Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4520AF2CBE711EF8877CEB7762E951A.roa
File: D4520AF2CBE711EF8877CEB7762E951A.roa (raw, json)
Hash identifier: bqebEYXb3Pl+pKts6baer02pRbDseKxtndFBQn+wU3M=
Subject key identifier: 87:43:AA:B7:22:6D:A2:9B:D1:F2:96:AF:04:4D:5F:07:AE:B0:A0:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013591
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4520AF2CBE711EF8877CEB7762E951A.roa
Signing time: Mon 06 Jan 2025 04:36:43 +0000
ROA not before: Mon 06 Jan 2025 04:36:39 +0000
ROA not after: Sat 08 Feb 2025 04:36:39 +0000
asID: 203020
IP address blocks: 154.217.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79249 (0x13591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 04:36:39 2025 GMT
Not After : Feb 8 04:36:39 2025 GMT
Subject: CN=677b5ddb-6466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:0f:44:bb:4f:cf:9e:51:fe:11:2f:93:3b:
22:9c:b5:e2:66:5f:52:6b:33:55:8f:09:46:63:aa:
48:16:8a:4e:ca:51:34:98:cc:64:eb:33:33:36:9b:
bb:da:a6:61:94:ac:62:9a:c6:26:bd:39:58:d5:a4:
92:d6:16:50:af:f6:1a:0f:f0:1e:3f:4e:25:44:74:
d0:50:ee:15:e9:ff:5f:dd:95:86:e1:65:9a:92:b9:
75:c2:ad:83:bf:bd:6a:9a:73:93:a5:7f:cb:d1:03:
a9:72:1d:77:5d:67:54:55:73:58:5b:25:65:b3:5d:
cb:5b:8b:41:96:2b:a4:64:8f:ac:d4:f7:42:89:e5:
5b:da:53:8e:9a:79:14:11:7a:bd:5e:c7:8c:b9:54:
2e:b6:51:3c:43:a2:99:89:7f:da:3d:7e:4d:3c:09:
42:f7:9a:5c:66:fb:50:b4:70:d3:44:c2:78:34:2f:
56:52:d6:73:42:33:84:80:6f:e5:51:94:69:2d:ec:
80:cf:1c:35:55:c6:17:92:47:77:59:5a:57:66:d3:
86:ac:ed:41:26:df:13:7f:46:fe:c5:d2:49:dc:95:
91:be:4e:4a:aa:51:24:72:ec:68:58:26:73:ed:0d:
37:b3:11:5a:21:a9:5c:b8:b8:d9:24:3a:90:f7:40:
7c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:43:AA:B7:22:6D:A2:9B:D1:F2:96:AF:04:4D:5F:07:AE:B0:A0:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4520AF2CBE711EF8877CEB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.134.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:53:4a:b2:f4:92:41:c7:f5:ee:8d:98:af:35:54:aa:b3:cc:
8f:8e:38:5c:55:6f:ac:27:43:7f:88:da:1c:5e:a5:88:08:c9:
5f:76:0a:1a:c3:1c:5e:91:ff:09:4e:50:c5:b0:41:47:a6:d9:
b7:72:62:f6:3b:77:62:e2:69:dd:4f:1b:3b:68:b8:91:d6:70:
bd:b4:af:15:95:a4:d3:9f:22:16:bb:13:b7:fe:9d:e1:2d:5f:
8b:3e:8f:08:3d:49:c4:86:d8:1b:67:69:df:21:48:91:8e:a8:
30:62:3d:6d:4d:ae:e2:ea:9f:33:db:69:1e:d3:9c:f6:2d:51:
0a:e4:bd:52:14:51:ea:0f:9a:c2:af:99:59:6e:41:1a:d6:94:
4f:ca:77:75:ca:27:ba:d7:e9:5b:0c:3a:bd:00:cf:cb:c3:2b:
92:73:99:21:dc:a1:d3:7c:3b:4f:bd:6f:2c:41:21:25:6e:3d:
0b:fa:96:fb:51:e4:76:52:3c:06:8f:af:12:e1:58:b0:5a:3f:
ec:c1:47:ee:9a:dd:1a:d8:26:5d:51:2a:12:87:ec:52:d9:40:
bc:a9:db:0c:95:f6:85:ff:2b:e2:d1:06:e3:95:9a:8d:f9:dd:
46:fb:6e:a0:47:04:56:c1:99:84:4c:c3:0f:d8:fe:21:4c:13:
e3:b5:b3:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATWRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA2MDQzNjM5WhcNMjUwMjA4MDQzNjM5WjAYMRYw
FAYDVQQDEw02NzdiNWRkYi02NDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoAYPRLtPz55R/hEvkzsinLXiZl9SazNVjwlGY6pIFopOylE0mMxk6zMz
Npu72qZhlKximsYmvTlY1aSS1hZQr/YaD/AeP04lRHTQUO4V6f9f3ZWG4WWakrl1
wq2Dv71qmnOTpX/L0QOpch13XWdUVXNYWyVls13LW4tBliukZI+s1PdCieVb2lOO
mnkUEXq9XseMuVQutlE8Q6KZiX/aPX5NPAlC95pcZvtQtHDTRMJ4NC9WUtZzQjOE
gG/lUZRpLeyAzxw1VcYXkkd3WVpXZtOGrO1BJt8Tf0b+xdJJ3JWRvk5KqlEkcuxo
WCZz7Q03sxFaIalcuLjZJDqQ90B82QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIdD
qrcibaKb0fKWrwRNXweusKDUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENDUyMEFGMkNCRTcxMUVGODg3N0NFQjc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmtmGMA0GCSqGSIb3DQEB
CwUAA4IBAQCsU0qy9JJBx/XujZivNVSqs8yPjjhcVW+sJ0N/iNocXqWICMlfdgoa
wxxekf8JTlDFsEFHptm3cmL2O3di4mndTxs7aLiR1nC9tK8VlaTTnyIWuxO3/p3h
LV+LPo8IPUnEhtgbZ2nfIUiRjqgwYj1tTa7i6p8z22ke05z2LVEK5L1SFFHqD5rC
r5lZbkEa1pRPynd1yie61+lbDDq9AM/LwyuSc5kh3KHTfDtPvW8sQSElbj0L+pb7
UeR2UjwGj68S4ViwWj/swUfumt0a2CZdUSoSh+xS2UC8qdsMlfaF/yvi0QbjlZqN
+d1G+26gRwRWwZmETMMP2P4hTBPjtbO/
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:01:03 2025 by rpki-client