be:94:6c:49:
83:89:7a:15:1a:8f:be:2d:6b:4f:84:33:ee:dd:e5:72:78:5d:
73:b7:21:45:51:7a:5a:b9:34:a5:b8:97:95:2a:94:9c:2b:68:
a4:9a:72:ae:c7:9f:20:60:45:42:ad:81:f1:8a:21:1d:c2:dd:
90:76:b9:b7:e3:c9:b6:a4:2c:8b:9f:86:97:50:ca:c1:fc:1b:
dc:f0:a3:b9:7b:58:a4:85:ce:9f:67:c0:96:b5:2e:bd:5c:5a:
87:9e:e4:3d:e9:02:31:1d:26:5a:3a:2b:29:ab:91:81:c6:a5:
1b:b2:79:e2:15:9c:14:ae:94:1c:e5:6b:3c:09:02:73:c7:a7:
d8:99:df:35:56:30:cd:67:2a:f3:aa:60:66:5f:63:dd:96:79:
8d:9c:f0:ab:10:fc:b0:05:7e:9b:14:f1:a7:35:c9:f9:04:35:
ca:81:ff:2a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATmjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTEwMDcxNjEzWhcNMjUwMjE0MDcxNjEzWjAYMRYw
FAYDVQQDEw02NzgwYzk0MS1lNmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzGhTawQN2W6pQKejbi/pk2UeET5iC4etTzhFY6XSAB/YzuL8XikpoUph
SfD4ZQccrXduDspbPOB7Wj+ymjttHPryri6MOEccD8of/gERrpgLFV0VemEpBdzn
R1PNej2Ro5xp25bovuBdEf3r46ENnlXaNtQePx7GoXMT+fNAINxPuiFHstIzXjca
IFzi/LnlZjQgD0IK28d8PpfddTtwJzbUGMQcDkm7zBuMuIspsX2/b74gCX5NrTW8
ctzicQYymTJdCT6GayrmSWF9nOtDe1afAyK6QDrsadXRtN094Yi19Sbvwila3Ivu
mhHpwK4xLTMD5NDX8HyncQRHMTkLvwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJNF
dpqv/fVWlRE8XqlbegJMv/DlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DODUzN0M4RUNGMjIxMUVGODc0NkUyNTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmsqgMA0GCSqGSIb3DQEB
CwUAA4IBAQCfm0FQJJMOR3SqGa39A7HLQYIoy6S2F8iygK9M8Qbi1LcdNAukNIB7
fFEpOORj7JVQFdmeMRKu8mR3VD0lXK3OPg+GMkm7MELRt7hDDfYB765XM00a2b6U
bEmDiXoVGo++LWtPhDPu3eVyeF1ztyFFUXpauTSluJeVKpScK2ikmnKux58gYEVC
rYHxiiEdwt2Qdrm348m2pCyLn4aXUMrB/Bvc8KO5e1ikhc6fZ8CWtS69XFqHnuQ9
6QIxHSZaOispq5GBxqUbsnniFZwUrpQc5Ws8CQJzx6fYmd81VjDNZyrzqmBmX2Pd
lnmNnPCrEPywBX6bFPGnNcn5BDXKgf8q
-----END CERTIFICATE-----
Generated at Sat Apr 26 23:01:52 2025 by rpki-client