Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6318DB0D51A11EFBD434D5A762E951A.roa
File: E6318DB0D51A11EFBD434D5A762E951A.roa (raw, json)
Hash identifier: lnECdNR97gxEyjE9Gk0x4nIbTAkB4On/MaRzwv2xh6A=
Subject key identifier: AE:6B:4B:A5:41:2C:AA:0A:05:67:44:B4:6E:21:F4:81:20:F6:0A:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D55
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6318DB0D51A11EFBD434D5A762E951A.roa
Signing time: Fri 17 Jan 2025 21:34:58 +0000
ROA not before: Fri 17 Jan 2025 21:34:54 +0000
ROA not after: Sat 22 Feb 2025 21:34:54 +0000
asID: 141883
IP address blocks: 154.212.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81237 (0x13d55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 21:34:54 2025 GMT
Not After : Feb 22 21:34:54 2025 GMT
Subject: CN=678acd02-ed35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:19:45:63:a3:83:72:23:64:be:d5:cd:cd:af:
5d:b3:41:c1:ff:01:60:9b:99:bc:ec:2a:ab:13:85:
0f:97:b0:a6:bb:6b:22:eb:da:9d:3f:c0:1c:10:d1:
d3:bf:67:78:34:e2:7d:e6:40:49:98:db:49:21:0b:
89:f0:5f:49:36:93:73:37:f0:42:94:7f:45:08:b1:
42:14:ea:9d:0a:a1:46:0f:74:0b:ef:98:4a:e2:f4:
e9:67:f0:5a:60:d9:66:70:f6:89:a9:dc:b9:4b:ec:
60:8b:20:4d:d3:da:81:bf:1f:c0:54:fd:46:6b:08:
f1:c4:30:dc:a1:f5:78:db:2c:b5:2b:3d:07:8e:9a:
0d:cb:24:de:4a:7a:a2:0a:60:10:84:65:6b:a0:bf:
08:8e:cf:ba:08:75:f7:aa:c0:d2:c3:28:fb:ff:df:
e4:00:eb:e4:a3:c7:ea:b8:15:7b:51:fa:73:65:3c:
d8:e3:2c:d8:f0:d3:c0:10:9b:79:b3:ec:85:01:d4:
24:6c:09:9e:5e:b7:2a:1d:36:bb:5b:33:5f:2a:cf:
94:e1:ec:c1:86:9b:c7:1c:22:c6:2d:80:bd:38:d4:
c0:f1:61:5a:27:19:a8:df:d0:23:01:5c:b2:2b:bf:
4c:14:f7:be:35:01:7f:89:14:1f:f4:20:08:fa:e1:
d3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6B:4B:A5:41:2C:AA:0A:05:67:44:B4:6E:21:F4:81:20:F6:0A:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6318DB0D51A11EFBD434D5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d4:9b:5d:91:58:59:83:90:0e:fe:06:37:77:84:4b:df:e7:
72:c8:a4:7f:77:d9:ad:72:74:d4:8a:01:57:f3:e4:ce:96:d9:
be:8c:0a:a4:df:4e:7b:51:62:da:65:a7:73:c6:82:df:9a:f1:
41:c6:c3:79:3b:ab:d1:0b:95:99:d3:45:1c:71:08:ce:54:6b:
8a:7f:10:d0:ca:87:83:aa:8c:a8:ab:10:1c:e4:a6:68:a8:5d:
18:f9:db:b1:de:99:c0:2c:e0:99:72:2e:25:fc:b3:7e:71:5c:
ac:27:db:f4:23:06:19:32:59:0e:00:91:6f:a8:2e:8b:0a:6f:
fc:10:58:93:5c:fa:23:f6:28:fe:03:a7:1d:32:08:85:53:26:
bf:6b:df:23:64:0b:0b:e1:a8:d7:b1:d1:6f:b0:6e:97:b9:28:
21:ec:95:61:34:09:98:fe:1b:d6:32:b3:af:ff:28:83:91:cb:
b3:03:9d:ba:0c:a1:34:55:61:97:63:5b:65:03:5f:14:56:19:
d8:86:1f:da:6a:e8:2e:7b:01:40:77:13:8a:4e:1f:33:aa:cb:
82:86:6e:7b:2d:db:66:80:df:2b:dd:11:6a:bf:ff:de:79:86:
53:76:14:c1:8b:d8:a9:96:28:87:46:2a:81:23:69:22:5e:e7:
6e:06:9a:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT1VMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE3MjEzNDU0WhcNMjUwMjIyMjEzNDU0WjAYMRYw
FAYDVQQDEw02NzhhY2QwMi1lZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzRlFY6ODciNkvtXNza9ds0HB/wFgm5m87CqrE4UPl7Cmu2si69qdP8Ac
ENHTv2d4NOJ95kBJmNtJIQuJ8F9JNpNzN/BClH9FCLFCFOqdCqFGD3QL75hK4vTp
Z/BaYNlmcPaJqdy5S+xgiyBN09qBvx/AVP1GawjxxDDcofV42yy1Kz0HjpoNyyTe
SnqiCmAQhGVroL8Ijs+6CHX3qsDSwyj7/9/kAOvko8fquBV7UfpzZTzY4yzY8NPA
EJt5s+yFAdQkbAmeXrcqHTa7WzNfKs+U4ezBhpvHHCLGLYC9ONTA8WFaJxmo39Aj
AVyyK79MFPe+NQF/iRQf9CAI+uHTOwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK5r
S6VBLKoKBWdEtG4h9IEg9gpmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNjMxOERCMEQ1MUExMUVGQkQ0MzRENUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtSAMA0GCSqGSIb3DQEB
CwUAA4IBAQAv1JtdkVhZg5AO/gY3d4RL3+dyyKR/d9mtcnTUigFX8+TOltm+jAqk
3057UWLaZadzxoLfmvFBxsN5O6vRC5WZ00UccQjOVGuKfxDQyoeDqoyoqxAc5KZo
qF0Y+dux3pnALOCZci4l/LN+cVysJ9v0IwYZMlkOAJFvqC6LCm/8EFiTXPoj9ij+
A6cdMgiFUya/a98jZAsL4ajXsdFvsG6XuSgh7JVhNAmY/hvWMrOv/yiDkcuzA526
DKE0VWGXY1tlA18UVhnYhh/aauguewFAdxOKTh8zqsuChm57LdtmgN8r3RFqv//e
eYZTdhTBi9ipliiHRiqBI2kiXuduBpqH
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:16:09 2025 by rpki-client