Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF0716E8DD6011EFA267C386762E951A.roa
File: CF0716E8DD6011EFA267C386762E951A.roa (raw, json)
Hash identifier: dx/+vyeDQHdNNsM+5JUDYncnmQwIk0OMDx7FHnAalrI=
Subject key identifier: D7:40:0D:EF:8E:B6:2D:0F:4E:14:3D:E4:5F:A1:FA:B4:9C:33:68:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF0716E8DD6011EFA267C386762E951A.roa
Signing time: Tue 28 Jan 2025 10:15:33 +0000
ROA not before: Tue 28 Jan 2025 10:15:29 +0000
ROA not after: Sun 09 Feb 2025 10:15:29 +0000
asID: 39600
IP address blocks: 154.91.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85182 (0x14cbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 10:15:29 2025 GMT
Not After : Feb 9 10:15:29 2025 GMT
Subject: CN=6798ae45-7f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:56:f2:d9:d3:ab:92:00:5d:d7:d5:29:12:
81:e0:07:ef:9d:6c:ae:75:06:79:5b:6b:a7:6d:78:
35:5d:14:98:b9:a1:89:ad:d6:20:82:55:39:1a:f9:
27:da:62:20:62:a4:c0:65:6e:b2:65:2c:30:d7:a8:
37:7e:b6:0d:01:19:5b:5f:7b:2c:1a:5c:c1:a3:78:
39:3f:58:4f:c7:d7:15:db:59:ea:5a:8e:71:53:4c:
32:43:a5:65:5e:c6:78:b4:e1:9a:a1:e8:ff:b5:88:
88:37:4d:12:8c:c9:72:1e:94:4b:99:10:c9:a8:31:
9e:56:d6:03:13:d6:e4:12:47:d7:9f:04:2c:90:ac:
cd:42:21:91:28:6c:9f:28:78:67:f7:b8:41:92:bd:
c8:5a:83:1c:e8:c5:8d:6c:cb:35:c8:89:53:f7:52:
29:25:8e:44:c5:fe:05:0c:6e:5b:2b:fa:b8:31:01:
11:0c:9d:f3:4c:3c:cb:85:f2:63:8a:61:8f:8d:12:
ef:53:cf:dd:22:28:0b:df:37:f5:17:fe:74:51:ec:
0c:f7:9f:43:6d:29:b5:a9:6d:85:74:37:bd:df:cc:
67:5d:90:30:c1:2b:2b:c1:43:29:76:38:e6:d7:85:
73:56:56:36:1f:a2:4d:5b:62:4c:5f:4a:39:6b:91:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:40:0D:EF:8E:B6:2D:0F:4E:14:3D:E4:5F:A1:FA:B4:9C:33:68:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF0716E8DD6011EFA267C386762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.128.0/21
Signature Algorithm: sha256WithRSAEncryption
05:97:04:67:ae:db:ee:da:cd:c9:3b:6b:0f:65:a0:9d:77:90:
79:cc:68:40:53:14:25:66:5c:cb:ec:6d:08:a8:28:94:ef:c3:
fe:6e:f9:db:d4:5b:86:c5:61:ea:87:24:24:a7:5e:bb:22:d2:
fc:c6:54:62:67:44:f8:72:8f:a9:7e:24:e1:e0:11:06:4c:cd:
4d:38:d3:94:aa:f6:f8:52:77:17:ac:43:fd:c7:ba:50:a7:56:
50:f4:5f:0c:88:31:12:a4:51:80:bb:6e:35:22:f9:f7:98:78:
5d:88:1a:79:85:f8:bc:71:c5:a7:04:5e:f6:f8:7a:c9:98:d0:
c7:77:34:a5:21:35:ce:1b:3b:40:74:5a:c4:80:0f:71:94:29:
57:98:40:b0:32:11:6a:57:da:5f:60:ed:f5:5e:ff:41:3b:d8:
bf:56:42:91:e6:08:be:7c:80:7d:f2:a2:8b:db:87:a1:be:c9:
81:b5:2f:ad:ed:96:73:00:33:79:44:4e:9f:3f:54:ac:ee:0c:
00:58:66:cc:f7:c7:ff:13:db:79:24:68:52:8a:f6:a5:62:77:
be:9c:bb:bf:ee:95:a7:c5:11:95:38:66:e8:9a:4b:1d:17:06:
35:6f:5a:da:60:67:56:9d:82:56:16:9c:f8:d8:82:e8:71:c8:
fb:65:11:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUy+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI4MTAxNTI5WhcNMjUwMjA5MTAxNTI5WjAYMRYw
FAYDVQQDEw02Nzk4YWU0NS03Zjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuGtW8tnTq5IAXdfVKRKB4AfvnWyudQZ5W2unbXg1XRSYuaGJrdYgglU5
Gvkn2mIgYqTAZW6yZSww16g3frYNARlbX3ssGlzBo3g5P1hPx9cV21nqWo5xU0wy
Q6VlXsZ4tOGaoej/tYiIN00SjMlyHpRLmRDJqDGeVtYDE9bkEkfXnwQskKzNQiGR
KGyfKHhn97hBkr3IWoMc6MWNbMs1yIlT91IpJY5Exf4FDG5bK/q4MQERDJ3zTDzL
hfJjimGPjRLvU8/dIigL3zf1F/50UewM959DbSm1qW2FdDe938xnXZAwwSsrwUMp
djjm14VzVlY2H6JNW2JMX0o5a5E80QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNdA
De+Oti0PThQ95F+h+rScM2iaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRjA3MTZFOERENjAxMUVGQTI2N0MzODY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmluAMA0GCSqGSIb3DQEB
CwUAA4IBAQAFlwRnrtvu2s3JO2sPZaCdd5B5zGhAUxQlZlzL7G0IqCiU78P+bvnb
1FuGxWHqhyQkp167ItL8xlRiZ0T4co+pfiTh4BEGTM1NONOUqvb4UncXrEP9x7pQ
p1ZQ9F8MiDESpFGAu241Ivn3mHhdiBp5hfi8ccWnBF72+HrJmNDHdzSlITXOGztA
dFrEgA9xlClXmECwMhFqV9pfYO31Xv9BO9i/VkKR5gi+fIB98qKL24ehvsmBtS+t
7ZZzADN5RE6fP1Ss7gwAWGbM98f/E9t5JGhSivalYne+nLu/7pWnxRGVOGbomksd
FwY1b1raYGdWnYJWFpz42ILoccj7ZRFB
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:08:04 2025 by rpki-client