Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1E6CB64D73411EF9AF4ABA2762E951A.roa
File: E1E6CB64D73411EF9AF4ABA2762E951A.roa (raw, json)
Hash identifier: OF7BeugrDZbcQ9w+A9drie5VCOscN1Wc9zpTliFKm3U=
Subject key identifier: 63:29:59:9F:73:9C:A1:CE:37:AE:07:CE:F0:09:DD:8F:76:D4:3E:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1E6CB64D73411EF9AF4ABA2762E951A.roa
Signing time: Mon 20 Jan 2025 13:46:00 +0000
ROA not before: Mon 20 Jan 2025 13:45:56 +0000
ROA not after: Wed 05 Feb 2025 13:45:56 +0000
asID: 135097
IP address blocks: 154.213.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81502 (0x13e5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 20 13:45:56 2025 GMT
Not After : Feb 5 13:45:56 2025 GMT
Subject: CN=678e5398-abbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:21:b9:3a:28:d7:ec:57:d1:f1:da:4a:7d:aa:
b4:cd:3f:61:36:70:85:d4:33:bc:a0:11:0c:30:ef:
f9:9a:16:92:de:95:45:80:d1:2a:03:fe:aa:f7:38:
e7:b2:e7:3e:08:2e:a7:81:04:32:e0:dc:5f:e9:ff:
f5:35:3b:1c:6a:db:5f:50:0e:aa:1c:b5:1f:71:fc:
0b:39:cc:ff:a3:76:aa:8b:36:ea:9f:8e:d7:48:bd:
07:6b:a7:83:72:0f:32:86:68:87:de:07:9d:28:68:
c3:c5:f4:b1:e5:43:2d:8f:5f:92:f1:dd:45:91:10:
a6:1c:a0:85:36:da:11:9c:b4:0f:ab:18:0c:8b:23:
42:a8:ba:7c:44:0b:de:a9:04:b4:9b:62:64:a2:c1:
ae:b7:ee:ff:45:01:fe:df:64:72:3f:4c:b8:f9:78:
cb:7f:92:e5:b3:71:8a:1c:54:33:b4:8a:7d:25:22:
f1:50:1f:b6:e0:a5:03:2a:34:c7:a8:78:d1:b7:b2:
04:e1:79:19:8b:5c:ae:d5:81:75:9e:38:16:4d:a3:
92:b8:68:87:59:5c:dc:73:6b:59:01:b9:fd:a9:c7:
88:9f:6a:eb:00:d3:a7:4f:74:27:cc:7a:9b:a6:22:
b3:ca:f0:eb:8b:67:45:0e:b3:c8:84:31:0a:01:3e:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:29:59:9F:73:9C:A1:CE:37:AE:07:CE:F0:09:DD:8F:76:D4:3E:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1E6CB64D73411EF9AF4ABA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.10.0/24
Signature Algorithm: sha256WithRSAEncryption
66:4c:b8:de:c3:d6:fd:f2:9f:22:4c:a6:ed:5f:b2:d7:f5:07:
b0:0b:4b:4d:51:90:28:fa:b7:44:1c:d3:89:2a:bb:db:1d:3a:
d9:b4:d0:0c:be:64:50:ef:3a:13:c9:63:8d:86:65:d6:63:1d:
02:ac:b6:9c:07:04:8e:38:b4:27:83:8f:9f:75:c5:86:d3:11:
97:84:21:9e:f8:8c:40:6d:80:f6:9b:ee:d1:59:90:9c:c8:26:
7e:f8:c5:80:a1:1a:e6:67:1a:a2:49:59:b5:ce:f4:34:da:78:
c8:95:a9:11:8d:63:5d:df:01:b9:7b:22:a7:93:e9:e2:ab:31:
7e:78:4c:42:d1:03:4a:ae:73:fd:6d:1a:30:14:42:94:f8:59:
e1:70:c1:4b:cf:f6:6b:3f:c6:75:62:c8:68:36:dd:db:c8:f5:
68:52:51:a3:a2:ba:4e:3b:d7:f0:60:e4:5c:3a:4f:57:c6:f4:
56:d1:ed:eb:93:19:47:90:00:5e:12:f7:6c:e1:66:77:00:04:
57:3b:cf:79:36:71:35:5e:9a:d9:ab:e6:90:e8:42:0f:11:ec:
a5:17:ad:05:41:a5:8f:86:c5:e6:ed:fa:aa:d2:24:42:ab:83:
0a:11:5c:9d:2b:9f:0a:02:f0:90:96:56:ea:2e:1a:22:06:81:
b5:f1:18:ec
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT5eMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIwMTM0NTU2WhcNMjUwMjA1MTM0NTU2WjAYMRYw
FAYDVQQDEw02NzhlNTM5OC1hYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5iG5OijX7FfR8dpKfaq0zT9hNnCF1DO8oBEMMO/5mhaS3pVFgNEqA/6q
9zjnsuc+CC6ngQQy4Nxf6f/1NTscattfUA6qHLUfcfwLOcz/o3aqizbqn47XSL0H
a6eDcg8yhmiH3gedKGjDxfSx5UMtj1+S8d1FkRCmHKCFNtoRnLQPqxgMiyNCqLp8
RAveqQS0m2JkosGut+7/RQH+32RyP0y4+XjLf5Lls3GKHFQztIp9JSLxUB+24KUD
KjTHqHjRt7IE4XkZi1yu1YF1njgWTaOSuGiHWVzcc2tZAbn9qceIn2rrANOnT3Qn
zHqbpiKzyvDri2dFDrPIhDEKAT7cgQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGMp
WZ9znKHON64HzvAJ3Y921D5wMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMUU2Q0I2NEQ3MzQxMUVGOUFGNEFCQTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtUKMA0GCSqGSIb3DQEB
CwUAA4IBAQBmTLjew9b98p8iTKbtX7LX9QewC0tNUZAo+rdEHNOJKrvbHTrZtNAM
vmRQ7zoTyWONhmXWYx0CrLacBwSOOLQng4+fdcWG0xGXhCGe+IxAbYD2m+7RWZCc
yCZ++MWAoRrmZxqiSVm1zvQ02njIlakRjWNd3wG5eyKnk+niqzF+eExC0QNKrnP9
bRowFEKU+FnhcMFLz/ZrP8Z1YshoNt3byPVoUlGjorpOO9fwYORcOk9XxvRW0e3r
kxlHkABeEvds4WZ3AARXO895NnE1XprZq+aQ6EIPEeylF60FQaWPhsXm7fqq0iRC
q4MKEVydK58KAvCQllbqLhoiBoG18Rjs
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:58:59 2025 by rpki-client