Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3886738C9C111EFAAEAB396762E951A.roa
File: D3886738C9C111EFAAEAB396762E951A.roa (raw, json)
Hash identifier: JNW8YdKSrD+v1bM3hduUubNfN0J7Tg7dG5kWOPnDKgQ=
Subject key identifier: E4:D7:90:17:95:13:69:15:F1:3D:B3:3F:55:94:D1:0D:C5:DA:3D:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01348C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3886738C9C111EFAAEAB396762E951A.roa
Signing time: Fri 03 Jan 2025 10:59:39 +0000
ROA not before: Fri 03 Jan 2025 10:59:35 +0000
ROA not after: Fri 07 Feb 2025 10:59:35 +0000
asID: 214492
IP address blocks: 154.207.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78988 (0x1348c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 10:59:35 2025 GMT
Not After : Feb 7 10:59:35 2025 GMT
Subject: CN=6777c31b-9506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:65:bd:20:bb:ec:0c:6a:9a:99:c4:ed:a0:
33:bd:f7:49:6d:6c:1c:71:08:40:39:0d:5b:c9:24:
b9:8a:80:13:0f:94:10:de:4b:84:8e:b0:b8:87:be:
5f:06:d1:1a:55:ac:59:d3:4d:dc:c6:a1:55:6f:c8:
33:13:86:61:a8:a0:cc:5d:1b:e0:76:ac:c3:e7:cd:
f7:89:f6:08:ba:82:c5:0e:e8:cd:58:61:9b:57:03:
e8:37:92:07:d1:b8:0f:b4:f5:b3:29:b2:ef:67:12:
b9:07:15:2b:46:d8:6b:0d:e5:54:e6:a6:77:ec:f8:
91:e5:3d:b3:77:31:b0:3a:c5:9d:28:e1:bd:6f:af:
e8:aa:d8:3f:9c:1c:09:44:12:6e:8f:1d:48:3d:75:
20:8e:48:94:38:b8:f7:56:26:87:e8:72:94:cd:fb:
fd:57:6e:2c:e0:0e:57:6d:11:fa:1b:da:3c:1d:da:
b3:b6:7a:fc:7d:f8:2c:61:7b:b5:38:43:fe:11:26:
95:59:60:46:6b:06:db:c6:d1:53:0c:0a:cf:f0:e8:
58:21:c1:31:ff:ac:f8:b8:52:59:95:aa:67:84:c2:
fc:09:fa:1a:8f:25:0e:4f:2f:58:a7:4c:7f:e8:45:
34:57:d7:d1:5d:0f:af:5e:75:9c:ba:d3:87:89:d3:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D7:90:17:95:13:69:15:F1:3D:B3:3F:55:94:D1:0D:C5:DA:3D:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3886738C9C111EFAAEAB396762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.91.0/24
Signature Algorithm: sha256WithRSAEncryption
97:7e:6a:bc:b0:67:8a:d2:67:7e:c4:f9:44:05:9a:57:18:90:
cc:1b:a3:47:81:44:2a:aa:af:43:44:08:35:35:a2:fe:c9:80:
ba:9d:4b:cf:00:7a:10:4a:9e:48:dd:c4:ad:01:a9:7d:bc:85:
89:52:74:fd:78:4c:4a:75:fb:10:ab:5e:7a:41:77:af:8b:c6:
6b:1d:51:bc:4b:bd:91:b7:40:81:a1:a3:3d:98:f6:a8:17:b4:
83:d5:c3:72:36:b4:8d:20:f1:12:d2:35:a4:a6:08:28:c9:54:
f6:b2:b1:4b:9e:31:ef:77:77:8f:53:e7:16:61:15:c0:55:ce:
84:1c:88:53:76:a6:41:4d:8d:80:d8:90:16:08:c9:2e:cc:eb:
ae:ea:e9:7f:7e:55:13:bb:1b:0f:1a:ba:b6:14:1c:84:99:fd:
ba:db:19:3f:30:48:0c:34:25:de:7a:55:a5:75:2d:d6:8d:56:
41:ef:13:42:3f:db:99:10:86:26:14:a4:1c:b7:9a:a9:25:d2:
2b:b3:a1:f7:bb:a5:44:7c:d6:a9:32:6d:69:fa:bb:f8:c1:19:
de:cc:bc:d8:3d:9b:8d:7b:6a:c1:df:7e:d3:27:23:47:17:b0:
89:2e:c9:c6:8e:ca:e8:b0:bf:6b:49:e0:db:34:66:3f:ca:0c:
02:c3:f4:60
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATSMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAzMTA1OTM1WhcNMjUwMjA3MTA1OTM1WjAYMRYw
FAYDVQQDEw02Nzc3YzMxYi05NTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlRtlvSC77AxqmpnE7aAzvfdJbWwccQhAOQ1bySS5ioATD5QQ3kuEjrC4
h75fBtEaVaxZ003cxqFVb8gzE4ZhqKDMXRvgdqzD5833ifYIuoLFDujNWGGbVwPo
N5IH0bgPtPWzKbLvZxK5BxUrRthrDeVU5qZ37PiR5T2zdzGwOsWdKOG9b6/oqtg/
nBwJRBJujx1IPXUgjkiUOLj3ViaH6HKUzfv9V24s4A5XbRH6G9o8Hdqztnr8ffgs
YXu1OEP+ESaVWWBGawbbxtFTDArP8OhYIcEx/6z4uFJZlapnhML8CfoajyUOTy9Y
p0x/6EU0V9fRXQ+vXnWcutOHidOynQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOTX
kBeVE2kV8T2zP1WU0Q3F2j2JMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMzg4NjczOEM5QzExMUVGQUFFQUIzOTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms9bMA0GCSqGSIb3DQEB
CwUAA4IBAQCXfmq8sGeK0md+xPlEBZpXGJDMG6NHgUQqqq9DRAg1NaL+yYC6nUvP
AHoQSp5I3cStAal9vIWJUnT9eExKdfsQq156QXevi8ZrHVG8S72Rt0CBoaM9mPao
F7SD1cNyNrSNIPES0jWkpggoyVT2srFLnjHvd3ePU+cWYRXAVc6EHIhTdqZBTY2A
2JAWCMkuzOuu6ul/flUTuxsPGrq2FByEmf262xk/MEgMNCXeelWldS3WjVZB7xNC
P9uZEIYmFKQct5qpJdIrs6H3u6VEfNapMm1p+rv4wRnezLzYPZuNe2rB337TJyNH
F7CJLsnGjsrosL9rSeDbNGY/ygwCw/Rg
-----END CERTIFICATE-----
Generated at Tue Apr 29 01:01:14 2025 by rpki-client